Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/84f67d4343afbcfb9ed337ab3b088dd8e6eb479b.roa
File: 84f67d4343afbcfb9ed337ab3b088dd8e6eb479b.roa (raw, json)
Hash identifier: Ak3A+TCFzcba+idsBM1ePEOcHrZUN+iHtMkKV2XHa+c=
Subject key identifier: 4F:CA:E1:69:4B:94:74:5C:D2:74:E9:7F:6C:7C:D0:BE:7D:FA:DF:37
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 207767
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/84f67d4343afbcfb9ed337ab3b088dd8e6eb479b.roa
Signing time: Sun 30 Apr 2023 02:51:10 +0000
ROA not before: Sat 29 Apr 2023 02:51:10 +0000
ROA not after: Wed 30 Apr 2025 02:51:10 +0000
asID: 269918
IP address blocks: 131.72.168.0/24 maxlen: 24
131.72.169.0/24 maxlen: 24
131.72.170.0/24 maxlen: 24
131.72.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2127719 (0x207767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Apr 29 02:51:10 2023 GMT
Not After : Apr 30 02:51:10 2025 GMT
Subject: CN=84f67d4343afbcfb9ed337ab3b088dd8e6eb479b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:40:21:2b:8b:43:93:d6:04:d4:06:18:8c:
c9:38:69:db:0c:f1:6e:cd:31:3e:ef:b5:8a:60:9f:
62:1f:5b:24:94:bd:ee:80:56:6d:e4:8c:cf:83:87:
9e:c1:2b:4d:f3:9c:0e:30:95:15:77:09:c8:1d:e0:
6d:6b:98:e6:31:af:bc:db:e5:17:70:e1:04:31:77:
ff:14:58:95:0f:ac:ae:a5:4d:43:bb:47:34:39:09:
e2:2b:c4:c9:dc:51:87:95:25:ca:99:cd:85:30:09:
c0:c9:81:36:fd:cd:53:a2:8b:69:c3:d3:05:d8:e7:
b4:de:b5:76:15:d4:5e:91:7f:13:ee:a6:fe:84:69:
91:48:f5:0c:a4:fb:c6:c8:9f:08:9b:14:8b:63:3f:
10:8c:dc:74:be:fc:f7:4d:ac:53:57:3a:67:9f:b7:
a4:a9:06:3a:f1:3f:8c:6b:7b:7c:6b:b5:04:1f:c7:
c7:2c:67:1d:4c:ad:43:e5:1d:b1:77:f4:d7:20:ad:
84:fa:bf:dd:d6:24:10:45:af:76:e4:b5:06:93:19:
bc:88:d6:83:b1:81:c3:9b:bb:e9:f2:2e:b3:92:dd:
e8:4f:e5:b0:be:93:ac:61:b6:d2:02:de:90:54:f9:
f6:25:fd:3b:f7:b0:85:9b:00:b4:4e:ee:15:5a:98:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CA:E1:69:4B:94:74:5C:D2:74:E9:7F:6C:7C:D0:BE:7D:FA:DF:37
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/84f67d4343afbcfb9ed337ab3b088dd8e6eb479b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
Signature Algorithm: sha256WithRSAEncryption
99:55:f2:de:cd:38:68:86:71:c9:aa:1d:82:f6:b6:f5:53:70:
04:0e:ac:12:09:fc:01:67:bc:a7:78:18:bb:1a:e7:ba:f9:05:
2d:7b:da:8b:25:a1:ef:74:2c:f9:e6:5e:d0:aa:85:1c:5c:f1:
b8:70:ed:84:61:81:78:c7:88:76:41:08:22:66:23:1b:4c:60:
92:a9:0d:2d:68:7d:40:22:0d:65:5d:a3:38:48:09:1d:11:7b:
4d:5b:7e:f1:7b:3b:25:69:8c:b7:79:fb:83:8c:80:d9:84:52:
75:48:9c:b1:0a:10:ce:00:d1:23:70:0f:fd:d0:0b:e7:fa:22:
13:1d:80:85:d5:d6:02:05:ef:3b:85:12:dc:fc:dc:c6:4f:7d:
a5:37:27:79:92:5c:48:e5:ce:3e:d9:68:5b:a6:02:9c:1a:83:
80:00:33:04:70:c4:71:2a:2f:5f:b8:d6:75:91:d1:19:70:52:
61:82:c4:3e:d0:13:f3:68:26:4b:2b:1b:5d:56:fb:44:60:4e:
27:2e:63:68:e3:5b:7a:84:37:ca:3f:43:83:d2:48:c4:2f:e6:
f5:ac:bf:2b:72:de:f7:0d:8d:44:2a:b7:e9:67:5b:b1:5c:8d:
68:ee:d7:1b:0e:b1:29:87:bb:4e:5e:d4:62:b6:a4:80:1c:02:
99:aa:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org