Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/b4f48ff87622e3e12c685bb4c79afaeb4804b787.roa
File: b4f48ff87622e3e12c685bb4c79afaeb4804b787.roa (raw, json)
Hash identifier: j2UDkbhSjATUiu9FLbz0LXsqr7/wXRGJhddjBu3pLQ4=
Subject key identifier: 4F:41:F9:22:D2:00:05:B8:2D:F1:9A:A2:D0:4A:19:B2:95:F6:E7:FC
Certificate issuer: /CN=2dd8701adfa698cf087d5033d6ab2b23bbe67c59
Certificate serial: 1FDA7E
Authority key identifier: 81:D3:8B:25:CC:79:CE:E0:94:9E:1F:43:09:0A:4E:E4:C7:49:B8:F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/b4f48ff87622e3e12c685bb4c79afaeb4804b787.roa
Signing time: Thu 23 Mar 2023 08:30:21 +0000
ROA not before: Wed 22 Mar 2023 08:30:21 +0000
ROA not after: Fri 21 Mar 2025 08:30:21 +0000
asID: 61508
IP address blocks: 138.219.60.0/23 maxlen: 24
138.219.60.0/24 maxlen: 24
138.219.61.0/24 maxlen: 24
138.219.62.0/24 maxlen: 24
138.219.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2087550 (0x1fda7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd8701adfa698cf087d5033d6ab2b23bbe67c59
Validity
Not Before: Mar 22 08:30:21 2023 GMT
Not After : Mar 21 08:30:21 2025 GMT
Subject: CN=b4f48ff87622e3e12c685bb4c79afaeb4804b787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:da:bf:ee:0b:d0:cc:59:f6:17:5a:66:e3:
23:06:01:9a:6f:06:7e:18:75:19:33:69:79:ab:8f:
e9:12:8e:5c:47:65:39:7a:7e:38:21:fd:63:1a:7e:
53:1b:df:02:c2:b9:36:25:33:11:cc:21:db:c9:64:
a9:bd:59:cb:f2:a4:39:1a:98:ac:55:2e:ef:07:3b:
fc:29:79:da:a2:ae:08:f5:00:ac:10:97:9d:58:8c:
56:3e:f7:83:89:19:dd:ca:8a:15:1e:e8:a7:a5:f1:
51:17:64:28:2c:b2:08:68:50:a3:55:b9:70:5e:19:
ce:fc:54:0e:8b:ad:5a:df:79:88:8d:ca:ed:3b:1c:
be:25:7d:c3:8e:2a:26:16:51:64:f0:61:97:45:ee:
ef:6b:47:dc:77:2b:e0:49:63:20:c1:b2:5e:99:cb:
5f:73:0d:48:3f:b2:78:70:60:c0:8b:5b:98:b0:34:
e8:e7:72:b4:5c:a1:02:df:2f:5f:b7:f6:c7:52:a1:
ed:56:c0:ef:25:ac:6a:6e:8b:f2:3f:cc:d8:9f:01:
d4:fe:f2:7c:1e:39:1d:0a:8d:cd:22:4c:49:c7:15:
a8:bf:96:05:76:32:0b:7b:95:c2:f3:45:7b:ab:ee:
83:01:ce:7b:0d:0a:8d:2e:6a:71:0d:ea:c7:0e:4a:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:41:F9:22:D2:00:05:B8:2D:F1:9A:A2:D0:4A:19:B2:95:F6:E7:FC
X509v3 Authority Key Identifier:
keyid:81:D3:8B:25:CC:79:CE:E0:94:9E:1F:43:09:0A:4E:E4:C7:49:B8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/b4f48ff87622e3e12c685bb4c79afaeb4804b787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.219.60.0/22
Signature Algorithm: sha256WithRSAEncryption
14:43:13:59:13:02:47:ae:ee:2e:bb:ed:2e:d8:04:78:61:14:
2f:72:bd:86:ac:c8:24:e9:a7:8f:5a:2e:15:a5:5d:19:2c:aa:
ec:7c:f8:18:25:b5:36:56:9b:5d:dc:0b:ca:2b:7d:16:71:b8:
f7:f8:62:b0:b6:22:65:e2:03:3d:43:2c:ec:ed:1f:14:86:63:
82:39:bb:26:7d:0e:30:07:18:b2:83:a5:aa:0e:2d:cd:16:85:
c8:cd:0e:b9:22:32:87:48:85:1b:0a:71:87:74:90:26:f4:89:
af:e8:e3:07:a8:82:08:6f:b6:5d:97:92:d7:11:91:07:46:14:
a2:18:fa:84:4f:cf:d5:f8:d7:ea:3c:53:12:ec:16:ec:56:d9:
a5:5d:81:e9:b1:7c:77:5a:f9:a0:71:2d:41:f1:10:5f:5c:75:
79:82:28:24:06:ec:99:0b:a1:a2:ad:9e:e8:00:93:4b:f4:57:
32:52:a1:a6:0d:fc:6f:c5:c3:5d:7d:4f:f8:bf:8f:28:d1:af:
39:db:67:ee:f0:25:2b:31:d5:17:60:3d:08:c1:73:d0:99:46:
9b:05:2d:36:11:b2:22:c3:9a:23:44:d9:81:30:10:38:4d:e7:
fa:4c:c7:f6:c7:5a:cf:6a:c0:4e:94:a9:40:89:20:7c:99:4d:
07:7d:4d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:49 2023 by rpki-client on console-ams.rpki-client.org