Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/f8b00c7e388ad5398366dc4c27b7dc52934b03f8.roa
File: f8b00c7e388ad5398366dc4c27b7dc52934b03f8.roa (raw, json)
Hash identifier: pQWd6LY0eM0yHH8N8OSA+BFD0Vcoffo40i7rq/lboec=
Subject key identifier: 24:35:2D:64:B3:D8:B1:4C:E1:41:5D:83:14:8D:05:46:72:B5:A6:62
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 1F946B
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/f8b00c7e388ad5398366dc4c27b7dc52934b03f8.roa
Signing time: Fri 14 Apr 2023 15:21:14 +0000
ROA not before: Sun 02 Apr 2023 01:48:43 +0000
ROA not after: Wed 09 Apr 2025 01:48:43 +0000
asID: 269918
IP address blocks: 131.72.168.0/24 maxlen: 24
131.72.169.0/24 maxlen: 24
131.72.170.0/24 maxlen: 24
131.72.171.0/24 maxlen: 24
131.72.168.0/22 maxlen: 24
2803:dd80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2069611 (0x1f946b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Apr 2 01:48:43 2023 GMT
Not After : Apr 9 01:48:43 2025 GMT
Subject: CN=f8b00c7e388ad5398366dc4c27b7dc52934b03f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:be:0c:92:ce:5b:8e:cc:bd:6c:e6:48:78:e2:
8d:4d:2a:a2:4e:8d:23:8a:51:ce:63:b0:ab:16:b3:
06:b5:1e:5f:42:5f:67:4f:aa:0e:6c:67:45:c0:61:
23:de:ce:fb:e7:43:a3:6d:94:7e:12:14:90:c4:06:
56:c9:e3:6e:36:cd:26:59:c2:22:5b:99:ab:48:8b:
bd:8f:66:67:e2:38:f7:98:18:92:c6:c3:fe:63:2a:
f4:c3:73:59:bd:5d:a6:69:75:d9:17:a3:40:52:c8:
41:6c:64:22:ba:5f:9b:c5:e5:f5:8b:da:63:b4:c2:
47:a5:f4:66:99:be:b1:92:b4:ec:8d:30:11:6d:94:
2b:d6:9b:42:f1:be:ee:5d:df:42:5b:93:10:5c:44:
61:35:2c:4e:a5:38:5c:c3:61:64:65:d4:d8:73:3e:
0c:cb:46:4a:e3:8c:fc:ad:65:e9:b3:5d:bd:1f:97:
a7:bd:b3:87:85:bd:9f:2c:a4:79:ee:a9:d9:d7:b7:
c7:91:bb:5e:c8:9f:eb:76:07:41:51:6b:49:54:b5:
c4:e8:d8:fd:85:a2:b7:06:28:61:f4:24:22:32:ec:
bb:a8:4d:2b:3d:73:01:ce:e3:86:a9:db:6f:4a:f0:
5e:e3:ed:d1:3e:20:b7:1f:4c:d8:5f:b4:4a:4e:a3:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:35:2D:64:B3:D8:B1:4C:E1:41:5D:83:14:8D:05:46:72:B5:A6:62
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/f8b00c7e388ad5398366dc4c27b7dc52934b03f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
IPv6:
2803:dd80::/32
Signature Algorithm: sha256WithRSAEncryption
8a:75:21:96:2b:82:d3:7a:54:b6:b8:7c:b5:04:ef:f0:dd:ef:
19:9a:13:f1:53:6d:5c:fa:5b:10:89:67:ed:4d:42:ac:66:d5:
88:81:98:26:b4:56:89:31:af:83:fa:b1:75:3c:cc:37:6d:16:
61:28:45:85:0f:48:d1:c2:e4:32:c2:10:31:41:be:7b:7d:0c:
ed:c3:9e:3f:fb:18:12:60:06:0f:47:eb:19:a8:1c:70:db:57:
3e:34:c9:1b:fa:3a:a8:52:60:a4:10:85:10:f2:20:a8:68:f1:
15:21:51:92:b5:a6:1f:7d:b4:ca:85:ba:24:eb:cd:61:4e:c1:
bf:be:4e:c5:61:88:17:db:63:46:2e:70:c1:f9:bd:14:a5:16:
df:36:93:30:e3:4c:a8:b0:57:f4:da:82:7b:5f:06:a4:eb:b0:
27:6d:8d:7f:1b:5c:92:eb:2e:42:bd:58:c3:26:bd:97:ab:3f:
0b:d3:bf:33:a6:0f:d5:ba:ef:fa:89:3d:c8:fb:4c:84:be:e6:
36:ff:c7:46:d1:9f:ca:00:8b:cf:70:a2:34:ea:58:c9:1e:9d:
95:e3:b0:4b:a6:0c:7e:91:30:e1:8b:27:34:bb:ab:d4:18:bc:
6c:46:f7:b1:05:e0:63:8c:35:3e:ec:8c:2a:e1:a7:61:f7:23:
07:af:ef:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org