Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/15d30f7ee6b3975f7e3319b9ac809b04c5b47303.roa
File: 15d30f7ee6b3975f7e3319b9ac809b04c5b47303.roa (raw, json)
Hash identifier: ZLvocT8yMIO0SU+Qd0xyddaceS3DaczMLEIQfBpmxTE=
Subject key identifier: 2D:49:ED:98:EB:60:4F:BB:C2:C5:9C:26:25:B2:D9:2F:E1:43:BB:7F
Certificate issuer: /CN=40bb0835e54e95f61d1b3f21a5df4b4b8f23450a
Certificate serial: 258BFA
Authority key identifier: DC:DA:82:3A:0B:BC:C7:66:50:2B:14:89:E0:A3:8C:CD:4F:BE:51:C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/15d30f7ee6b3975f7e3319b9ac809b04c5b47303.roa
Signing time: Sun 05 Nov 2023 23:17:23 +0000
ROA not before: Sun 05 Nov 2023 23:17:23 +0000
ROA not after: Wed 05 Nov 2025 23:17:23 +0000
asID: 269918
IP address blocks: 131.72.168.0/22 maxlen: 24
131.72.168.0/24 maxlen: 24
131.72.169.0/24 maxlen: 24
131.72.170.0/23 maxlen: 23
131.72.170.0/24 maxlen: 24
131.72.171.0/24 maxlen: 24
2803:dd80::/32 maxlen: 32
2803:dd80::/34 maxlen: 34
2803:dd80:4000::/34 maxlen: 34
2803:dd80:8000::/34 maxlen: 34
2803:dd80:c000::/34 maxlen: 34
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2460666 (0x258bfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bb0835e54e95f61d1b3f21a5df4b4b8f23450a
Validity
Not Before: Nov 5 23:17:23 2023 GMT
Not After : Nov 5 23:17:23 2025 GMT
Subject: CN=15d30f7ee6b3975f7e3319b9ac809b04c5b47303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9b:51:cb:65:25:65:27:dc:64:d1:e4:9d:c5:
92:19:1d:32:9c:7f:10:bc:46:f7:b9:8a:79:95:8c:
1e:0e:d0:19:19:d7:69:3d:6e:b6:6a:b8:d1:3c:8d:
40:50:e3:40:5e:c0:51:48:f8:8f:e8:bf:0a:67:13:
ee:c5:17:81:fb:27:13:ed:c2:ee:6a:68:d6:57:80:
b3:cc:00:cd:7b:28:2b:56:61:2e:20:46:8a:8c:3c:
7b:16:7d:78:ee:ea:6c:eb:53:30:37:1d:fe:31:39:
35:05:57:9a:ac:f4:16:ab:a8:a1:d7:84:bf:f3:94:
76:7e:12:76:0a:27:60:33:d4:40:86:b2:f2:bf:15:
d2:d2:70:f2:49:21:fd:4e:33:40:66:31:74:05:d5:
31:1f:d7:ef:57:c6:9c:2b:6f:1b:8e:c6:d2:7b:c0:
99:37:83:8a:ef:97:7d:79:af:2f:11:26:b8:0b:13:
98:74:bb:0c:9c:d0:23:f8:6e:33:1a:f4:a6:34:9c:
67:7b:be:e0:65:a1:3b:ea:6c:57:b2:10:85:27:c4:
e0:8e:4f:33:3e:e9:d8:a7:6b:e8:66:3a:ae:bc:16:
29:47:f5:6f:9d:1a:09:cf:92:db:70:9d:3b:ab:b2:
73:82:81:46:c0:61:b8:9a:00:a3:f8:41:a3:77:4a:
ec:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:49:ED:98:EB:60:4F:BB:C2:C5:9C:26:25:B2:D9:2F:E1:43:BB:7F
X509v3 Authority Key Identifier:
keyid:DC:DA:82:3A:0B:BC:C7:66:50:2B:14:89:E0:A3:8C:CD:4F:BE:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/15d30f7ee6b3975f7e3319b9ac809b04c5b47303.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
IPv6:
2803:dd80::/32
Signature Algorithm: sha256WithRSAEncryption
7c:72:40:05:21:13:97:46:df:ab:d7:46:68:01:3d:8c:d2:fa:
b4:43:f2:f8:2e:18:2d:62:1c:f7:40:9e:93:34:d3:76:35:0b:
00:dc:68:06:11:7b:92:e3:1e:ca:25:87:fb:97:38:46:1b:42:
e9:3b:23:65:f2:fe:2c:45:dd:eb:e3:8f:05:74:20:f7:97:bc:
ab:c7:e4:06:6d:49:be:4d:a4:17:04:e7:43:69:df:3a:93:76:
94:7c:27:06:97:0f:bc:0e:14:39:b9:31:73:9b:63:5f:ae:1f:
a5:a3:81:23:29:8f:97:53:d6:8e:e4:28:4b:fb:c1:44:fa:ee:
9d:a1:ee:c5:ef:83:8a:2b:2d:1b:af:60:b5:db:84:82:76:f0:
e5:6a:e7:86:aa:9d:e0:b4:1b:8f:42:f0:76:ed:08:c7:7f:da:
eb:14:f9:a7:f5:86:40:df:28:0a:f5:6c:af:32:ac:34:75:44:
c8:16:25:49:8d:ec:56:03:9d:b5:93:57:69:0a:8b:a3:ad:d5:
bd:20:14:f3:bf:e4:b4:cb:96:1c:74:27:36:b6:4d:af:7e:74:
2e:7e:98:0a:b6:6d:39:f0:33:49:dc:f3:f2:64:e4:7f:65:91:
25:c0:3b:7f:9b:e3:38:07:56:d4:c8:ef:2b:94:d0:4d:0f:40:
47:36:b2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 00:59:12 2023 by rpki-client on console-ams.rpki-client.org