Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/9cc021bdf8145a57ddb384aaf8bd22722c4c1664.roa
File: 9cc021bdf8145a57ddb384aaf8bd22722c4c1664.roa (raw, json)
Hash identifier: lRbzD3CTxoUU8cBJpm5I1AhI/kaA69yr8NlypnrvEHA=
Subject key identifier: F2:DC:B2:27:2A:C3:07:E2:EF:A5:F5:19:9E:A5:02:6E:32:84:9D:71
Certificate issuer: /CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
Certificate serial: 0DA9FD
Authority key identifier: 20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/9cc021bdf8145a57ddb384aaf8bd22722c4c1664.roa
Signing time: Wed 24 Mar 2021 14:42:15 +0000
ROA not before: Wed 24 Mar 2021 14:42:15 +0000
ROA not after: Tue 24 Mar 2026 14:42:15 +0000
asID: 262234
IP address blocks: 131.108.232.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895485 (0xda9fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
Validity
Not Before: Mar 24 14:42:15 2021 GMT
Not After : Mar 24 14:42:15 2026 GMT
Subject: CN=9cc021bdf8145a57ddb384aaf8bd22722c4c1664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:02:6b:26:57:4e:04:4c:2a:6d:27:97:8a:0b:
f2:f0:eb:d6:61:34:3d:1e:02:ee:fb:09:ab:80:1c:
ed:5f:ab:5d:4d:67:df:47:e6:6b:53:1d:9e:1d:f8:
2f:91:81:12:91:17:62:16:52:ff:ac:31:54:68:b9:
82:1b:a9:df:52:66:a2:89:f0:7c:28:5e:af:79:b3:
0b:eb:c5:86:5b:7a:22:50:e0:79:d3:c1:a7:ee:01:
9c:64:88:f6:34:9a:eb:83:1e:cb:8b:31:90:26:ed:
46:eb:f6:81:36:90:04:d4:18:d9:df:cd:e0:6a:7a:
75:e6:3d:5a:c5:c2:16:ef:43:18:4f:09:74:a6:70:
85:a8:e5:6a:63:52:21:9b:14:33:e3:05:4d:fc:94:
6a:ff:12:2b:bc:dd:2d:09:75:3d:65:5d:78:24:dc:
75:c9:2e:29:c3:c9:8c:7b:00:9a:03:0a:76:1f:5f:
df:00:43:95:d4:6c:c4:3d:21:f9:75:83:6d:38:69:
0b:4a:97:6f:2a:23:ae:4d:2d:69:2d:68:17:2d:cf:
73:31:c4:5d:c2:53:6e:95:0e:3a:24:9e:ce:ba:1a:
7a:84:67:99:a6:7c:58:d7:cd:4c:d7:42:c4:fe:77:
92:ff:5b:dd:03:09:76:11:7d:0c:0e:55:e7:20:bd:
7b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DC:B2:27:2A:C3:07:E2:EF:A5:F5:19:9E:A5:02:6E:32:84:9D:71
X509v3 Authority Key Identifier:
keyid:20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/9cc021bdf8145a57ddb384aaf8bd22722c4c1664.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/50029dd9024c2c49dc8eb4a48df44bfd015f8874.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.232.0/22
Signature Algorithm: sha256WithRSAEncryption
32:85:41:e1:83:a6:0e:68:3e:49:f8:3d:cc:1d:c2:cf:ae:66:
61:e1:b7:a6:b2:8d:a8:f9:9c:cd:99:ee:37:00:f6:bf:98:6c:
4e:5d:74:29:b1:35:5b:19:87:32:bc:c5:95:65:2c:7e:37:b0:
67:8c:7b:17:e2:d5:6b:a2:92:bf:09:ff:4c:85:dc:37:e0:7d:
b9:c9:96:19:41:0c:f0:05:26:f4:8e:8d:b6:0b:93:12:f7:d3:
89:67:28:b3:27:ee:2a:47:c1:c2:33:fa:9a:89:15:ec:98:9c:
11:49:85:ee:b1:43:bb:c7:99:23:35:5a:f3:69:89:ce:2c:c7:
5f:14:70:f1:d2:38:bd:80:2a:0e:80:8b:ff:48:3f:1f:76:1f:
ba:e5:5c:07:0c:98:59:de:fd:d5:bb:0a:d2:5a:13:27:bd:1c:
3c:eb:ff:05:1e:28:ea:08:86:ec:d7:c2:5b:67:a4:8d:af:88:
86:d6:a8:44:95:97:e8:07:ab:88:05:ae:52:01:8f:3a:c1:19:
c5:5b:8a:d4:61:9a:af:2a:7c:ff:69:68:0a:1e:38:93:ab:77:
51:d3:59:25:d3:8a:f6:61:ce:be:a6:86:fc:0b:38:be:d9:20:
f6:9b:70:32:16:c6:f6:86:61:8c:b3:a1:c5:9d:ea:71:55:94:
72:53:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 27 23:59:15 2023 by rpki-client on console-ams.rpki-client.org