Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/a6d32c3fe557685d999a91f5c1961c4d5d599cfb.roa
File: a6d32c3fe557685d999a91f5c1961c4d5d599cfb.roa (raw, json)
Hash identifier: Cw79EoClQ2q8FL4YOZRDMeRA6tb2KXWr0/bjTnvrB/4=
Subject key identifier: 2B:C0:CC:50:8C:A5:73:7E:9B:F5:BC:D9:C2:C9:33:D4:B7:02:F5:05
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 232671
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/a6d32c3fe557685d999a91f5c1961c4d5d599cfb.roa
Signing time: Sat 12 Aug 2023 18:30:12 +0000
ROA not before: Fri 11 Aug 2023 18:30:12 +0000
ROA not after: Tue 12 Aug 2025 18:30:12 +0000
asID: 269918
IP address blocks: 131.72.168.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2303601 (0x232671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Aug 11 18:30:12 2023 GMT
Not After : Aug 12 18:30:12 2025 GMT
Subject: CN=a6d32c3fe557685d999a91f5c1961c4d5d599cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:3b:6b:6b:0c:e4:97:9d:87:b1:c0:06:7d:
90:47:81:67:73:34:2c:7d:25:49:c4:e2:5c:4a:cd:
fd:66:71:41:40:bf:71:66:cb:c5:ff:e1:2b:5c:35:
f7:6b:e8:d7:82:40:4b:19:47:56:d0:cd:e2:48:fe:
78:95:d0:77:11:07:53:68:c8:cf:1e:d0:25:09:20:
b9:bc:ec:f8:1f:a7:0d:63:00:8c:8b:18:66:6e:1b:
58:a6:77:32:ec:16:26:b4:3d:1d:ef:f7:13:99:35:
80:37:65:37:4a:f4:c8:a4:db:2b:02:a8:03:c1:8c:
6c:d8:80:3d:0a:58:29:69:e0:1f:0e:a8:c7:81:2c:
78:3b:60:75:97:6c:cc:9b:b8:64:ad:2e:5b:de:b3:
63:1c:25:e5:b6:d9:ca:0a:49:a3:8e:bb:04:82:a0:
77:6e:c9:3c:d6:90:96:38:a0:50:7c:9e:58:21:fc:
a2:51:bb:95:17:57:6e:64:0c:08:04:55:dd:b1:9c:
ef:06:b2:d4:07:ce:36:cb:8f:e8:ae:97:d0:a7:5b:
f3:31:e4:44:fa:95:82:87:72:1e:8c:d1:94:35:3e:
8d:fb:86:8a:59:b3:06:62:05:56:ef:0a:2f:5a:44:
77:ee:2f:30:f3:16:3c:36:6e:05:ca:40:60:ff:e7:
ac:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C0:CC:50:8C:A5:73:7E:9B:F5:BC:D9:C2:C9:33:D4:B7:02:F5:05
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/a6d32c3fe557685d999a91f5c1961c4d5d599cfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:e1:5b:1b:8d:cb:66:1c:19:00:f6:ee:56:d1:61:e2:d9:9a:
d9:8e:1b:82:ba:54:22:9f:4e:05:f9:68:c1:80:cb:82:3e:86:
dc:e4:50:5c:af:8f:f7:81:5d:d8:c6:47:64:68:e1:76:32:b9:
7f:32:1e:43:28:67:03:0a:18:0e:1b:ba:e0:4b:04:31:fd:22:
fc:bc:a6:5e:8f:25:5e:fb:4c:d8:2f:3a:83:ff:37:62:da:21:
40:d0:c6:f1:98:24:9d:a0:1f:79:f0:8c:a6:3a:f5:d1:74:93:
f0:3d:04:8a:12:c1:9a:d9:1b:0c:df:db:eb:18:9e:27:6c:5e:
e6:7b:d4:d8:02:47:4a:57:ab:fb:10:55:8f:84:24:d1:70:ad:
4c:5c:8e:ec:31:0a:c9:64:01:09:17:64:31:c1:fd:02:3b:d2:
a4:3e:e2:66:03:88:59:ca:ae:55:26:9a:51:cd:58:f3:7f:50:
7b:d8:cc:b9:21:ed:9f:08:76:d1:d3:3e:c0:85:d1:8c:84:80:
f5:b2:67:69:94:10:79:5a:e4:b6:22:ac:6d:25:4c:51:f9:e9:
2b:a1:5f:3d:c4:8f:d6:a4:f8:ff:ce:d8:a0:c3:a6:43:c3:4a:
f6:36:34:af:d5:78:8a:bf:98:d6:51:26:c0:dc:30:6e:2e:58:
59:f6:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 16:56:41 2023 by rpki-client on console-fra.rpki-client.org