Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/7a6f6db76e4de14dd34d99c813cc86321d900449.roa
File: 7a6f6db76e4de14dd34d99c813cc86321d900449.roa (raw, json)
Hash identifier: 0R6TyKhrBaQ95U5mOUEUvot3vVHHYgIZ9aS1i4Lsaio=
Subject key identifier: EE:12:26:BC:F2:2E:74:B5:1B:89:91:B3:84:4F:8C:CA:D8:C2:E5:E3
Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial: 0D5463
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/7a6f6db76e4de14dd34d99c813cc86321d900449.roa
Signing time: Wed 24 Mar 2021 14:41:44 +0000
ROA not before: Wed 24 Mar 2021 14:41:42 +0000
ROA not after: Tue 24 Mar 2026 14:41:42 +0000
asID: 52468
IP address blocks: 190.99.117.0/24 maxlen: 24
190.99.118.0/24 maxlen: 24
138.117.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873571 (0xd5463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Validity
Not Before: Mar 24 14:41:42 2021 GMT
Not After : Mar 24 14:41:42 2026 GMT
Subject: CN=7a6f6db76e4de14dd34d99c813cc86321d900449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:a9:2a:42:69:f8:12:80:65:29:91:97:4b:
45:50:c1:17:e3:5a:f4:46:cf:1c:51:04:00:35:3d:
9d:17:0a:d4:19:4e:6e:06:04:8c:2e:cb:a1:24:8e:
a1:43:83:8c:7e:b9:c7:92:7a:bc:1b:b7:8d:cd:f5:
c0:b9:78:bb:ca:c4:3e:f0:bb:20:00:21:07:9a:cb:
09:ae:a6:68:3d:0c:34:b7:84:d6:74:91:7c:93:15:
ea:9b:48:9a:b5:aa:e9:46:3d:55:9b:76:57:e6:01:
9e:57:ae:68:62:71:98:bb:b7:b4:a8:99:a4:81:4a:
da:c8:15:1d:14:e0:70:a9:cb:72:c3:68:17:c8:84:
47:62:75:8d:05:c1:a2:ae:6e:2a:5d:47:74:da:ef:
0a:6a:2b:ea:6c:e8:0f:56:5a:15:1a:6e:17:4c:af:
34:bf:78:8b:45:cd:d8:fa:1c:1c:31:d2:17:2e:ed:
de:4f:30:73:8b:0a:f1:dd:95:9b:40:26:3c:cb:c4:
92:8a:39:46:14:08:93:48:52:bf:cb:82:95:e7:10:
b4:cf:3f:49:42:07:9e:cc:2d:e0:f3:9f:5d:45:c9:
d0:32:e7:7e:8c:32:12:2d:8a:27:b1:c0:ce:e4:3a:
38:b1:69:68:3a:9a:ba:33:2c:61:04:1d:44:8c:b0:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:12:26:BC:F2:2E:74:B5:1B:89:91:B3:84:4F:8C:CA:D8:C2:E5:E3
X509v3 Authority Key Identifier:
keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/7a6f6db76e4de14dd34d99c813cc86321d900449.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.140.0/24
190.99.117.0-190.99.118.255
Signature Algorithm: sha256WithRSAEncryption
17:8e:72:00:33:f6:80:ff:f8:17:ef:b4:19:d4:d5:18:cb:48:
21:e9:b6:93:44:8f:cb:b9:e6:9b:f9:7c:22:d9:bf:3c:45:00:
c0:7a:dd:e7:f4:97:16:f5:ca:c1:82:ad:06:ec:15:a1:bb:1c:
b8:c7:be:fe:44:4f:99:ff:2e:30:67:19:8a:ec:8c:fd:4b:3c:
09:47:e8:ae:07:46:96:81:b0:6c:11:83:f3:2a:3f:cb:e6:18:
a5:fd:04:55:ca:d0:11:1c:9c:0f:00:c9:a0:45:e2:7b:67:d4:
86:5e:79:95:6f:0c:16:90:5d:27:53:13:8e:05:77:c3:0c:74:
4a:c8:10:ce:32:26:38:d5:eb:13:96:96:23:d2:a7:ec:54:e0:
87:cf:ff:c4:ed:7b:c9:68:2c:89:b1:50:25:8e:8a:77:6e:df:
35:13:48:04:86:72:63:98:80:c0:c5:e6:4e:50:4d:8f:e4:92:
31:f0:1f:67:2d:b3:43:a5:0e:63:40:58:5d:bf:1c:5b:8e:69:
d8:73:e0:45:7e:d0:60:93:25:86:ff:6c:f7:8b:53:9c:fb:28:
09:fd:d7:bf:a1:e6:3d:59:46:db:b1:59:ec:71:cd:d4:37:4d:
89:a9:61:68:d5:bd:f9:b9:64:2d:0d:df:b2:21:a7:e4:e4:f1:
28:9a:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org