Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/3ded578f16da883f298692cf5fbd9f3ea641c75d.roa
File: 3ded578f16da883f298692cf5fbd9f3ea641c75d.roa (raw, json)
Hash identifier: scpCcMCGfUOqbwmEn7qahHd5RKyZEEHlcuTNtaO+lZk=
Subject key identifier: 21:F7:97:F6:D3:F3:F6:52:26:F0:D3:4B:45:A4:FA:6E:15:5D:EB:25
Certificate issuer: /CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Certificate serial: 0DAB9D
Authority key identifier: D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/3ded578f16da883f298692cf5fbd9f3ea641c75d.roa
Signing time: Wed 24 Mar 2021 14:47:42 +0000
ROA not before: Wed 24 Mar 2021 14:47:41 +0000
ROA not after: Tue 24 Mar 2026 14:47:41 +0000
asID: 264660
IP address blocks: 138.186.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895901 (0xdab9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Validity
Not Before: Mar 24 14:47:41 2021 GMT
Not After : Mar 24 14:47:41 2026 GMT
Subject: CN=3ded578f16da883f298692cf5fbd9f3ea641c75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:ca:24:45:f9:61:7d:99:be:c1:da:48:98:
75:13:5b:2e:15:a9:ee:25:f5:43:21:ca:eb:e8:a1:
13:1a:95:63:c2:0e:a7:29:5a:52:e0:02:2b:72:bf:
e3:97:f8:7b:1d:02:a6:46:b2:91:ad:ca:91:73:dd:
e9:7b:a4:0f:d0:e0:5c:6b:f0:f4:ae:23:74:a4:11:
ce:60:10:32:db:c6:f7:ad:a6:52:be:2a:e8:bc:3a:
00:f6:62:ca:70:21:c4:de:48:e9:f2:14:8c:48:81:
88:27:88:a5:b9:43:05:db:43:08:42:99:1f:12:56:
12:37:e1:b3:0e:22:9f:7f:e5:36:63:db:07:d4:64:
ae:b9:84:02:fd:7f:d9:44:3b:98:ad:19:e5:d3:a5:
d0:6d:c3:e5:b9:6d:2d:94:6a:00:e6:b5:ce:32:de:
f6:15:3f:65:1d:59:bf:4e:36:9b:24:12:34:44:64:
ed:d3:b1:35:19:bb:aa:fe:03:a5:5d:4e:1a:5b:ea:
e8:f0:24:eb:ae:da:24:6f:07:29:cb:d2:57:01:7b:
66:4f:b3:cd:b5:f9:e3:ca:9d:c9:78:1d:44:e0:7b:
9d:b0:88:43:97:54:37:27:6a:c9:e0:45:09:bb:32:
ea:df:59:e7:e1:70:c8:c7:b5:59:1d:00:e0:b3:ef:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F7:97:F6:D3:F3:F6:52:26:F0:D3:4B:45:A4:FA:6E:15:5D:EB:25
X509v3 Authority Key Identifier:
keyid:D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/3ded578f16da883f298692cf5fbd9f3ea641c75d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0e4cadafcf7e03afe28925adf350f1286db7b25.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:29:ce:30:db:4b:42:79:ea:a9:47:87:25:d9:84:17:3c:e1:
14:85:9b:4c:be:5f:e9:ec:86:27:ad:ba:2f:76:00:cd:65:a5:
9c:4c:03:8b:d5:e7:df:79:2d:24:47:1c:b6:aa:67:ce:48:21:
d6:00:df:90:af:f3:9e:81:8d:d9:48:29:f2:d7:27:13:17:9c:
c5:cd:5a:7c:85:16:b7:cf:32:7d:0d:7c:3a:81:b9:18:64:88:
60:0a:e8:1e:73:98:28:46:66:d4:82:f9:c9:b9:10:89:98:8c:
0c:24:c3:bc:8c:0c:42:fe:dd:2a:c4:28:11:e3:61:58:89:ed:
94:08:04:5d:ff:73:e8:13:cb:8f:f5:7b:f8:a3:e2:8d:d8:ca:
ab:4f:00:45:ee:59:66:7b:7a:b3:64:d6:0d:fb:fa:1f:b5:0f:
10:d9:05:60:66:3f:82:72:5b:b9:6c:c0:f8:a9:0a:1c:b5:0e:
b8:38:9b:c8:cf:2e:f0:bb:40:65:c9:9e:48:e4:e1:e4:38:0c:
03:10:f0:73:5a:87:69:e1:4b:51:f2:23:b8:16:18:d3:e1:c7:
b6:80:06:1f:d0:3c:56:c5:a8:73:c0:87:0d:3e:fb:bb:46:32:
d5:16:ed:1c:28:4b:33:e3:fa:bf:06:c3:70:03:7d:3f:17:32:
3a:b5:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org