Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b63a8af6-9fd2-47cd-bcc8-fef826e9c722/b809418f187fb95abcd4ff3038970a885f2bf194.roa
File: b809418f187fb95abcd4ff3038970a885f2bf194.roa (raw, json)
Hash identifier: LmPMRXvvgeUhp7LrwDVx0Vyq8O9dQ3rDWAyx8K7h4Mk=
Subject key identifier: 8C:0B:7C:5E:2A:EE:FD:CD:45:83:DF:EE:1B:4F:AF:52:CA:38:64:C7
Certificate issuer: /CN=d380f261f4e23159ca264d740602eeef80a350a5
Certificate serial: 032C
Authority key identifier: 70:54:53:74:8F:CE:20:C5:2C:BB:28:F4:AE:89:87:C3:4F:C8:D5:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d380f261f4e23159ca264d740602eeef80a350a5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b63a8af6-9fd2-47cd-bcc8-fef826e9c722/b809418f187fb95abcd4ff3038970a885f2bf194.roa
Signing time: Thu 06 Oct 2022 13:46:29 +0000
ROA not before: Thu 06 Oct 2022 13:37:24 +0000
ROA not after: Sun 06 Oct 2024 13:37:24 +0000
asID: 263737
IP address blocks: 138.59.140.0/22 maxlen: 22
2803:df80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d380f261f4e23159ca264d740602eeef80a350a5
Validity
Not Before: Oct 6 13:37:24 2022 GMT
Not After : Oct 6 13:37:24 2024 GMT
Subject: CN=b809418f187fb95abcd4ff3038970a885f2bf194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:e9:a2:fa:74:13:2d:41:9c:51:12:70:52:
f1:05:b7:13:e3:a9:d0:99:d8:22:8f:8a:cc:25:a4:
8b:66:48:57:10:e6:03:db:4a:af:8f:0f:f8:56:94:
1e:a4:3d:ff:e3:14:31:18:de:00:f0:fd:c8:90:f9:
66:1c:ad:c4:a1:9f:9d:2c:3c:01:41:96:ed:ce:08:
31:92:ed:f1:44:ea:12:98:bf:d7:9c:ce:3c:6c:a4:
ed:17:db:98:ae:67:f2:88:7c:0e:c6:08:b7:f8:8a:
08:bb:be:36:bc:45:f8:cb:63:a5:1a:ec:b9:5d:2e:
51:0b:74:3b:2d:3f:81:d6:f9:5f:22:dd:8c:1b:de:
ba:af:32:a4:da:9b:88:7c:a9:42:6a:c8:2a:be:09:
1d:2c:68:da:55:a6:b3:06:e0:78:63:a7:79:17:62:
a8:3e:10:f2:a0:69:6c:71:56:9f:be:51:ce:f3:ce:
44:41:37:03:33:3c:85:78:32:7c:5a:71:73:2a:37:
f5:10:33:9e:cf:16:18:79:95:9a:10:46:44:9d:9b:
2f:75:08:2e:d0:6d:56:80:a8:ee:c6:31:8e:05:b8:
d8:0c:d0:2d:a3:f0:7d:b9:a6:6f:3d:67:09:b5:16:
6d:c4:29:67:2b:00:b6:dc:9b:d6:03:59:6d:2c:04:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0B:7C:5E:2A:EE:FD:CD:45:83:DF:EE:1B:4F:AF:52:CA:38:64:C7
X509v3 Authority Key Identifier:
keyid:70:54:53:74:8F:CE:20:C5:2C:BB:28:F4:AE:89:87:C3:4F:C8:D5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d380f261f4e23159ca264d740602eeef80a350a5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b63a8af6-9fd2-47cd-bcc8-fef826e9c722/b809418f187fb95abcd4ff3038970a885f2bf194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b63a8af6-9fd2-47cd-bcc8-fef826e9c722/d380f261f4e23159ca264d740602eeef80a350a5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.140.0/22
IPv6:
2803:df80::/32
Signature Algorithm: sha256WithRSAEncryption
3b:a7:a3:c9:4e:b0:5f:03:9c:1d:d0:53:86:81:92:42:f7:d6:
9c:bb:ac:0a:5e:55:b3:e2:18:0d:56:18:e3:05:50:6c:9b:1f:
11:29:9f:ff:ef:97:a6:b2:68:2d:48:60:df:b9:8d:25:1f:f7:
f4:3e:f0:64:8f:83:68:d8:f1:93:62:b7:85:93:1d:e3:1c:8b:
3d:5a:06:70:f1:76:1b:48:2d:57:4a:48:23:9e:7b:ca:c2:19:
bb:f5:4f:f5:86:86:83:ea:b4:1f:56:1f:d4:db:d7:5c:5a:6b:
8a:c9:51:d7:0b:8f:78:fb:28:2e:77:84:30:7f:c6:dc:b6:1b:
78:1a:85:f7:22:6b:2c:49:1b:82:81:00:db:24:ba:ba:f0:e9:
53:ef:bb:41:e3:42:af:5c:dd:79:fb:94:6b:8b:c4:6b:08:3d:
91:e8:af:f9:68:ef:30:ee:33:50:ed:45:e8:33:d6:b0:c4:81:
03:fa:be:5a:92:ba:cf:0e:24:42:15:2a:f3:c5:d9:1b:9f:cd:
4b:05:f1:78:fc:a8:57:50:a2:0b:24:46:92:d8:1b:72:7b:cd:
34:35:a0:2e:4e:f5:d0:8d:2b:6a:4d:24:37:3f:3f:0e:23:b7:
96:be:57:01:57:cd:ed:1e:60:13:8d:32:0a:1c:06:55:29:96:
ae:ef:84:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org