Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/a549326e6a8a1643bbc1e939b520f3784a21c0ad.roa
File: a549326e6a8a1643bbc1e939b520f3784a21c0ad.roa (raw, json)
Hash identifier: okqQl0CNhsen9H9meF6N4m0t7mxdM7/hjToaRREYBCw=
Subject key identifier: 62:97:BD:B1:0E:34:F7:C0:A5:98:A7:C6:6A:11:FC:96:AB:48:F5:76
Certificate issuer: /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial: 0D36CF
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/a549326e6a8a1643bbc1e939b520f3784a21c0ad.roa
Signing time: Wed 24 Mar 2021 14:35:02 +0000
ROA not before: Wed 24 Mar 2021 14:35:01 +0000
ROA not after: Tue 24 Mar 2026 14:35:01 +0000
asID: 262589
IP address blocks: 138.117.111.0/24 maxlen: 24
168.90.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865999 (0xd36cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
Validity
Not Before: Mar 24 14:35:01 2021 GMT
Not After : Mar 24 14:35:01 2026 GMT
Subject: CN=a549326e6a8a1643bbc1e939b520f3784a21c0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dd:c3:57:a0:da:ba:57:7f:87:ab:62:f3:d1:
78:18:47:a4:bb:04:10:7e:5a:37:09:00:1b:23:e3:
4b:b6:d0:16:45:5d:7e:27:77:a5:8a:24:f5:1e:68:
31:07:e9:ae:9a:48:83:6f:8f:1a:24:8e:20:4b:d0:
18:57:4f:fb:55:50:7c:60:fd:24:fe:f0:52:c4:cb:
a3:21:62:28:0b:16:b1:18:03:41:4d:f6:ce:e3:2d:
dd:ca:ff:49:b1:e3:c1:dc:6e:fd:60:d9:f5:fe:ea:
ac:6a:27:e1:bc:a0:68:63:a9:56:d1:cc:e9:fa:0a:
0f:2a:9f:3e:46:25:39:56:0f:df:32:4a:d6:61:13:
62:c8:4c:2a:b2:a7:6b:7e:04:21:85:62:80:fd:f2:
07:75:75:08:01:b0:3b:d8:6d:46:21:3b:b8:1e:0b:
41:a6:2a:9a:b9:4a:b5:d9:d6:a0:35:9f:76:c0:79:
e3:fc:1a:fb:3e:a4:fe:ec:62:b4:c6:5d:b3:89:58:
42:d4:36:f6:89:cc:a8:2a:0b:85:c6:ea:dd:bf:97:
5a:1d:b1:1e:cb:c6:91:47:f4:4a:a2:68:7d:8e:35:
b7:f5:b3:6c:5c:6a:d1:44:d6:ea:04:90:74:c3:08:
c8:74:78:90:8d:bb:ba:3a:f3:3b:66:00:29:b2:b8:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:97:BD:B1:0E:34:F7:C0:A5:98:A7:C6:6A:11:FC:96:AB:48:F5:76
X509v3 Authority Key Identifier:
keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/a549326e6a8a1643bbc1e939b520f3784a21c0ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.111.0/24
168.90.14.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:05:1f:87:6c:cb:90:a0:d1:34:8b:d8:f3:52:0f:bf:c5:62:
b5:c4:87:9f:f0:e1:65:5f:3d:76:3a:af:43:36:00:60:a5:f5:
91:ed:73:80:47:4c:3e:92:96:36:e9:5b:a2:48:4a:c3:59:84:
3f:67:8b:ac:8a:bf:d4:d3:ad:2e:49:d2:4b:71:0a:43:79:fa:
73:c6:7a:8a:02:be:59:c9:38:2b:27:81:f2:8a:0d:a5:21:30:
3c:10:d0:ae:10:89:87:dc:49:19:ac:47:34:ee:3a:9e:b8:17:
d3:00:f1:7d:fe:dd:8b:ff:9f:99:e6:db:2c:b4:3e:a5:0d:e0:
86:3f:33:94:7d:a0:70:93:3a:04:dc:1f:fb:ec:fc:72:2f:32:
cf:a1:09:21:3f:67:e3:dc:01:dd:5f:ed:1e:6d:4c:65:c7:1d:
6a:46:ee:6c:ce:d7:a4:be:e1:9e:6c:20:c6:f1:99:a4:b0:08:
37:e5:0d:74:da:39:24:9f:ad:22:6a:61:36:a5:76:4b:41:86:
20:d3:71:ac:74:e7:23:aa:ee:37:ee:90:ac:be:d8:b5:e1:14:
5c:33:8e:24:ab:9b:84:0c:19:5d:c1:b2:41:9c:ae:c6:a7:3c:
b1:68:a4:b7:b2:fb:c7:27:0a:57:99:d8:5a:2e:ce:02:f0:74:
e6:7c:97:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 21:52:34 2023 by rpki-client on console-ams.rpki-client.org