Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/05a08fc7806e87fd4202ab014cd10766f86c4df8.roa
File: 05a08fc7806e87fd4202ab014cd10766f86c4df8.roa (raw, json)
Hash identifier: Kq3K50UUP6XlDOFzSz8cIGGyNoh048EC9PQtRnszPec=
Subject key identifier: EF:77:28:7B:23:C4:A6:EF:98:B3:BB:1D:B5:AD:E3:9D:70:17:19:59
Certificate issuer: /CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
Certificate serial: 0D647E
Authority key identifier: C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/05a08fc7806e87fd4202ab014cd10766f86c4df8.roa
Signing time: Wed 24 Mar 2021 14:37:38 +0000
ROA not before: Wed 24 Mar 2021 14:37:36 +0000
ROA not after: Tue 24 Mar 2026 14:37:36 +0000
asID: 52263
IP address blocks: 138.118.80.0/22 maxlen: 24
170.150.56.0/22 maxlen: 24
170.246.156.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 20:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877694 (0xd647e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
Validity
Not Before: Mar 24 14:37:36 2021 GMT
Not After : Mar 24 14:37:36 2026 GMT
Subject: CN=05a08fc7806e87fd4202ab014cd10766f86c4df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:91:87:fb:40:5e:57:f3:44:e7:df:de:07:d7:
d3:bf:b7:7b:91:82:e1:33:78:06:d2:18:6c:85:81:
13:11:08:f3:de:1b:70:f1:56:ff:63:80:ff:6d:e1:
44:27:b1:cb:37:49:0c:8b:ea:3b:1a:24:43:99:d2:
e8:78:fc:1c:d3:34:7e:7b:ce:28:7d:fd:6d:26:7b:
f1:be:fc:be:74:28:28:c8:37:c8:0b:07:1e:43:fc:
69:b7:97:f5:3a:3d:be:11:35:4e:18:0d:a1:ec:5b:
9a:34:b4:cb:50:97:d2:ae:67:ed:0d:03:50:1f:25:
85:96:de:90:26:1f:e5:11:96:4d:da:15:e0:12:50:
16:9e:c9:ec:76:03:43:4a:39:0e:e8:fd:4c:25:5a:
e6:62:f8:de:79:e7:69:47:32:8d:0e:6e:a7:dd:a8:
4b:d7:4c:84:84:40:38:b4:f7:d9:10:16:30:a1:18:
a9:df:86:85:ba:a7:2a:e3:e0:03:c0:e3:15:a7:b9:
7c:b1:99:64:b0:0e:1d:84:6b:63:e6:fe:8e:a6:94:
60:41:76:dd:fb:3e:34:c3:1a:9d:16:7c:bd:6b:0d:
ea:c7:fa:13:d0:74:e6:6f:6f:bb:8f:a0:c7:29:19:
52:4d:5c:7e:d4:23:fe:2b:93:3f:f2:47:2e:76:86:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:77:28:7B:23:C4:A6:EF:98:B3:BB:1D:B5:AD:E3:9D:70:17:19:59
X509v3 Authority Key Identifier:
keyid:C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/05a08fc7806e87fd4202ab014cd10766f86c4df8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.80.0/22
170.150.56.0/22
170.246.156.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:7d:66:8b:fc:f0:63:b6:1c:83:e2:0c:d7:91:d9:06:71:f5:
f4:61:e1:71:5a:37:7e:37:d1:8a:da:58:c5:06:b4:c2:20:82:
b6:87:bf:2b:be:7f:ab:d4:cf:a9:54:0a:4c:11:43:94:a5:ff:
43:86:55:85:02:37:86:d0:ec:ab:c4:76:96:51:36:a5:28:4a:
50:d7:4b:9a:0d:b8:6a:16:cf:0a:79:b5:71:a8:a3:56:09:d2:
c7:bc:86:a1:3c:54:b1:7d:8d:75:10:6c:1c:01:bb:8b:b8:e1:
50:c0:92:58:80:b7:06:9b:9d:de:5a:7d:11:ca:f9:47:3f:91:
e4:b3:e2:52:70:6d:1b:79:01:cd:96:e0:cd:51:d8:3a:ad:ea:
55:c7:61:ae:15:6e:2c:6a:f3:f6:ed:a0:7a:23:14:0a:70:d9:
a6:33:63:11:c0:db:04:e6:57:41:50:88:ee:7d:2b:8c:30:40:
32:f5:e1:09:40:82:ac:9b:c2:09:0c:c1:fa:24:9b:53:3a:e2:
89:aa:d9:5b:88:4d:d9:fb:b8:f5:70:41:09:34:88:23:f3:dc:
be:07:95:24:85:89:d9:ca:6a:37:9f:60:6c:ea:03:ed:fd:c2:
76:7b:63:b3:b9:32:f5:86:6c:72:23:13:be:95:ff:27:c0:27:
3e:e5:54:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 23:17:17 2024 by rpki-client on console-fra.rpki-client.org