Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/4d0a2598e983e9286efe18e9ccf62928f391cc3b.roa
File: 4d0a2598e983e9286efe18e9ccf62928f391cc3b.roa (raw, json)
Hash identifier: mBlpjutJBh2xJHOZ+7z7cblZZXW0eYrNC58Ec1OmbcQ=
Subject key identifier: 03:B3:8E:DA:FE:6A:B5:CD:25:FA:B0:BF:71:B8:5A:D1:86:08:2F:42
Certificate issuer: /CN=e6ea4e7f96925035be6071195a9d8fe1439fcbd6
Certificate serial: 1FF4EB
Authority key identifier: 15:99:A9:2E:57:E3:FB:F1:0C:EB:DF:1C:5E:D9:62:DE:E9:25:C3:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6ea4e7f96925035be6071195a9d8fe1439fcbd6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/4d0a2598e983e9286efe18e9ccf62928f391cc3b.roa
Signing time: Mon 19 Jun 2023 02:32:38 +0000
ROA not before: Sun 18 Jun 2023 02:32:38 +0000
ROA not after: Thu 19 Jun 2025 02:32:38 +0000
asID: 263725
IP address blocks: 138.0.228.0/22 maxlen: 24
168.228.192.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2094315 (0x1ff4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ea4e7f96925035be6071195a9d8fe1439fcbd6
Validity
Not Before: Jun 18 02:32:38 2023 GMT
Not After : Jun 19 02:32:38 2025 GMT
Subject: CN=4d0a2598e983e9286efe18e9ccf62928f391cc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:20:f0:5b:0b:b0:d0:cd:8f:7e:56:e4:ab:
48:f4:b3:f1:19:30:83:c0:73:52:34:55:90:fe:c4:
11:85:25:31:59:6d:31:6c:8e:43:78:3b:68:06:dc:
5a:50:e1:97:fc:59:48:16:c1:dd:a0:75:49:bf:9b:
41:56:f4:a2:e6:b6:18:88:17:b3:9d:d9:f6:da:4f:
5e:a6:0b:65:bd:8c:ab:6b:15:54:42:b6:d2:b4:09:
73:39:51:08:73:aa:18:79:77:1a:81:b7:ed:09:7e:
0a:d2:e2:e7:14:e2:26:aa:d8:0a:0b:07:a8:72:b4:
32:4e:58:11:ce:24:50:38:d0:68:41:36:0e:7c:5d:
52:51:f6:7d:5c:cb:37:62:7b:5a:4c:cf:67:d8:a8:
9a:f3:48:ed:7c:2b:ab:07:14:c2:90:6b:30:dc:0d:
7f:f5:0c:ac:c3:fb:ec:0d:3b:6a:d7:8a:db:e1:d2:
f0:b0:0a:d2:55:2b:55:75:62:df:0a:42:3a:e8:64:
7c:5f:88:97:c8:b6:c6:58:52:c5:af:f0:54:b5:e4:
49:f2:a7:e7:21:e4:c7:6f:71:d3:37:c3:4f:87:67:
45:c2:57:63:02:0b:5a:df:b3:5f:09:f6:04:d5:7b:
90:7c:4c:d2:23:ca:79:63:d3:dc:bb:e0:ed:fe:67:
3e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B3:8E:DA:FE:6A:B5:CD:25:FA:B0:BF:71:B8:5A:D1:86:08:2F:42
X509v3 Authority Key Identifier:
keyid:15:99:A9:2E:57:E3:FB:F1:0C:EB:DF:1C:5E:D9:62:DE:E9:25:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6ea4e7f96925035be6071195a9d8fe1439fcbd6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/4d0a2598e983e9286efe18e9ccf62928f391cc3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/e6ea4e7f96925035be6071195a9d8fe1439fcbd6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.228.0/22
168.228.192.0/22
Signature Algorithm: sha256WithRSAEncryption
25:fd:9f:19:d2:ec:d5:b1:48:27:e4:51:76:18:6d:ba:0f:2d:
33:d9:37:26:6e:53:79:ad:bd:48:94:ed:58:c4:18:55:bd:e5:
47:c1:6c:bd:d1:e8:82:a8:4f:3b:77:c6:dd:37:d2:3d:6a:6e:
61:59:30:33:85:b0:97:98:d7:3c:4a:63:9b:47:a5:d9:eb:cc:
03:30:73:ac:d7:b7:1a:0e:32:12:a7:27:77:f3:97:a7:b9:ee:
f4:a0:ce:73:06:99:e9:51:63:c8:91:90:5f:18:2a:d7:6b:9f:
32:1c:ec:d9:5a:2a:e4:a9:fe:81:75:e3:81:1e:15:36:fd:2a:
27:e0:02:3f:ea:14:f5:a0:b3:bd:10:3b:ae:24:53:be:68:25:
d7:f0:86:ba:0b:06:c7:de:f7:ab:49:13:5b:0f:24:0a:58:a0:
c1:29:38:09:0e:9e:86:4c:b8:86:56:18:3d:8b:e0:64:1e:10:
43:d6:f5:16:6f:77:c5:54:92:ae:91:8f:aa:b0:a9:d5:b5:d7:
ff:83:ea:6c:4e:82:c0:97:a8:7f:26:08:33:28:ee:e2:2f:91:
8b:e5:93:4b:73:f5:8f:77:0a:c5:ff:4d:fa:8d:0a:eb:cc:75:
36:33:b9:5b:a2:d7:cd:e2:57:ec:53:e7:66:ed:70:63:7d:26:
27:66:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 13:31:35 2023 by rpki-client on console-ams.rpki-client.org