Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/7e6f5aa1746e171c2efa46b3903fa90fbd62ddbb.roa
File: 7e6f5aa1746e171c2efa46b3903fa90fbd62ddbb.roa (raw, json)
Hash identifier: xBi1RX39EFYpSVanthjI/knSoP8V3J9UQeifouhi668=
Subject key identifier: 37:F7:D0:41:FC:FC:E6:AC:F5:E4:DB:62:79:06:AB:66:C3:D3:13:17
Certificate issuer: /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial: 0D342C
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/7e6f5aa1746e171c2efa46b3903fa90fbd62ddbb.roa
Signing time: Wed 24 Mar 2021 14:35:02 +0000
ROA not before: Wed 24 Mar 2021 14:35:01 +0000
ROA not after: Tue 24 Mar 2026 14:35:01 +0000
asID: 27951
IP address blocks: 132.255.20.0/22 maxlen: 24
138.117.108.0/22 maxlen: 24
168.90.12.0/22 maxlen: 24
170.254.228.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865324 (0xd342c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
Validity
Not Before: Mar 24 14:35:01 2021 GMT
Not After : Mar 24 14:35:01 2026 GMT
Subject: CN=7e6f5aa1746e171c2efa46b3903fa90fbd62ddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:55:b0:6a:f4:48:11:13:a3:e1:95:65:81:36:
d2:57:9d:9e:5b:ab:af:5f:32:97:25:dd:30:95:58:
08:ba:da:63:8e:56:37:f0:d2:5c:62:98:39:d3:62:
aa:ee:fa:37:45:37:e9:aa:e1:eb:dd:34:29:e5:2c:
33:95:7f:d4:fd:73:c1:0a:15:d9:a9:f0:a7:ca:25:
b4:a3:1e:d5:05:c2:e2:d4:06:8b:2a:ec:dd:0c:33:
08:40:5e:dc:9a:fd:63:24:9c:2b:47:eb:db:e4:28:
1e:de:30:f8:1b:fe:ef:a7:e4:b1:56:9a:72:30:d6:
58:f6:7d:b0:85:2c:90:2d:77:02:5e:51:a6:d5:90:
54:a5:cb:c8:68:1c:3a:fc:12:ff:cb:43:76:35:9f:
81:63:72:d6:89:a1:ab:da:d8:ce:c3:8c:ed:4d:25:
93:e3:6a:b3:40:47:0b:f6:df:53:46:1d:16:79:7d:
cd:35:d6:12:24:41:bc:52:bd:8a:1a:be:91:29:89:
ab:54:e4:bd:54:7a:ee:84:a2:3c:6d:f9:60:e9:81:
49:bf:ac:0e:45:96:73:84:be:f1:b3:29:38:44:d9:
70:e5:18:2f:ae:4f:14:f7:ac:91:24:35:e2:72:41:
97:88:19:bc:d7:bc:18:7b:a5:ef:ea:00:cf:76:73:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F7:D0:41:FC:FC:E6:AC:F5:E4:DB:62:79:06:AB:66:C3:D3:13:17
X509v3 Authority Key Identifier:
keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/7e6f5aa1746e171c2efa46b3903fa90fbd62ddbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.20.0/22
138.117.108.0/22
168.90.12.0/22
170.254.228.0/22
Signature Algorithm: sha256WithRSAEncryption
01:7b:c7:1b:57:e4:9a:04:c9:89:fd:f3:6c:09:cd:1f:18:aa:
26:dc:7a:6f:6b:96:27:b6:ad:a3:2e:38:30:ca:14:29:fd:09:
bb:66:3d:fc:01:ff:fd:51:6b:9b:82:33:9a:5e:5d:b3:fa:85:
49:7d:51:4e:2e:3e:d0:3f:2b:68:64:00:63:e3:5c:77:a5:8c:
de:f9:bc:a6:a1:3f:fc:45:b3:9e:fa:30:05:70:b6:0f:32:42:
5f:09:51:3f:d8:47:5f:5b:c5:da:01:66:91:91:36:54:06:bb:
29:69:8f:b6:2f:30:71:2b:0f:4f:68:6e:52:77:89:98:4e:20:
3e:e4:00:00:f2:8e:c5:76:fb:bb:0b:9e:4d:f9:25:2d:32:4d:
fa:7d:bf:20:c4:5d:03:08:fe:7f:7e:63:c2:fb:a1:e8:7c:f0:
ec:44:67:1c:d7:89:b3:93:47:29:e9:1b:bb:04:e0:c4:1d:fa:
02:61:f4:e2:0d:cd:7a:ec:87:c9:de:a7:69:e3:9b:76:c4:8e:
8d:58:35:b8:a9:ce:7a:af:e3:06:2e:41:de:74:0a:c7:df:1b:
82:2f:ba:e0:43:ea:3f:79:3f:6a:df:05:bc:e9:e7:f4:46:4c:
67:80:20:20:b2:d7:25:2a:6c:b7:8f:ed:b3:f5:b8:67:5a:a5:
ab:36:73:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 21:52:33 2023 by rpki-client on console-ams.rpki-client.org