Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/11e363883045bb852b96a2d6ccbeeac658fa66c9.roa
File: 11e363883045bb852b96a2d6ccbeeac658fa66c9.roa (raw, json)
Hash identifier: SwVUrdoQEOMahgKhyWrOjIay8PekxL/92xLNJ2VgFxY=
Subject key identifier: 9A:CC:A0:8B:B9:DB:64:7A:0C:43:59:99:31:26:32:6B:A8:26:B6:FB
Certificate issuer: /CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
Certificate serial: 0DC6F9
Authority key identifier: 88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/11e363883045bb852b96a2d6ccbeeac658fa66c9.roa
Signing time: Wed 24 Mar 2021 14:33:50 +0000
ROA not before: Wed 24 Mar 2021 14:33:50 +0000
ROA not after: Tue 24 Mar 2026 14:33:50 +0000
asID: 61506
IP address blocks: 138.204.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 19:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 902905 (0xdc6f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
Validity
Not Before: Mar 24 14:33:50 2021 GMT
Not After : Mar 24 14:33:50 2026 GMT
Subject: CN=11e363883045bb852b96a2d6ccbeeac658fa66c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2e:af:29:bf:de:26:dc:13:d4:21:53:1b:a1:
7d:ae:75:ad:05:46:83:0a:be:43:c6:2d:3a:5d:42:
3d:20:ec:c2:45:29:d0:89:cd:e6:db:ac:ca:1c:eb:
0d:47:66:5d:7a:27:34:6c:24:cc:8c:f6:ef:6b:3c:
b7:51:89:44:01:ba:a0:51:83:a8:78:34:89:0f:31:
62:1a:a2:dc:53:29:7f:01:44:7f:01:3a:4a:92:16:
69:40:02:d0:6e:c1:59:39:be:18:79:5b:2f:cc:d0:
43:fb:02:9d:71:11:ef:9b:fa:a9:ba:84:75:fd:36:
3f:91:87:76:d7:c0:c2:33:79:00:9d:13:56:f0:38:
72:ce:b7:01:5c:5a:8d:fb:56:db:5a:1e:7f:66:cc:
05:de:3e:0a:63:c9:dd:7c:61:bc:38:19:7f:9c:4a:
90:7b:29:0e:0f:ca:4c:e5:f9:14:60:1f:82:65:0a:
09:88:5b:17:1b:51:f4:26:b2:bf:93:f3:3e:9d:76:
24:98:5b:9c:c6:61:32:