Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/71ff64e1f48e11d37b4214efb57be225863a101c.roa
File: 71ff64e1f48e11d37b4214efb57be225863a101c.roa (raw, json)
Hash identifier: QgcWoDJBsLy5lom6zRztcZ+kyPZ4Rv3xA9Ogga1RAd4=
Subject key identifier: 43:F2:28:87:1A:2E:94:33:DE:90:E4:FE:A0:7E:E4:D1:F0:A3:B6:20
Certificate issuer: /CN=e6ea4e7f96925035be6071195a9d8fe1439fcbd6
Certificate serial: 10EDF6
Authority key identifier: 15:99:A9:2E:57:E3:FB:F1:0C:EB:DF:1C:5E:D9:62:DE:E9:25:C3:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6ea4e7f96925035be6071195a9d8fe1439fcbd6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/71ff64e1f48e11d37b4214efb57be225863a101c.roa
Signing time: Thu 21 Oct 2021 23:44:09 +0000
ROA not before: Thu 21 Oct 2021 03:00:00 +0000
ROA not after: Sat 21 Oct 2023 03:00:00 +0000
asID: 263725
IP address blocks: 138.0.228.0/22 maxlen: 24
168.228.192.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1109494 (0x10edf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ea4e7f96925035be6071195a9d8fe1439fcbd6
Validity
Not Before: Oct 21 03:00:00 2021 GMT
Not After : Oct 21 03:00:00 2023 GMT
Subject: CN=71ff64e1f48e11d37b4214efb57be225863a101c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:97:df:1f:7c:f9:68:4c:86:8e:7b:c9:45:
56:ab:02:ea:99:8d:c5:5d:4f:ff:8d:54:62:32:92:
31:25:68:3f:14:91:da:f9:f5:17:a8:62:9d:fc:f5:
62:c4:a1:19:f1:2a:09:a1:e9:69:b6:96:b8:80:ac:
c6:bf:4f:b1:95:28:db:18:c2:70:71:4c:1b:77:5e:
da:f0:0f:7d:b3:dc:d1:53:2e:f0:9c:50:38:02:53:
6b:09:17:c1:92:cb:6a:ad:b2:6a:ab:66:a0:dc:34:
2b:68:4c:25:1c:3f:cf:e1:55:22:9b:94:13:47:46:
d4:a0:bb:6b:b4:a6:b9:66:20:14:46:f1:a8:ec:33:
cf:91:55:df:d8:e9:0e:77:62:99:97:32:50:09:69:
f5:1c:a5:c1:f5:3e:ab:72:1e:bc:92:0d:73:df:40:
f9:c1:2d:fa:de:bd:7d:5d:87:fe:33:da:73:01:dc:
73:de:0e:e0:b4:da:e9:be:c4:9c:70:37:2d:16:bf:
8d:b0:f0:16:ac:32:64:26:55:fd:c6:43:3a:24:16:
aa:a0:4a:ec:8b:c7:22:c8:26:6b:b4:0b:6d:55:5f:
ae:6e:6d:2c:b3:f5:3e:0d:7a:12:d2:4c:49:05:84:
7e:fa:05:26:fa:f2:3a:a8:74:b3:3d:3d:d9:ea:27:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F2:28:87:1A:2E:94:33:DE:90:E4:FE:A0:7E:E4:D1:F0:A3:B6:20
X509v3 Authority Key Identifier:
keyid:15:99:A9:2E:57:E3:FB:F1:0C:EB:DF:1C:5E:D9:62:DE:E9:25:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6ea4e7f96925035be6071195a9d8fe1439fcbd6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/71ff64e1f48e11d37b4214efb57be225863a101c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a012ae49-8e25-4206-a83e-2e70a675e6f4/e6ea4e7f96925035be6071195a9d8fe1439fcbd6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.228.0/22
168.228.192.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:84:6e:eb:f1:05:63:42:c9:9b:6b:35:d6:03:43:54:5c:51:
79:b2:d5:70:a3:3e:20:d7:35:f8:be:fc:d7:7a:ab:5a:4b:e6:
af:af:20:74:21:59:5c:8d:ad:49:3c:9c:65:14:10:e7:36:11:
ea:07:3f:00:52:4f:ad:f7:6c:6f:6a:6e:61:06:53:20:f6:f1:
9f:dc:3b:3d:1d:e5:8d:4d:77:06:ce:ac:5c:7d:ee:46:61:62:
8f:88:f6:fb:f7:31:9c:8b:1a:ad:49:65:9f:18:09:3f:19:7d:
60:00:c4:7f:8d:39:ae:38:72:f9:b0:06:fd:92:c1:07:f2:0e:
ab:f7:58:d7:23:0d:c0:01:55:bf:6f:0d:fd:ff:08:e7:2b:d2:
ca:14:e0:b6:dd:b0:f0:f0:50:28:09:8c:08:60:6b:b3:f9:4d:
b5:10:0f:de:01:5c:9d:1b:45:de:09:9e:35:53:cf:95:47:39:
6f:55:ca:15:5c:e0:95:49:ed:c8:2b:5b:62:5f:9b:d4:15:12:
46:94:23:ae:b1:ce:a0:65:2e:55:1f:7c:c0:99:11:af:3a:b2:
16:55:33:43:67:10:c0:5e:48:0b:2d:86:5c:0c:51:e1:25:d0:
c6:78:21:35:11:88:7a:a3:c4:75:bc:10:2c:9f:85:e1:c7:95:
dc:55:30:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org