Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/622af9b2d5b58a379e588d79c997b5b1dac2924e.roa
File: 622af9b2d5b58a379e588d79c997b5b1dac2924e.roa (raw, json)
Hash identifier: uBA0x2hAlA1gbE2ehTgBS4JklCIzrjWCoCI3k9rFCUs=
Subject key identifier: 4C:A2:91:3E:0E:CC:4E:86:E3:C9:F9:27:8F:35:7F:91:1F:B8:C7:A9
Certificate issuer: /CN=e6ea4e7f96925035be6071195a9d8fe1439fcbd6
Certificate serial: 1C08C8
Authority key identifier: 15:99:A9:2E:57:E3:FB:F1:0C:EB:DF:1C:5E:D9:62:DE:E9:25:C3:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6ea4e7f96925035be6071195a9d8fe1439fcbd6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/622af9b2d5b58a379e588d79c997b5b1dac2924e.roa
Signing time: Fri 06 Jan 2023 10:50:26 +0000
ROA not before: Thu 05 Jan 2023 10:50:26 +0000
ROA not after: Thu 06 Jan 2028 10:50:26 +0000
asID: 263725
IP address blocks: 138.0.228.0/22 maxlen: 24
168.228.192.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1837256 (0x1c08c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ea4e7f96925035be6071195a9d8fe1439fcbd6
Validity
Not Before: Jan 5 10:50:26 2023 GMT
Not After : Jan 6 10:50:26 2028 GMT
Subject: CN=622af9b2d5b58a379e588d79c997b5b1dac2924e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:38:ff:44:42:f2:a6:15:04:fb:38:2d:0c:
6e:6c:d5:85:e6:ea:f9:02:91:fa:90:ee:cb:41:4b:
e9:b1:93:0f:9a:0f:cc:bc:84:7e:98:12:f6:e0:2a:
e3:6a:96:c6:12:11:61:13:06:4d:d5:5c:f6:fe:40:
2a:b7:b7:a4:28:0c:79:a4:52:f2:04:e8:ac:5c:29:
8b:e5:78:03:59:11:54:9e:88:f2:0e:43:22:29:96:
ef:1c:8d:03:dc:e7:8f:20:d9:97:58:b1:e5:3b:42:
7c:17:21:b8:87:d8:48:e2:ba:0f:60:0c:c8:2f:cf:
78:eb:c8:00:b7:e8:95:00:d5:dd:e8:bb:81:e8:f5:
f3:da:bc:86:2c:46:31:b9:e6:0e:3f:bc:07:6b:6c:
ef:5b:2e:54:7d:59:b9:4a:b1:9a:66:4f:3d:fa:7d:
d5:d9:f3:88:93:22:30:f5:dd:ce:8a:ee:71:03:15:
eb:2a:b6:8b:1d:88:e3:1a:99:53:c7:be:b6:7d:bc:
16:28:73:03:6b:e1:73:dc:11:c0:4c:02:7b:b5:9a:
76:1d:81:e1:ae:d4:b9:79:00:a8:08:6b:84:d6:9c:
f2:60:4e:0a:43:d3:d9:5a:a9:9c:2b:6a:e1:8d:5e:
57:6e:9f:19:95:bb:d4:2a:02:67:61:69:9d:4f:c3:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:91:3E:0E:CC:4E:86:E3:C9:F9:27:8F:35:7F:91:1F:B8:C7:A9
X509v3 Authority Key Identifier:
keyid:15:99:A9:2E:57:E3:FB:F1:0C:EB:DF:1C:5E:D9:62:DE:E9:25:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6ea4e7f96925035be6071195a9d8fe1439fcbd6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/622af9b2d5b58a379e588d79c997b5b1dac2924e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/e6ea4e7f96925035be6071195a9d8fe1439fcbd6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.228.0/22
168.228.192.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:6b:20:a7:57:5a:03:b7:50:20:4d:69:80:46:88:04:21:33:
11:a7:44:4b:90:d7:d6:4f:7f:ed:11:84:03:e8:0e:53:a3:2b:
ee:50:53:77:83:97:d2:9c:c8:b1:20:64:24:48:15:24:97:36:
6e:ca:60:08:2f:0d:be:1d:65:32:d9:d9:63:81:70:21:63:e1:
d4:3b:c3:2d:02:b7:c4:68:16:59:c3:a9:e9:8d:33:0a:4d:11:
f4:49:40:9c:1b:09:c9:98:c0:ed:ba:3d:8d:04:1e:cf:ee:fb:
51:e2:3a:cc:f8:01:11:78:8e:8c:34:c3:73:63:3a:ea:89:92:
b7:91:f7:e5:17:e5:5b:e7:4b:bf:9c:94:19:6c:70:7e:c4:f5:
b3:71:89:16:be:82:98:29:54:18:4a:50:70:19:c7:99:a0:4a:
7b:73:b4:8f:af:2f:2a:c9:ea:2b:5a:b1:43:88:c0:b2:29:b5:
e8:dc:8e:c3:52:ad:d2:34:4c:c2:c6:1f:94:9c:5f:a4:2f:d7:
08:32:88:4c:38:f2:23:5b:11:8b:46:8e:36:cd:b0:ab:bb:dc:
f0:f5:71:9a:fb:87:d0:c8:b4:80:56:60:0f:cf:4c:3d:83:5f:
18:fc:7b:58:0a:13:af:18:99:c8:82:b5:fb:79:77:14:24:86:
b9:f9:44:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org