Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/d64ef097b9cc61f8705ebf7324168e690ee9ac30.roa
File: d64ef097b9cc61f8705ebf7324168e690ee9ac30.roa (raw, json)
Hash identifier: nGPJmASnv6NdBcIFVs3esReZKw03a8xhkqdRdf1uyGw=
Subject key identifier: 36:37:3F:26:9F:BB:EE:6A:7D:A1:7A:ED:70:58:F7:70:F5:B8:34:96
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 20EB67
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/d64ef097b9cc61f8705ebf7324168e690ee9ac30.roa
Signing time: Mon 15 May 2023 02:02:43 +0000
ROA not before: Sun 14 May 2023 02:02:43 +0000
ROA not after: Thu 15 May 2025 02:02:43 +0000
asID: 269918
IP address blocks: 131.72.168.0/22 maxlen: 24
131.72.168.0/24 maxlen: 24
131.72.169.0/24 maxlen: 24
131.72.170.0/24 maxlen: 24
131.72.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157415 (0x20eb67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: May 14 02:02:43 2023 GMT
Not After : May 15 02:02:43 2025 GMT
Subject: CN=d64ef097b9cc61f8705ebf7324168e690ee9ac30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:97:ae:b0:19:fc:6b:f9:1d:78:01:a7:d6:a8:
97:02:6a:ee:48:c3:46:53:64:e8:e9:77:05:2b:a5:
68:e3:69:b0:b7:49:06:14:5c:69:79:50:8d:6d:c1:
f0:fc:ab:4e:13:14:50:7b:90:24:d3:db:65:7d:18:
09:7f:9d:44:99:d8:59:7e:47:93:9e:70:18:b6:9d:
64:12:72:10:e3:87:ce:df:d9:7f:70:80:8b:f6:46:
84:1a:2b:af:29:42:32:43:ef:e7:40:b5:34:cd:a6:
6e:87:c7:07:c3:67:3a:bb:33:ea:f0:b5:e0:38:0f:
0f:a4:9e:6b:9b:25:c9:67:b8:af:dd:d4:87:75:20:
14:f4:ff:ef:ba:ec:c7:8e:31:8c:fc:97:e9:d2:93:
d9:40:57:d1:f3:40:3d:37:3f:fb:90:61:20:f0:e6:
24:e7:ea:e3:6d:69:f4:46:80:6b:12:34:6c:c4:38:
d3:42:e2:01:51:04:a9:b9:86:8d:96:68:3a:c3:5f:
cd:56:e8:90:36:c2:94:fe:d8:79:7f:28:48:b5:dc:
6b:c5:20:e8:cf:09:b0:d9:98:64:40:72:96:d7:f1:
2b:93:47:f7:9d:a2:21:08:a6:77:30:58:00:af:04:
2b:5a:9f:c3:97:dc:21:e0:83:d7:b5:36:6a:11:58:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:37:3F:26:9F:BB:EE:6A:7D:A1:7A:ED:70:58:F7:70:F5:B8:34:96
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/d64ef097b9cc61f8705ebf7324168e690ee9ac30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:6f:91:aa:f3:d4:9c:c6:81:66:c2:b3:aa:2b:58:2a:cf:16:
04:ab:dd:a5:14:ff:90:9e:a1:b6:36:d7:85:fb:da:38:fe:0b:
89:4b:1b:45:a6:7c:7f:35:8e:cd:73:10:eb:82:41:ab:b1:b3:
bf:bf:1c:2a:7f:dc:f1:68:35:c1:55:03:d2:01:b9:ec:cb:04:
2d:02:7d:87:08:f6:9d:b7:36:99:8c:5f:b9:04:eb:f2:17:c9:
bd:8d:fb:8f:39:65:cb:d5:27:89:4d:c2:49:26:db:d6:b8:71:
0b:33:0d:be:cb:26:8b:67:f9:8a:77:35:bf:3b:f9:89:c7:4c:
a3:2b:07:eb:35:4a:aa:e0:ee:63:2e:ef:80:c3:8b:c1:19:fc:
21:17:ee:d0:b9:5c:35:f7:ba:dc:02:37:4f:cb:12:7a:b6:a4:
0e:68:1e:57:48:bf:4d:1f:4d:bc:5e:f4:a2:56:3d:f2:fa:ca:
95:d3:00:1b:cc:9c:50:99:33:85:b8:a3:1c:23:42:06:ca:01:
48:96:c2:d1:70:b8:07:86:ce:7f:5e:0a:51:5e:a7:7b:9e:c0:
47:46:d9:33:30:51:17:77:08:19:82:09:b1:5b:97:20:c9:b4:
59:44:2c:c9:8a:99:f7:62:8f:b2:5b:32:3e:f7:da:c2:2d:03:
9b:eb:f5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org