Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/88917aedfab339f545630d7acd83580005236049.roa
File: 88917aedfab339f545630d7acd83580005236049.roa (raw, json)
Hash identifier: ZnBbqNOJo6758n6x9bdBpaT4cQBvhZpAlRVc6MO53e4=
Subject key identifier: C9:CD:6D:F0:24:75:5F:B0:25:AD:CE:99:55:22:25:8C:D9:34:FE:8A
Certificate issuer: /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial: 0D3531
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/88917aedfab339f545630d7acd83580005236049.roa
Signing time: Wed 24 Mar 2021 14:35:02 +0000
ROA not before: Wed 24 Mar 2021 14:35:01 +0000
ROA not after: Tue 24 Mar 2026 14:35:01 +0000
asID: 18678
IP address blocks: 138.117.111.0/24 maxlen: 24
168.90.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865585 (0xd3531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
Validity
Not Before: Mar 24 14:35:01 2021 GMT
Not After : Mar 24 14:35:01 2026 GMT
Subject: CN=88917aedfab339f545630d7acd83580005236049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d8:89:e2:fd:8e:d6:47:78:9c:c6:9a:b8:f4:
d5:56:c6:3b:fb:a0:ea:cf:66:ba:a8:43:2e:2c:43:
5d:b4:72:d6:80:54:f3:94:bd:e6:e1:4d:55:73:f0:
2b:33:42:f0:9f:7a:bb:86:3c:58:1d:cd:1b:b2:84:
4b:0f:46:8b:09:c7:f4:dc:db:ff:24:ed:a1:bd:10:
ff:5a:0c:70:9b:89:28:40:db:6e:a6:54:39:94:c4:
0f:7e:5d:2b:79:46:4f:ef:a0:34:92:e1:03:65:53:
82:b5:10:6e:51:29:74:83:74:5a:1c:60:28:68:a5:
39:a3:09:09:23:55:57:f3:d8:c5:26:64:5e:ab:8c:
bc:88:57:a2:a8:23:b5:ef:98:17:80:22:9b:62:ae:
a9:e3:79:b5:b6:86:f7:f1:34:86:96:ac:b8:e8:34:
f6:0a:56:d6:46:48:96:99:19:f4:d3:87:fb:6f:1c:
f9:5b:6c:d9:3d:24:05:3c:85:4c:f2:82:14:84:7c:
a8:9a:d7:be:e5:aa:c0:7d:07:ca:d7:3c:7b:f5:27:
a3:99:54:87:5a:9a:2d:8d:b2:cc:91:b7:51:79:3c:
5f:96:2a:dc:2e:f4:05:7e:51:55:dd:25:25:6c:d0:
18:2e:50:f5:d7:74:43:21:cb:90:38:3e:0d:0f:f4:
f7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:6D:F0:24:75:5F:B0:25:AD:CE:99:55:22:25:8C:D9:34:FE:8A
X509v3 Authority Key Identifier:
keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/88917aedfab339f545630d7acd83580005236049.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.111.0/24
168.90.14.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e2:09:9e:d3:ef:4b:c9:10:35:10:76:61:65:36:b7:35:dd:
23:6b:db:36:73:33:10:29:5d:80:da:c8:92:fc:71:10:fc:62:
97:d1:73:bd:ec:d9:40:2a:dd:7b:b5:fa:41:5e:0f:03:ef:a0:
ed:84:0f:9d:a2:c9:b4:17:44:1d:8d:09:22:c7:32:f2:01:fc:
