Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/5a407ef9a4a0e788a797e52ee13d87646676b129.roa
File: 5a407ef9a4a0e788a797e52ee13d87646676b129.roa (raw, json)
Hash identifier: IXBo/Ds1XMm7+QRpv/3OJMulmmVyoJ2+t497NYhJ5Tk=
Subject key identifier: B2:85:9D:C3:F4:95:B3:7B:DD:C2:79:15:65:9B:CD:36:41:AA:83:9A
Certificate issuer: /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial: 0E908B
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/5a407ef9a4a0e788a797e52ee13d87646676b129.roa
Signing time: Wed 24 Mar 2021 14:29:29 +0000
ROA not before: Wed 24 Mar 2021 14:29:26 +0000
ROA not after: Tue 24 Mar 2026 14:29:26 +0000
asID: 52323
IP address blocks: 181.16.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954507 (0xe908b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Validity
Not Before: Mar 24 14:29:26 2021 GMT
Not After : Mar 24 14:29:26 2026 GMT
Subject: CN=5a407ef9a4a0e788a797e52ee13d87646676b129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:de:dc:b6:a4:ff:9f:8f:c9:84:5b:cc:af:
e9:28:7b:38:3a:8c:1d:72:e6:b2:06:36:6a:f6:37:
9e:2b:ad:4c:98:33:13:a8:9d:34:7c:9d:76:27:3f:
69:7c:1b:fc:60:0a:75:cf:77:40:2f:25:cd:07:fa:
73:84:70:77:ef:6d:1e:58:1e:cc:ba:30:fa:ff:23:
bb:52:ad:bc:d3:5d:3d:1f:30:00:7a:a3:ae:11:a3:
c2:e2:1b:90:b3:49:4d:ed:ff:52:64:50:62:dc:f8:
36:54:2d:a9:9c:4d:63:54:c9:48:9a:3e:a2:ba:ec:
12:87:53:9d:c3:0f:12:c6:70:85:d4:a3:23:c8:a7:
8d:83:13:d7:5a:fa:e1:63:a0:2d:35:77:1d:e2:fa:
67:18:79:a4:7d:73:8e:05:68:a5:25:08:f6:dc:4e:
a7:bd:46:5a:27:bc:bd:e7:cd:15:87:db:90:72:e4:
91:41:81:63:db:8b:d0:68:2b:74:ac:57:59:51:11:
0d:2d:6f:c6:62:82:85:29:74:9b:b3:8d:97:ed:17:
cc:35:c0:73:44:6f:f9:81:e8:e6:a0:1e:81:a8:62:
df:ed:a7:96:62:5d:02:4e:57:d8:a0:45:a3:bf:4e:
3f:2d:d2:cf:c1:43:81:d4:4a:57:bd:e5:e3:ab:5d:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:85:9D:C3:F4:95:B3:7B:DD:C2:79:15:65:9B:CD:36:41:AA:83:9A
X509v3 Authority Key Identifier:
keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/5a407ef9a4a0e788a797e52ee13d87646676b129.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.16.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d6:1a:28:ed:8d:a2:d2:90:9c:6d:42:84:35:33:41:ac:23:
c1:46:37:28:d0:c8:33:4d:9c:98:5b:79:b4:19:10:c1:13:68:
7c:39:03:41:8c:ad:3d:aa:e1:14:07:9f:27:46:7e:4a:a0:bb:
ad:d0:38:04:08:91:2a:d6:42:f0:a8:6c:72:02:bf:48:20:b8:
92:26:dc:cb:10:ef:41:89:bb:a8:9d:41:af:d6:ba:ff:8c:5b:
42:e2:95:32:45:cc:52:2b:e9:30:1a:5d:94:c5:d5:af:2e:bd:
05:35:58:a0:cf:e2:84:3c:c0:02:b8:cd:d6:d1:a1:a8:76:74:
77:4b:ef:70:40:09:58:37:60:b1:10:aa:43:8d:e8:be:7a:34:
8c:13:1c:26:6c:e4:dd:56:58:47:66:4c:44:be:e8:ce:4b:4d:
56:1c:21:41:0b:78:c0:9c:83:1e:a0:1c:76:9f:91:9b:04:18:
a0:fd:2a:39:c3:c2:10:a5:ba:af:38:cb:95:5b:72:b2:4a:7c:
34:62:ac:4e:09:bb:ac:c5:fa:98:d8:50:e5:b0:0d:d6:25:0c:
89:f5:ea:dc:5c:0c:de:51:36:8e:1a:9f:b8:64:da:26:9d:37:
5e:d0:76:71:4c:d0:c3:2b:f5:57:26:b5:a7:98:fc:35:9d:f7:
0f:e2:31:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org