Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/ca1b6174efcb67975a08e85d8b33705a5e7080f7.roa
File: ca1b6174efcb67975a08e85d8b33705a5e7080f7.roa (raw, json)
Hash identifier: MXSbs+C8HFcib4QjTD9sGba2Q6eNCWj9ZuiFOPsCmls=
Subject key identifier: BF:5A:C2:80:57:37:D8:62:8B:63:02:45:C7:A6:76:EF:21:71:B6:E0
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 1FC2D5
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/ca1b6174efcb67975a08e85d8b33705a5e7080f7.roa
Signing time: Thu 20 Apr 2023 16:40:02 +0000
ROA not before: Wed 19 Apr 2023 16:40:02 +0000
ROA not after: Sun 20 Apr 2025 16:40:02 +0000
asID: 269918
IP address blocks: 131.72.168.0/24 maxlen: 24
131.72.169.0/24 maxlen: 24
131.72.170.0/24 maxlen: 24
131.72.171.0/24 maxlen: 24
2803:dd80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081493 (0x1fc2d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Apr 19 16:40:02 2023 GMT
Not After : Apr 20 16:40:02 2025 GMT
Subject: CN=ca1b6174efcb67975a08e85d8b33705a5e7080f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:33:76:c9:35:16:82:1b:f6:97:72:50:63:
bc:8d:30:77:21:81:4f:e4:7d:81:28:3f:0d:ca:29:
57:f1:e0:95:2b:a6:08:d5:d4:42:cd:5b:b5:0e:e7:
ff:65:17:55:4a:7c:c9:f1:f9:76:cf:58:38:fc:63:
92:69:9b:f1:b9:f3:4a:d9:9d:b0:f2:d4:4e:56:fd:
2e:41:b0:36:28:3a:56:87:31:35:88:66:aa:17:a9:
28:f6:4e:6a:40:4b:50:dd:90:7a:f4:6c:a1:0d:a5:
9f:ae:31:3b:29:e3:c3:38:f0:a3:8b:89:9a:24:1b:
6d:92:08:04:c5:8c:3e:4b:9c:39:99:ca:bf:52:1e:
f3:71:40:48:1a:14:92:46:13:53:2f:5b:4c:bb:12:
d5:84:2d:96:80:cb:cf:74:6e:76:d2:f6:d0:6a:2f:
36:64:32:a3:8f:10:47:0f:ad:d4:56:41:e3:89:be:
c8:96:be:7a:c3:10:bd:e3:09:87:b4:0e:40:6d:41:
c3:fd:25:a8:86:0c:8e:35:57:b8:04:3b:5a:10:57:
26:92:7b:49:02:20:e6:22:0e:26:ea:b3:f4:b2:21:
83:47:18:d9:da:18:d1:6b:6e:66:98:1f:c8:42:55:
12:8b:b4:c3:4a:3d:5d:41:e3:7f:45:3d:a5:f7:b5:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5A:C2:80:57:37:D8:62:8B:63:02:45:C7:A6:76:EF:21:71:B6:E0
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/ca1b6174efcb67975a08e85d8b33705a5e7080f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
IPv6:
2803:dd80::/32
Signature Algorithm: sha256WithRSAEncryption
4d:65:41:c4:80:52:8b:e1:94:71:91:15:fd:9f:50:fe:ca:81:
1d:a1:0f:78:fb:01:32:20:62:f0:2c:0a:17:90:a9:25:38:2c:
a6:61:70:0b:52:e6:9b:e1:82:10:87:ee:4c:26:64:9e:76:16:
37:11:76:e3:71:8f:c0:7a:06:e3:a6:a6:65:74:b5:ec:bd:26:
c9:91:75:94:ac:c5:58:de:55:b3:a9:e8:f7:29:21:6c:01:88:
c8:78:16:ab:c5:bf:1f:11:99:64:cf:10:0b:ef:53:15:bd:21:
45:06:5e:05:04:a6:b4:96:dd:82:c7:4b:0f:3a:bf:c3:28:ef:
87:5b:4a:21:c1:df:7a:f9:c2:5e:4e:56:63:71:23:7f:46:94:
88:c5:96:3d:0c:fb:71:42:a7:c7:d1:ff:32:a9:96:e1:74:e3:
fa:c3:20:89:00:54:f5:f2:a7:2b:77:bf:fd:44:f9:c3:55:23:
ac:de:93:b5:b7:b5:c8:42:6c:d9:9d:41:c8:e7:09:e5:7c:ea:
c6:a0:46:eb:82:da:26:8b:fd:b5:94:56:35:6f:2f:ad:71:5b:
cc:1b:76:86:b5:3f:a5:28:67:f7:b4:28:04:e1:9b:c5:fd:4f:
23:c3:5e:8f:0d:6f:8b:44:b9:95:fc:be:9a:09:ef:ec:bb:48:
ad:14:36:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org