Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/e0da34287505b7546a4430c3b441d0e35070719b.roa
File: e0da34287505b7546a4430c3b441d0e35070719b.roa (raw, json)
Hash identifier: kChbfhbH+u980/hVxbl7FVpbjbAvmjxNpNjxz5ymVhw=
Subject key identifier: FF:43:B2:F0:50:42:68:43:DE:40:1E:36:14:3E:72:7C:A6:0D:7B:48
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 1A3DF7
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/e0da34287505b7546a4430c3b441d0e35070719b.roa
Signing time: Mon 12 Sep 2022 18:25:05 +0000
ROA not before: Mon 12 Sep 2022 15:47:43 +0000
ROA not after: Thu 12 Sep 2024 15:47:43 +0000
asID: 269918
IP address blocks: 131.72.168.0/24 maxlen: 24
131.72.169.0/24 maxlen: 24
131.72.170.0/23 maxlen: 23
2803:dd80::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719799 (0x1a3df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Sep 12 15:47:43 2022 GMT
Not After : Sep 12 15:47:43 2024 GMT
Subject: CN=e0da34287505b7546a4430c3b441d0e35070719b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:68:2a:78:64:27:f6:5c:24:82:09:54:e3:
89:fc:cb:d7:e7:30:31:47:04:de:0d:4b:b0:f5:86:
90:c3:7f:54:39:3e:27:2d:2b:a3:f7:30:77:b7:c4:
4a:dc:69:84:cd:30:c2:94:1d:7b:4b:fd:8e:e2:18:
8e:f3:09:42:2d:fc:66:23:37:a2:3a:9f:06:d3:23:
06:d6:2b:3a:92:4f:f6:8c:18:0d:c2:57:17:4d:73:
00:39:e2:dd:d8:a8:11:12:e8:b0:e4:2d:5f:d6:a3:
11:91:c3:60:e2:ab:d2:b0:a6:61:c9:d7:73:dd:0e:
8f:30:6f:45:74:ea:1d:b7:ed:b1:55:f5:5c:38:ff:
92:e6:1e:59:bc:be:b6:61:53:ab:71:96:4e:e8:ae:
25:dc:bb:9c:00:70:b3:9b:2f:a2:e5:82:4a:97:06:
72:56:d6:05:e1:62:d5:d4:7a:22:a6:8a:ea:af:31:
96:8e:77:2b:ce:ed:00:af:48:8e:28:5f:7a:ff:1f:
9a:a1:cf:8a:d3:6d:89:97:34:68:f4:d0:03:39:2d:
2d:64:c6:a4:e3:64:30:6e:7d:85:80:84:a8:90:68:
dc:66:78:44:0e:af:4f:ba:20:73:63:13:48:df:4c:
0f:ca:62:f4:0d:97:67:74:be:3c:09:cc:7d:3c:ec:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:43:B2:F0:50:42:68:43:DE:40:1E:36:14:3E:72:7C:A6:0D:7B:48
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/e0da34287505b7546a4430c3b441d0e35070719b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
IPv6:
2803:dd80::/32
Signature Algorithm: sha256WithRSAEncryption
9b:47:ca:29:cd:4c:8d:00:67:7e:4e:48:70:89:f1:24:dc:05:
4b:f2:72:2d:62:8c:0e:7a:17:5c:8c:9f:fd:08:ea:e6:23:c0:
b0:18:af:8d:21:27:be:e8:a2:95:45:40:f0:39:d9:e4:30:13:
c2:db:f2:38:40:3d:45:3b:a3:11:87:78:f5:b8:9b:29:39:74:
37:d2:4d:69:60:79:af:da:95:13:31:44:23:5d:5e:c9:dd:c3:
64:47:ca:e3:55:47:45:9c:8e:b0:13:b5:58:f8:b3:77:83:62:
02:1c:95:0e:0b:6c:52:74:1d:50:2e:47:87:de:95:0e:79:df:
e9:b4:f3:f0:16:39:43:9e:7d:6b:62:35:60:e0:4c:48:ff:1a:
f9:d2:1a:a4:6e:48:5c:89:da:77:c1:b7:df:70:9e:37:bc:c2:
36:39:02:68:cd:76:6a:e2:01:0d:d2:b1:4e:40:75:89:6e:77:
35:32:de:79:f4:12:29:d9:25:04:49:dd:0a:7a:8e:3c:5a:25:
e5:77:a9:d4:f7:07:2d:ab:b1:0a:16:36:4e:b9:d6:dc:42:02:
e0:23:ba:07:b0:73:9b:e6:5f:d9:c9:07:72:d2:bd:54:48:6a:
1a:09:98:65:7c:e8:d1:69:d9:d1:65:54:ad:79:6a:1d:95:41:
df:8f:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org