Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/923e24c4e546cc9f136aae0fddcf8d2c3c6dabe2.roa
File: 923e24c4e546cc9f136aae0fddcf8d2c3c6dabe2.roa (raw, json)
Hash identifier: z6zN0NHQ66CWd+Y110R3zSy6pb7tvNooCr11moxQ1j8=
Subject key identifier: 92:A2:F5:81:6C:61:49:FC:48:75:61:64:BC:E6:18:79:E1:89:88:BE
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 1F8A90
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/923e24c4e546cc9f136aae0fddcf8d2c3c6dabe2.roa
Signing time: Thu 13 Apr 2023 20:58:49 +0000
ROA not before: Mon 03 Apr 2023 01:48:43 +0000
ROA not after: Wed 09 Apr 2025 01:48:43 +0000
asID: 269918
IP address blocks: 131.72.168.0/24 maxlen: 24
131.72.169.0/24 maxlen: 24
131.72.170.0/24 maxlen: 24
131.72.171.0/24 maxlen: 24
2803:dd80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2067088 (0x1f8a90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Apr 3 01:48:43 2023 GMT
Not After : Apr 9 01:48:43 2025 GMT
Subject: CN=923e24c4e546cc9f136aae0fddcf8d2c3c6dabe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:65:ff:3e:c7:c1:df:09:e5:b9:f3:6f:96:22:
8f:3c:b3:a0:2a:63:03:ab:a4:79:7d:79:76:ea:6f:
64:62:3c:b9:df:3f:a3:90:2b:0c:85:5b:c1:de:55:
73:6b:b5:28:f9:f4:8b:bb:70:eb:c1:41:fd:17:87:
26:34:92:6b:e6:bc:fa:92:d0:9d:e6:e0:54:43:62:
e5:8c:b0:77:62:e0:df:bd:88:b1:83:f8:6b:f9:9f:
33:40:ed:4e:12:c2:3b:ee:29:72:fd:08:cf:6e:82:
54:eb:97:dc:b9:b1:bd:cd:82:b3:88:6d:f4:21:1a:
e6:21:ea:eb:d2:30:fc:f6:71:d7:a8:c7:a9:92:7d:
6c:4b:84:73:92:fe:d8:40:40:74:70:1e:54:22:d7:
b4:9d:35:09:5f:9e:98:83:f9:70:5b:09:57:bf:b9:
c9:40:39:97:b5:30:ba:06:4c:4a:d5:69:4d:c7:aa:
be:30:63:32:65:d9:c9:ea:a6:99:6c:9a:2e:3a:59:
40:6e:3e:83:9a:16:f5:1d:b3:e0:4d:17:c4:81:58:
bb:42:f4:c4:3b:7a:10:83:9f:19:3a:23:07:df:95:
ad:c8:03:ff:7b:af:3a:49:a6:fd:f3:76:13:d1:26:
2b:9b:14:17:15:ed:29:4a:84:2f:ef:38:22:66:e9:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A2:F5:81:6C:61:49:FC:48:75:61:64:BC:E6:18:79:E1:89:88:BE
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/923e24c4e546cc9f136aae0fddcf8d2c3c6dabe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
IPv6:
2803:dd80::/32
Signature Algorithm: sha256WithRSAEncryption
02:2a:72:a9:25:88:50:d7:49:8e:30:73:c6:e9:9f:4c:e6:65:
1e:8b:34:ba:81:9e:28:43:74:2b:c6:4e:05:a7:74:9e:1f:e2:
8d:0d:81:fa:ec:03:6d:4d:26:e9:df:f1:c1:43:78:16:76:86:
52:f7:1c:4f:f3:71:b6:32:f4:73:a5:06:97:9d:9d:e3:07:c1:
d1:db:70:48:df:35:ac:ff:4f:b6:25:aa:dc:bd:7d:95:b2:c4:
44:19:c5:e8:b0:4c:85:00:6b:df:62:39:90:31:ad:e8:26:2f:
c5:e1:69:3d:a8:19:4d:00:3f:27:0d:a1:a2:d8:1c:a9:b6:f8:
38:f6:9a:41:53:29:e9:b4:6f:2a:11:68:29:4b:52:e7:55:73:
67:96:74:40:de:c8:3d:87:25:6f:9e:5e:fb:75:82:b6:3a:76:
5c:77:3e:61:e5:19:4b:87:ff:a7:a3:a5:ea:05:fb:c5:a5:9d:
05:7f:77:25:e4:a6:5b:d7:30:40:11:ac:ae:77:00:6d:21:2c:
9a:0d:43:8c:7a:bd:0b:d7:e3:97:38:f4:db:f8:9a:f0:3a:16:
11:35:db:f7:87:e7:90:9c:2f:fb:d4:69:07:62:39:f2:7a:e9:
49:d6:5a:2e:cb:24:8e:e2:7a:9b:27:f1:45:ae:a8:e2:96:bb:
77:ad:47:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org