Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/a5d17e2a9b937ef2433dc43fd1e7a5fbcfc8fbaa.roa
File: a5d17e2a9b937ef2433dc43fd1e7a5fbcfc8fbaa.roa (raw, json)
Hash identifier: C3kgca1HRBHQtWotgoFun1/k4LI+og1yRU9zojLoMbs=
Subject key identifier: DC:07:D3:97:0D:DC:32:9F:30:8A:D6:6B:8A:E3:F8:B8:B8:B1:9D:B5
Certificate issuer: /CN=fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c
Certificate serial: 0D0BF3
Authority key identifier: E9:04:9F:BD:E0:65:A3:72:D2:B6:C4:AE:F9:EB:3A:67:F4:11:D2:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/a5d17e2a9b937ef2433dc43fd1e7a5fbcfc8fbaa.roa
Signing time: Wed 24 Mar 2021 22:50:13 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 265688
IP address blocks: 138.117.84.0/24 maxlen: 24
138.117.85.0/24 maxlen: 24
138.117.86.0/24 maxlen: 24
138.117.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 855027 (0xd0bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=a5d17e2a9b937ef2433dc43fd1e7a5fbcfc8fbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:ec:0c:da:15:7f:84:7a:7a:df:ca:d9:3f:
7f:b4:50:e9:b1:16:76:ef:64:0e:c4:31:fb:c3:2a:
54:30:9c:4f:19:d5:e1:c2:7e:a1:ac:ae:b3:0e:7a:
ff:e2:25:23:d6:1d:4b:1f:8e:95:48:34:f0:7b:d1:
1f:40:90:b9:59:c7:f1:74:4c:25:9e:10:ee:2d:7b:
9d:65:c5:fd:e2:17:8c:00:56:9a:61:2a:65:26:e7:
dd:5f:5d:9a:32:fd:78:9d:0f:60:0b:e9:1b:c1:7d:
f1:76:5d:6d:21:d8:26:bd:eb:2d:e8:d1:d6:32:af:
1b:50:3f:9f:61:60:d8:8d:9d:15:0a:70:3b:a7:93:
ad:64:6a:e0:37:63:6f:5c:bc:c5:01:07:46:97:24:
7a:0d:44:96:1e:16:ca:21:80:db:ca:57:6f:00:87:
9c:64:c1:26:56:a8:d8:7f:cb:48:9d:76:96:36:43:
96:fa:2d:09:7f:4e:a6:80:ed:ea:74:c1:2b:f1:d6:
9d:78:2e:32:fd:8e:26:41:84:d1:62:27:e9:8f:6b:
29:cd:3c:15:63:f2:b8:b0:bb:0d:97:b4:5d:a6:19:
72:dc:ba:d0:09:0f:a0:fb:33:dc:21:47:92:09:f7:
9f:35:a5:d4:5b:1a:3e:55:9b:d2:fc:08:55:f4:17:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:07:D3:97:0D:DC:32:9F:30:8A:D6:6B:8A:E3:F8:B8:B8:B1:9D:B5
X509v3 Authority Key Identifier:
keyid:E9:04:9F:BD:E0:65:A3:72:D2:B6:C4:AE:F9:EB:3A:67:F4:11:D2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/a5d17e2a9b937ef2433dc43fd1e7a5fbcfc8fbaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.84.0/22
Signature Algorithm: sha256WithRSAEncryption
54:b1:86:b7:27:b9:c3:c2:4a:69:d1:5e:04:2d:ec:87:55:bb:
42:38:6c:a1:1e:5b:f3:27:99:3e:f8:2b:e6:b7:8a:60:00:8c:
ac:d7:a2:03:85:27:a3:ff:ae:b1:18:88:8f:52:31:d3:1d:81:
e8:08:ec:28:96:7d:98:23:4f:0b:25:42:d9:f7:db:83:fb:57:
6a:47:eb:0c:9e:ab:2a:f5:43:9a:66:bc:7a:2b:25:ba:4c:3f:
67:60:82:11:95:a1:f0:23:a0:8a:f1:f4:ca:2e:e0:66:12:82:
44:39:91:c7:5b:83:2a:8b:be:c3:19:23:5d:5e:c3:31:a5:71:
9a:19:51:0f:60:21:cc:f1:ab:e0:64:8f:86:ba:a0:8a:e7:97:
f5:72:d5:b8:a6:dd:ba:93:63:4a:2f:d8:1d:57:d1:7d:e8:2a:
9c:34:44:e1:00:ea:f0:14:e0:73:99:33:99:7d:1c:50:5f:ad:
8e:12:57:61:a3:1c:dd:31:e4:6d:88:cf:9a:a5:26:40:ad:d8:
c9:b7:7d:bf:c9:7e:6e:0c:c7:ea:cc:09:48:c4:17:21:cd:a2:
47:6e:fd:59:8d:2d:fa:af:f0:b3:7a:50:ab:3b:be:ea:e2:11:
b1:9d:2a:2d:7b:67:8b:d6:a9:ae:9f:e8:31:bd:fd:d3:42:56:
15:c2:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:52 2023 by rpki-client on console-ams.rpki-client.org