Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/ca6d28687a458724c388a6b307e2b14ed40bbe1a.roa
File: ca6d28687a458724c388a6b307e2b14ed40bbe1a.roa (raw, json)
Hash identifier: isArPuFBinl+HLbNyLrWM/nKjuJoOG8fFP+WVxnGhFM=
Subject key identifier: 5B:7A:92:68:5D:F7:6A:F5:7D:99:2D:57:90:F5:6D:DE:E2:85:98:89
Certificate issuer: /CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Certificate serial: 1BF527
Authority key identifier: D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/ca6d28687a458724c388a6b307e2b14ed40bbe1a.roa
Signing time: Sat 29 Oct 2022 14:10:51 +0000
ROA not before: Tue 23 Mar 2021 14:47:41 +0000
ROA not after: Tue 24 Mar 2026 14:47:41 +0000
asID: 264660
IP address blocks: 138.186.4.0/23 maxlen: 23
138.186.4.0/24 maxlen: 24
138.186.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1832231 (0x1bf527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Validity
Not Before: Mar 23 14:47:41 2021 GMT
Not After : Mar 24 14:47:41 2026 GMT
Subject: CN=ca6d28687a458724c388a6b307e2b14ed40bbe1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:51:7c:fd:e3:1f:90:10:51:01:d5:73:95:
c9:3a:46:4c:02:47:a7:57:0d:8e:46:ff:a7:16:30:
51:f5:5c:6e:42:68:5c:6e:e7:3f:da:55:28:f5:45:
52:57:55:4a:97:2c:b2:47:13:a5:7a:1b:59:10:7f:
79:44:f1:58:ab:e1:2c:06:6d:d5:73:a6:13:be:74:
cc:df:64:bd:60:92:18:2c:6b:ee:75:15:e8:7b:b1:
c6:63:2e:a2:69:75:82:a4:f9:7a:6f:a4:ac:be:89:
98:cb:60:56:54:8d:f7:cb:cd:6d:d3:0c:6c:ec:9f:
fb:5d:fb:40:7f:f0:7e:53:5e:d2:a7:60:03:f8:0e:
bc:f4:aa:53:f3:07:15:50:82:32:50:7a:29:3b:88:
0f:0f:0c:c1:b2:ae:74:5e:9c:5d:b3:98:5a:7b:f7:
3b:4a:ba:c7:a1:1b:99:19:d7:33:40:2c:18:70:ab:
2a:2c:22:81:92:b3:c3:40:87:3b:45:60:87:9c:46:
a0:50:32:6b:16:47:47:6c:cd:db:08:c0:72:05:c7:
2f:97:9b:cf:1b:14:2f:fa:2f:e1:5e:f4:73:51:7f:
f0:49:ce:3c:2d:65:9a:3d:58:42:1e:e6:c4:16:86:
70:9f:26:23:11:15:ed:72:ed:9f:c1:a7:eb:52:a4:
ee:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7A:92:68:5D:F7:6A:F5:7D:99:2D:57:90:F5:6D:DE:E2:85:98:89
X509v3 Authority Key Identifier:
keyid:D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/ca6d28687a458724c388a6b307e2b14ed40bbe1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0e4cadafcf7e03afe28925adf350f1286db7b25.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.4.0/23
Signature Algorithm: sha256WithRSAEncryption
02:98:60:41:c4:d4:80:70:74:58:ac:4e:ac:9c:c9:fd:29:ff:
9c:a1:77:d4:23:41:3a:63:83:52:dc:d3:8c:ce:dc:0d:5e:6b:
