Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/2e40c27f31aca0981d86bc52f2870e77dc908a2e.roa
File: 2e40c27f31aca0981d86bc52f2870e77dc908a2e.roa (raw, json)
Hash identifier: cQP1GxPJZ73NlbjpnKl/1stmkKzkBwKs0YrUiyNDzGw=
Subject key identifier: AD:9F:DF:91:97:AA:EA:AC:26:EE:95:F5:77:8B:09:2A:57:60:3D:75
Certificate issuer: /CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
Certificate serial: 0D6366
Authority key identifier: C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/2e40c27f31aca0981d86bc52f2870e77dc908a2e.roa
Signing time: Wed 24 Mar 2021 14:37:37 +0000
ROA not before: Wed 24 Mar 2021 14:37:36 +0000
ROA not after: Tue 24 Mar 2026 14:37:36 +0000
asID: 52263
IP address blocks: 138.118.80.0/22 maxlen: 24
170.150.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 20:46:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877414 (0xd6366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
Validity
Not Before: Mar 24 14:37:36 2021 GMT
Not After : Mar 24 14:37:36 2026 GMT
Subject: CN=2e40c27f31aca0981d86bc52f2870e77dc908a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:e3:2c:6e:e5:1a:b9:3b:e9:02:de:16:7c:
dd:57:71:45:ab:0d:94:54:cc:e4:b5:53:53:fe:88:
8a:8d:2a:99:e9:63:14:31:df:c3:57:81:86:d1:1f:
d4:45:d7:76:ec:ec:0a:06:c6:c5:8d:06:ea:6c:f2:
37:09:43:3a:3a:f3:11:f3:99:21:9a:67:26:b5:1f:
dc:39:b2:7d:f6:89:e4:4c:41:61:91:61:03:98:6b:
10:89:36:2b:60:cd:84:f9:20:b9:0b:d4:1b:9d:60:
3b:8e:5f:83:8f:ae:d3:18:64:e6:c3:31:8b:25:4a:
f1:ea:01:94:80:89:22:4f:c8:85:5b:82:74:fb:55:
54:7d:6c:4b:6f:d1:16:12:3c:78:63:50:ea:ca:23:
69:f2:62:86:49:3e:52:8c:89:a0:0c:89:f1:ca:73:
85:b4:f3:79:73:01:ab:95:c6:53:6e:b0:c8:de:6e:
34:d6:8a:b2:8b:45:ad:6a:8d:91:0d:3b:60:88:cc:
38:83:a3:46:8f:a1:a2:9a:a1:24:58:07:bc:cb:6e:
d4:68:ab:c6:66:46:c5:4e:34:f2:9c:f3:ba:fe:4d:
74:bd:a5:da:c9:13:ab:fa:39:1c:fa:59:b2:a3:8c:
04:e1:24:d1:39:cb:18:6e:52:16:c3:82:f0:9b:3d:
99:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9F:DF:91:97:AA:EA:AC:26:EE:95:F5:77:8B:09:2A:57:60:3D:75
X509v3 Authority Key Identifier:
keyid:C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/2e40c27f31aca0981d86bc52f2870e77dc908a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.80.0/22
170.150.56.0/22
Signature Algorithm: sha256WithRSAEncryption
70:6f:54:1c:80:38:ab:b9:da:76:f9:e9:8a:10:d1:66:6a:82:
47:33:f7:60:08:6f:e0:3e:8d:f4:17:ad:78:28:fd:91:4e:93:
dc:49:dc:08:0f:36:2f:d8:02:2b:5a:c6:52:2f:f4:65:9b:87:
36:b9:1f:d0:0b:80:80:a1:57:47:98:63:92:22:07:53:4d:cf:
a2:49:64:84:8c:63:ce:4e:a5:49:5d:b1:9e:c8:ac:99:2e:b8:
27:07:32:c0:a2:20:74:f2:57:e4:75:cf:47:b8:5c:17:fa:a0:
a6:2c:d8:37:b9:91:30:f6:8d:a6:c8:7b:7a:f2:61:32:c1:4f:
98:d8:ab:ca:21:c7:1a:3d:8f:ff:d4:cd:91:c0:e5:98:fd:73:
5f:0a:0f:63:e2:28:8c:26:dc:1a:5e:9d:5e:e1:be:df:b9:ef:
7e:d9:b4:10:2f:7e:af:68:33:5f:d6:65:67:2d:46:fb:8c:f6:
ae:f0:a5:32:9a:e5:a5:ba:87:6d:67:74:75:02:06:bb:f8:cc:
02:04:e7:63:dc:20:57:24:de:d7:37:be:7a:da:ae:af:1e:c3:
16:74:60:e3:d4:92:b5:b2:4c:eb:b4:bc:48:74:89:34:df:20:
d3:3a:4a:1b:c9:21:1a:f4:5a:33:2a:11:f7:bd:04:59:9a:c9:
6b:8e:00:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 23:17:17 2024 by rpki-client on console-fra.rpki-client.org