Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/4df61bf5b2ab3bba33abd3c993484b602cdcc84a.roa
File: 4df61bf5b2ab3bba33abd3c993484b602cdcc84a.roa (raw, json)
Hash identifier: XgSbIRf1eNEw9B/BOuc0Y8dq7ZR1JJ/Tgp/m5ORoadM=
Subject key identifier: 11:7E:A1:79:FD:7C:3B:D2:AC:54:3A:17:11:1F:72:5F:8E:95:B3:1F
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 208EBE
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/4df61bf5b2ab3bba33abd3c993484b602cdcc84a.roa
Signing time: Tue 02 May 2023 02:25:38 +0000
ROA not before: Mon 01 May 2023 02:25:38 +0000
ROA not after: Fri 02 May 2025 02:25:38 +0000
asID: 269918
IP address blocks: 131.72.168.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133694 (0x208ebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: May 1 02:25:38 2023 GMT
Not After : May 2 02:25:38 2025 GMT
Subject: CN=4df61bf5b2ab3bba33abd3c993484b602cdcc84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:7e:ad:0a:55:fe:79:f6:56:84:01:3a:60:
55:f6:80:5e:f5:be:74:6f:c3:c7:cc:5f:5f:39:8a:
a4:58:e1:c4:04:fc:9a:78:87:53:f9:a1:db:22:fd:
2d:0e:f6:8d:47:bf:2b:06:b6:9e:42:f1:41:a3:80:
bb:3a:da:36:3f:eb:61:65:4d:84:42:66:3c:32:12:
10:be:11:a9:a4:d6:df:c5:60:67:df:30:f8:91:77:
0f:95:c0:aa:19:c4:81:32:3b:8a:f6:a1:f2:25:5f:
75:ad:76:d1:b4:9d:99:2a:cb:1e:b9:c5:ee:cc:dd:
14:17:b1:4f:2e:35:1e:21:86:d3:88:79:2a:44:82:
52:9c:46:22:54:ed:7f:6a:57:97:f5:6d:6a:aa:61:
50:e2:48:ee:6d:d1:99:8a:b8:f8:a5:34:bc:43:04:
0e:14:f6:ef:1e:22:4c:69:d1:f9:eb:b7:6c:3f:74:
8e:22:b9:20:31:1a:1e:98:fc:c3:aa:16:ff:2b:41:
e4:fa:b8:78:3a:1d:bd:cb:e7:50:e6:35:5a:67:0d:
b4:82:98:fd:95:02:f6:2b:46:7d:63:1a:67:44:74:
6f:08:13:e9:c9:da:d3:1d:07:66:46:42:00:56:6b:
da:e8:1b:e4:6d:57:04:25:bc:1b:2a:a1:c4:f8:03:
7f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7E:A1:79:FD:7C:3B:D2:AC:54:3A:17:11:1F:72:5F:8E:95:B3:1F
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/4df61bf5b2ab3bba33abd3c993484b602cdcc84a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:68:bb:79:9f:a3:3c:0f:b5:36:e1:24:f1:51:83:f9:4b:87:
f9:67:d0:38:06:b3:50:06:6e:06:69:e6:e1:d2:2c:a6:1f:d1:
e4:b7:b0:f6:b2:70:b8:cc:15:f4:b8:cc:e0:f3:b2:58:f1:ba:
e4:95:b3:3a:6c:02:a5:75:83:28:9a:f2:41:6f:dd:e1:3a:e2:
31:a0:d1:70:f4:b7:f5:9c:fb:ff:e6:ea:77:87:7c:92:6d:96:
50:19:06:ca:9c:0a:17:43:8b:59:24:c5:7b:0b:56:f0:53:1e:
d4:74:e4:ae:46:25:93:02:0e:91:e3:07:fe:07:65:cf:bd:ae:
8e:41:49:61:0f:cd:27:24:82:6c:46:71:cd:71:91:54:6f:87:
af:ec:e2:29:85:7e:de:23:45:58:93:fa:cb:86:b5:41:ed:22:
84:3e:0d:d7:e9:5e:2d:80:86:4e:10:77:b9:5e:ae:b2:a9:dc:
ab:1b:6b:30:e7:7e:0f:5a:59:3f:fa:08:d2:c8:cf:3b:fb:26:
84:fd:a6:5d:c0:ac:7a:b3:95:49:13:11:1a:93:70:07:08:4d:
3d:60:ad:d1:df:51:f3:2c:b2:72:b0:1d:61:45:1b:75:d2:26:
4e:1d:83:5f:49:9f:6a:56:1f:a1:c0:07:e3:41:ea:50:1e:26:
88:17:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org