Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/57aa81ce20eb533801f45b2383169f9019707a8f.roa
File: 57aa81ce20eb533801f45b2383169f9019707a8f.roa (raw, json)
Hash identifier: xSSYRynzRvS+L/1EIXmslqMK12p58iCf0ewqsnxmbFY=
Subject key identifier: 8C:18:71:5B:24:F2:BE:38:B2:96:A5:70:79:7E:46:C6:98:C0:1B:56
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 201503
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/57aa81ce20eb533801f45b2383169f9019707a8f.roa
Signing time: Tue 25 Apr 2023 02:32:05 +0000
ROA not before: Mon 24 Apr 2023 02:32:05 +0000
ROA not after: Fri 25 Apr 2025 02:32:05 +0000
asID: 3549
IP address blocks: 131.72.168.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2102531 (0x201503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Apr 24 02:32:05 2023 GMT
Not After : Apr 25 02:32:05 2025 GMT
Subject: CN=57aa81ce20eb533801f45b2383169f9019707a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:f8:b0:c1:0b:2f:f3:80:db:23:01:36:fc:
d0:ba:7a:09:9b:97:4e:5f:6c:75:9b:20:b8:5c:57:
3d:0a:6e:bb:7f:b5:e9:59:01:ba:ba:e8:15:5f:af:
e6:ac:a9:3e:29:ef:03:62:0a:75:e1:5c:14:f7:a8:
4c:02:5f:d8:67:81:33:a3:b2:6d:be:c5:fe:3c:87:
24:98:40:5e:37:9c:98:58:68:2f:3c:5c:bb:3d:4d:
f7:00:22:29:fb:b6:db:08:80:9f:bd:83:45:7c:04:
da:72:52:c2:b8:0b:d3:c3:dc:20:59:86:74:d1:e6:
54:d2:66:a4:7e:4f:60:3c:a9:7b:08:e3:4d:38:9c:
2b:c1:dd:14:d2:92:c3:c4:27:23:a3:d7:e7:36:8f:
03:7d:83:4f:39:5a:fe:fc:a3:10:7c:bf:88:48:5f:
b4:1e:d4:89:23:f1:c8:16:f8:53:c3:81:29:97:bf:
ed:d0:de:04:8f:52:a1:8e:79:00:80:23:a1:e6:48:
c9:c7:fa:81:0c:69:e5:c0:d7:9f:67:9c:d5:2c:94:
fb:b0:91:a2:fc:eb:49:66:1a:4f:41:64:f3:1e:ba:
92:5f:ba:63:70:f5:eb:3c:89:21:bf:e5:ea:62:af:
68:10:23:e0:1c:f6:7b:0d:0d:e7:42:81:f9:6f:83:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:71:5B:24:F2:BE:38:B2:96:A5:70:79:7E:46:C6:98:C0:1B:56
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/57aa81ce20eb533801f45b2383169f9019707a8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
Signature Algorithm: sha256WithRSAEncryption
49:02:71:9f:e9:dc:d9:4b:96:4a:73:6e:03:45:b9:ba:6f:96:
20:c2:80:94:8d:5e:b3:28:fc:a1:52:05:64:98:9b:e9:29:a2:
e8:27:25:99:6e:56:e3:1b:f4:cf:2b:4e:16:d8:ba:ea:95:82:
c1:43:ed:0f:ab:e4:fa:a9:7d:65:28:ae:8f:e1:86:a0:6a:01:
24:03:37:5a:63:e4:ca:53:69:6d:87:40:f4:00:eb:0d:c6:bd:
3d:6b:3c:1a:22:ef:2e:67:d2:71:5a:29:36:08:c1:74:01:4a:
5b:0c:c1:47:d8:f4:50:98:c0:05:bd:3e:a6:36:c5:84:f2:d3:
d0:f7:39:18:12:e3:9c:65:89:28:0e:58:c5:af:ef:f0:c2:13:
be:85:bc:90:1b:e3:89:0f:f3:c0:30:fa:1a:0f:14:25:37:bf:
9f:12:a9:16:b2:81:c9:14:27:2b:2b:6c:db:ba:ae:4a:5d:af:
27:ea:16:1f:09:16:08:29:d8:a7:58:7f:25:d2:13:81:4f:62:
aa:e5:e3:93:42:8a:98:24:50:7a:31:5f:87:db:a7:9b:80:23:
78:10:d2:2e:6d:7d:0d:fd:0a:c8:18:1e:5f:eb:58:f2:e2:85:
5e:d3:c4:73:de:2a:db:47:cf:84:a9:c3:0a:8c:df:b6:57:b0:
d3:8d:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org