d7:94:97:21:1e:d2:2c:91:b8:d6:0d:3e:a0:28:79:45:08:a8:
1f:de:18:86:4a:cb:42:8a:03:2f:0e:b7:39:fd:0e:aa:0b:50:
f1:03:19:73:c4:97:09:4c:0d:64:4e:42:41:58:cb:9b:2d:a6:
12:a6:ad:aa:97:49:4e:b4:dc:26:01:2b:a5:ef:d0:66:9e:f0:
95:c8:bc:69:56:c5:f6:ce:63:1b:c3:75:e4:92:47:e4:2d:48:
d6:08:cf:b8:83:ea:50:2f:3c:94:cf:31:24:8b:91:4c:08:74:
16:6a:ff:51:7d:88:2a:a8:9d:92:dc:cb:48:af:86:fd:f7:16:
5c:10:d2:0d:c9:8d:05:fc:36:8b:d5:dd:84:ea:da:02:35:c8:
fe:84:17:45:91:5a:f1:f1:08:6e:3e:bf:1f:f7:05:9f:20:e4:
81:6b:d1:54:58:bc:31:af:e9:47:bf:44:69:f4:55:11:c2:11:
be:dd:85:32
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDDTUxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM5
YzU2NWJiYzFiZWNhNzBjYTk1M2QyM2ZlZmY3NTNiMzkyYTE3YTcwHhcNMjEwMzI0
MTQzNTAxWhcNMjYwMzI0MTQzNTAxWjAzMTEwLwYDVQQDEyg4ODkxN2FlZGZhYjMz
OWY1NDU2MzBkN2FjZDgzNTgwMDA1MjM2MDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAldiJ4v2O1kd4nMaauPTVVsY7+6Dqz2a6qEMuLENdtHLWgFTz
lL3m4U1Vc/ArM0Lwn3q7hjxYHc0bsoRLD0aLCcf03Nv/JO2hvRD/Wgxwm4koQNtu
plQ5lMQPfl0reUZP76A0kuEDZVOCtRBuUSl0g3RaHGAoaKU5owkJI1VX89jFJmRe
q4y8iFeiqCO175gXgCKbYq6p43m1tob38TSGlqy46DT2ClbWRkiWmRn004f7bxz5
W2zZPSQFPIVM8oIUhHyomte+5arAfQfK1zx79SejmVSHWpotjbLMkbdReTxflirc
LvQFflFV3SUlbNAYLlD113RDIcuQOD4ND/T3rQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFMnNbfAkdV+wJa3OmVUiJYzZNP6KMB8GA1UdIwQYMBaAFIewmCMawQ5rTiev
qIwX5Jsg8hqMMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzljNTY1
YmJjMWJlY2E3MGNhOTUzZDIzZmVmZjc1M2IzOTJhMTdhNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTYzOWI4MGItOWQ1OS00NDAyLWI0NzctYTJiMjQ5
Y2FlZWU5Lzg4OTE3YWVkZmFiMzM5ZjU0NTYzMGQ3YWNkODM1ODAwMDUyMzYwNDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNjM5YjgwYi05ZDU5LTQ0MDItYjQ3Ny1hMmIy
NDljYWVlZTkvMzljNTY1YmJjMWJlY2E3MGNhOTUzZDIzZmVmZjc1M2IzOTJhMTdh
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAIp1bwMEAKhaDjANBgkqhkiG9w0BAQsFAAOCAQEAU+IJntPv
S8kQNRB2YWU2tzXdI2vbNnMzECldgNrIkvxxEPxil9FzvezZQCrde7X6QV4PA++g
7YQPnaLJtBdEHY0JIscy8gH815SXIR7SLJG41g0+oCh5RQioH94YhkrLQooDLw63
Of0OqgtQ8QMZc8SXCUwNZE5CQVjLmy2mEqatqpdJTrTcJgErpe/QZp7wlci8aVbF
9s5jG8N15JJH5C1I1gjPuIPqUC88lM8xJIuRTAh0Fmr/UX2IKqidktzLSK+G/fcW
XBDSDcmNBfw2i9XdhOraAjXI/oQXRZFa8fEIbj6/H/cFnyDkgWvRVFi8Ma/pR79E
afRVEcIRvt2FMg==
-----END CERTIFICATE-----
Generated at Mon Jul 31 21:51:06 2023 by rpki-client on console-fra.rpki-client.org