Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/8403b10338b17225322a8a0abdef191ed2c3e52b.roa
File: 8403b10338b17225322a8a0abdef191ed2c3e52b.roa (raw, json)
Hash identifier: 2n+p3X6BivyIIpRSvatjQSdncRVNbFcYZTwbdRX+MQ0=
Subject key identifier: 34:63:8A:EB:F4:EE:62:63:F0:02:06:CE:D5:10:11:67:63:84:37:E9
Certificate issuer: /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial: 0D55FD
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/8403b10338b17225322a8a0abdef191ed2c3e52b.roa
Signing time: Wed 24 Mar 2021 14:41:46 +0000
ROA not before: Wed 24 Mar 2021 14:41:42 +0000
ROA not after: Tue 24 Mar 2026 14:41:42 +0000
asID: 22869
IP address blocks: 138.117.143.0/24 maxlen: 24
190.99.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873981 (0xd55fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Validity
Not Before: Mar 24 14:41:42 2021 GMT
Not After : Mar 24 14:41:42 2026 GMT
Subject: CN=8403b10338b17225322a8a0abdef191ed2c3e52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:2a:5f:64:db:a2:6f:16:d3:50:10:3e:b8:
42:9d:dc:e8:ba:5f:28:4e:58:d4:14:28:6e:99:ae:
4c:db:42:08:ee:16:ed:18:66:20:1c:b5:46:35:a3:
55:e0:4b:3a:bf:a8:de:83:02:f9:77:31:c0:84:43:
4e:70:b3:ba:c4:81:d3:1b:d4:62:9b:65:30:22:71:
6f:b2:92:35:94:aa:fa:c7:71:93:26:c1:12:01:e9:
79:dd:34:98:b8:41:8a:96:9b:2d:13:44:b0:40:9e:
b2:be:e5:0d:31:f8:89:c2:0a:e0:4e:2e:99:ba:66:
5b:a8:39:81:8c:38:3f:cd:9a:10:f9:1b:71:54:cb:
3c:45:2a:df:99:5a:a6:d7:f4:98:d3:eb:ae:14:1e:
70:03:21:cf:4f:66:bb:09:61:7a:bd:7f:2d:b6:f6:
56:01:ae:f8:99:cb:1f:c0:11:0c:51:85:d0:b5:e8:
0b:6b:60:f7:cb:5e:37:86:ac:9d:af:ba:c9:79:8b:
81:65:3f:f4:82:ab:b1:a5:f6:2f:f6:9c:91:66:5c:
5a:ab:51:bc:f4:cd:3a:3a:07:88:c1:93:5b:a3:25:
d2:8d:db:0a:b8:9b:7a:e2:09:92:12:06:10:2f:96:
a4:1a:e2:5c:43:4d:48:b2:a9:be:d3:f7:4c:b8:ad:
62:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:63:8A:EB:F4:EE:62:63:F0:02:06:CE:D5:10:11:67:63:84:37:E9
X509v3 Authority Key Identifier:
keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/8403b10338b17225322a8a0abdef191ed2c3e52b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.143.0/24
190.99.116.0/24
Signature Algorithm: sha256WithRSAEncryption
79:5a:3d:7b:97:82:19:66:db:3e:ca:4b:06:16:00:38:f1:a5:
43:bf:97:a3:5b:d0:ef:63:c1:9b:05:7e:cd:52:06:bf:6d:3e:
3d:e8:05:2e:5a:b0:ff:06:38:80:b2:94:9e:f6:f9:36:15:9e:
0d:47:5f:58:68:26:06:f8:38:37:56:41:86:89:f8:e7:f6:d4:
e0:3b:7c:ab:40:32:5f:87:27:21:19:3a:c3:44:82:d6:6c:a0:
35:a6:db:2c:1d:0f:26:02:0c:4e:bd:5e:b5:62:4c:d6:b8:8e:
65:47:4d:20:45:c9:a7:3d:c9:36:2d:ab:59:7d:36:98:8b:06:
2e:92:6d:bc:ab:67:f4:e0:45:de:26:87:1a:25:c3:e9:43:62:
d3:ff:16:7b:82:b0:1b:57:c0:32:83:ae:3d:8d:cd:93:71:d0:
69:0b:12:f1:62:a7:ec:b4:82:d4:ec:75:8b:35:60:5e:a4:90:
52:4c:bb:c6:5d:23:a0:a5:42:f1:d0:db:9f:ca:4f:d8:a7:61:
32:0e:4a:ef:e4:fe:bc:83:7e:e3:49:6a:87:d2:93:ef:51:01:
1e:bd:c8:a7:9c:14:5e:de:17:c5:1e:ed:f9:89:1b:5e:44:00:
08:1b:91:41:04:20:29:a1:f4:45:1c:56:b1:95:16:c8:b8:fc:
c9:fb:1d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org