Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/73a34fe70597c1b036bc8a900d71dd26ca5e7003.roa
File: 73a34fe70597c1b036bc8a900d71dd26ca5e7003.roa (raw, json)
Hash identifier: 4DFP/+q43nR6wrpE9O0cZsrt4XvlTDrTtgwxZgp1DO8=
Subject key identifier: 5B:6D:C2:C3:89:54:E1:1D:8D:78:24:08:3E:86:0B:77:8C:D0:C9:D8
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 21FE81
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/73a34fe70597c1b036bc8a900d71dd26ca5e7003.roa
Signing time: Sat 01 Jul 2023 16:22:03 +0000
ROA not before: Fri 30 Jun 2023 16:22:03 +0000
ROA not after: Tue 01 Jul 2025 16:22:03 +0000
asID: 269918
IP address blocks: 131.72.168.0/22 maxlen: 24
131.72.168.0/23 maxlen: 23
131.72.168.0/24 maxlen: 24
131.72.169.0/24 maxlen: 24
131.72.170.0/23 maxlen: 23
131.72.170.0/24 maxlen: 24
131.72.171.0/24 maxlen: 24
2803:dd80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227841 (0x21fe81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Jun 30 16:22:03 2023 GMT
Not After : Jul 1 16:22:03 2025 GMT
Subject: CN=73a34fe70597c1b036bc8a900d71dd26ca5e7003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:5f:fd:ca:aa:e5:8b:9d:d0:c8:16:2e:0e:
0c:20:c9:f8:85:e3:c7:f3:29:4e:23:df:96:45:b0:
e5:c1:3a:64:47:10:46:ae:fe:8d:d3:60:3b:d1:ca:
d7:c0:89:9c:4e:96:60:9f:3c:43:1c:26:7f:d3:a9:
d2:01:1b:5d:af:87:ca:79:23:8f:6b:a2:07:09:d8:
f0:44:6d:14:05:23:ea:96:6e:0b:99:53:7c:52:7c:
57:ef:cc:24:1d:7a:c3:74:e5:96:65:aa:ba:75:00:
7e:4e:ca:bd:6a:83:1b:7f:55:3c:e0:01:fd:80:ef:
e8:d4:23:96:1b:8c:3f:02:97:5a:ad:74:5f:ae:84:
21:07:4d:3b:74:78:3c:b1:5a:11:8a:8b:9f:be:f1:
bd:7e:c9:ee:bd:00:1e:06:8b:aa:22:3d:1f:f2:c2:
49:f6:b9:d6:6a:cb:86:8a:4a:3c:8c:b6:8a:11:6d:
77:f3:53:0d:7a:ad:51:28:0c:53:60:ce:d2:dd:a1:
21:1b:f4:1d:65:44:5f:e3:a3:c8:49:e0:c3:8a:9b:
fe:fc:f8:a7:ac:18:86:00:0e:43:29:c0:ba:bc:68:
f8:d4:47:76:eb:5b:19:90:28:af:89:bf:90:ba:c2:
4f:9f:a8:28:ec:1e:80:af:0b:26:52:98:e2:db:08:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6D:C2:C3:89:54:E1:1D:8D:78:24:08:3E:86:0B:77:8C:D0:C9:D8
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/73a34fe70597c1b036bc8a900d71dd26ca5e7003.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
IPv6:
2803:dd80::/32
Signature Algorithm: sha256WithRSAEncryption
6a:8f:ac:8d:04:13:c0:a1:ce:a6:d3:f2:48:6b:da:c9:32:fd:
71:ad:a5:6f:6a:61:84:c5:d7:56:43:a4:e9:47:e4:8b:72:d6:
32:b9:6a:36:a5:64:01:1d:3c:c3:71:ab:a8:f4:44:41:e5:03:
1a:f5:27:23:28:a7:9b:80:9f:ac:34:ea:84:86:d6:cd:f2:21:
8c:d2:a1:6e:76:ec:10:ea:07:ca:db:fe:16:58:c4:33:74:5b:
22:a1:4a:ae:4b:aa:11:da:93:e0:83:96:ae:10:01:e6:83:43:
ed:77:45:24:4d:9c:a6:5c:b0:39:56:86:0a:34:a6:76:4e:50:
46:d2:73:eb:72:e9:0b:bf:a8:e9:bb:5f:16:90:43:25:7a:dc:
54:e8:1b:47:70:f5:32:eb:7f:c3:8c:0d:48:71:ea:8c:e3:c7:
8e:9b:d7:7e:a9:13:10:d4:ae:18:87:ec:4e:64:56:4c:1c:e1:
0f:68:7f:07:90:a8:db:1e:28:dc:fb:a3:7d:17:18:56:90:69:
14:0d:c6:7c:8c:81:46:92:25:14:26:0b:49:10:78:80:78:7a:
f4:d8:54:8e:df:5d:b4:77:0e:91:f2:60:45:f7:2f:38:66:2a:
38:8d:dc:8f:5a:f2:75:d9:90:02:a9:79:5c:3f:c8:39:9a:4e:
98:34:26:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org