7b:0b:a5:0d:25:a5:a1:41:d4:c1:2e:ca:5b:20:37:df:5f:b8:
5e:cc:f3:ab:5d:7d:24:71:6d:49:b2:36:16:73:a8:c1:92:1f:
04:f3:ba:08:5e:59:9e:63:ba:83:ea:fe:e4:65:56:92:10:16:
b6:bd:ad:02:0b:45:59:db:7a:56:23:2e:6f:b4:35:ef:73:bf:
16:15:95:83:19:6c:29:f4:ba:a0:24:69:21:29:54:a1:43:51:
cc:4c:c2:34:0f:86:d6:b4:84:dd:48:e7:d5:69:9a:aa:f1:fb:
13:77:8c:33:bd:aa:3d:8f:22:6c:60:36:e5:4e:88:b6:a7:3e:
e5:03:2c:b6:f7:46:0f:56:5b:16:3e:4e:7d:f8:26:41:a8:df:
29:13:88:bb:53:99:8e:1f:ec:02:18:b2:a9:f1:96:42:de:ea:
a8:c6:e1:82:aa:7d:4b:f1:d6:d2:1a:d7:28:65:11:cd:28:cc:
27:ee:36:14:56:fe:d4:61:ea:8d:0a:7c:21:7c:7e:1e:b8:51:
e6:3e:1d:e0:0b:9e:be:ce:c0:86:75:c1:c0:5c:a6:2b:6c:b9:
d4:20:57:bf
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDG/UnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
ZTRjYWRhZmNmN2UwM2FmZTI4OTI1YWRmMzUwZjEyODZkYjdiMjUwHhcNMjEwMzIz
MTQ0NzQxWhcNMjYwMzI0MTQ0NzQxWjAzMTEwLwYDVQQDEyhjYTZkMjg2ODdhNDU4
NzI0YzM4OGE2YjMwN2UyYjE0ZWQ0MGJiZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjFhRfP3jH5AQUQHVc5XJOkZMAkenVw2ORv+nFjBR9VxuQmhc
buc/2lUo9UVSV1VKlyyyRxOlehtZEH95RPFYq+EsBm3Vc6YTvnTM32S9YJIYLGvu
dRXoe7HGYy6iaXWCpPl6b6SsvomYy2BWVI33y81t0wxs7J/7XftAf/B+U17Sp2AD
+A689KpT8wcVUIIyUHopO4gPDwzBsq50Xpxds5hae/c7SrrHoRuZGdczQCwYcKsq
LCKBkrPDQIc7RWCHnEagUDJrFkdHbM3bCMByBccvl5vPGxQv+i/hXvRzUX/wSc48
LWWaPVhCHubEFoZwnyYjERXtcu2fwafrUqTuNQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFt6kmhd92r1fZktV5D1bd7ihZiJMB8GA1UdIwQYMBaAFNaRNNTUo5m3dxWU
ae+IZyBfwVVzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjBlNGNh
ZGFmY2Y3ZTAzYWZlMjg5MjVhZGYzNTBmMTI4NmRiN2IyNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWQ4YjhmYWEtYmJlMy00MzcxLWE5NWEtZGIxOTdk
ZmQzYmJmL2NhNmQyODY4N2E0NTg3MjRjMzg4YTZiMzA3ZTJiMTRlZDQwYmJlMWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZDhiOGZhYS1iYmUzLTQzNzEtYTk1YS1kYjE5
N2RmZDNiYmYvYjBlNGNhZGFmY2Y3ZTAzYWZlMjg5MjVhZGYzNTBmMTI4NmRiN2Iy
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAYq6BDANBgkqhkiG9w0BAQsFAAOCAQEAAphgQcTUgHB0WKxO
rJzJ/Sn/nKF31CNBOmODUtzTjM7cDV5rewulDSWloUHUwS7KWyA331+4Xszzq119
JHFtSbI2FnOowZIfBPO6CF5ZnmO6g+r+5GVWkhAWtr2tAgtFWdt6ViMub7Q173O/
FhWVgxlsKfS6oCRpISlUoUNRzEzCNA+G1rSE3Ujn1WmaqvH7E3eMM72qPY8ibGA2
5U6Itqc+5QMstvdGD1ZbFj5OffgmQajfKROIu1OZjh/sAhiyqfGWQt7qqMbhgqp9
S/HW0hrXKGURzSjMJ+42FFb+1GHqjQp8IXx+HrhR5j4d4Auevs7AhnXBwFymK2y5
1CBXvw==
-----END CERTIFICATE-----
Generated at Sat Jul 29 03:44:01 2023 by rpki-client on console-ams.rpki-client.org