Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/e394be1b63cccb621434d8bb4f0b23462a206d8a.roa
File: e394be1b63cccb621434d8bb4f0b23462a206d8a.roa (raw, json)
Hash identifier: S4RtZ8s2Wzk948qXcxFd7zHYkStFOFcDAKn3FqBVuKo=
Subject key identifier: 59:28:A1:A2:46:45:1B:06:8D:DB:14:33:9E:C3:70:8F:0E:CB:94:B7
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 209D77
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/e394be1b63cccb621434d8bb4f0b23462a206d8a.roa
Signing time: Tue 02 May 2023 16:16:38 +0000
ROA not before: Mon 01 May 2023 16:16:38 +0000
ROA not after: Fri 02 May 2025 16:16:38 +0000
asID: 269918
IP address blocks: 131.72.168.0/22 maxlen: 24
131.72.168.0/23 maxlen: 23
131.72.168.0/24 maxlen: 24
131.72.169.0/24 maxlen: 24
131.72.170.0/23 maxlen: 23
131.72.170.0/24 maxlen: 24
131.72.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2137463 (0x209d77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: May 1 16:16:38 2023 GMT
Not After : May 2 16:16:38 2025 GMT
Subject: CN=e394be1b63cccb621434d8bb4f0b23462a206d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:1d:83:05:13:2a:2f:e8:30:b5:66:ff:a2:
34:d4:f8:31:c6:09:e6:1f:96:63:53:69:b9:52:2a:
d2:18:64:c0:ee:7c:b0:95:6c:96:6a:0a:2f:c5:3b:
8f:ee:0c:86:44:e3:10:9e:b3:fd:a8:80:a2:df:57:
98:73:b5:a2:1a:e0:18:e8:4e:01:2a:0b:0d:57:b2:
26:30:b3:ef:9a:60:0c:a2:ae:c4:6e:d0:ef:22:df:
82:6f:5e:9b:1c:63:38:cc:db:d9:63:4d:82:6a:53:
95:bf:58:c4:b6:7e:7d:43:15:a0:22:f7:86:6f:86:
ed:3a:1c:8d:9c:27:2d:e9:17:f3:b9:f5:81:e2:26:
88:a6:c6:42:99:f3:f1:d4:08:9c:40:57:6e:56:f1:
b8:ad:91:ec:1e:14:e5:1a:2d:ba:6a:9a:a2:37:58:
f5:e6:5e:61:47:25:48:87:c3:fc:c1:d6:cf:7f:6d:
93:67:1d:53:ac:c0:8d:8a:32:ca:dd:44:0a:18:4e:
50:ba:13:61:c5:c7:8e:19:4a:e9:6c:f0:6b:9a:b0:
b4:59:22:0a:69:de:14:2d:60:be:96:a6:e5:64:f9:
93:98:79:10:bd:40:08:4c:b6:b6:4e:24:98:b4:c9:
8f:8e:4b:c7:4f:77:84:e5:c5:09:a2:be:a6:95:a9:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:28:A1:A2:46:45:1B:06:8D:DB:14:33:9E:C3:70:8F:0E:CB:94:B7
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/e394be1b63cccb621434d8bb4f0b23462a206d8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
Signature Algorithm: sha256WithRSAEncryption
30:db:64:e7:0e:0b:93:2a:08:cf:2d:fc:a6:46:9a:b5:26:29:
41:d8:ee:11:d1:b1:58:bb:f3:26:a0:14:a2:6c:d7:00:9a:f9:
45:ef:bd:42:bb:96:71:ec:78:6f:d0:de:27:90:25:ea:54:d9:
35:a7:2b:16:d4:b1:7b:33:be:bc:2c:5d:e9:86:27:6b:84:8e:
b5:aa:a8:e9:d4:8c:6e:42:d2:e4:a9:c4:e7:07:61:a8:fa:aa:
98:38:ec:2b:5a:29:76:27:6d:e3:8e:fc:94:51:b6:a5:2d:97:
7c:5a:a2:0e:0e:47:41:f1:96:c0:6a:ba:2c:69:35:4f:57:40:
57:f6:b0:b3:6a:be:d1:23:2a:1d:5e:cb:b9:ec:fc:4a:81:d8:
26:c8:05:5b:1c:e9:34:60:eb:e5:1f:68:60:86:2f:31:cf:29:
d0:95:12:d5:30:1a:7d:a2:62:0a:cb:6e:71:fa:b3:c3:78:5a:
2b:3a:6e:9a:4d:90:a1:aa:00:41:2f:a4:54:d0:73:cf:be:11:
78:75:19:a7:73:01:f9:5e:2c:5a:6a:31:d2:ee:8b:38:75:6f:
13:33:01:67:55:2a:65:55:1e:fe:5f:29:11:60:c3:5a:9b:a5:
28:93:d6:9d:12:48:bb:a8:00:63:20:b2:b0:18:67:8b:8e:aa:
b5:92:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org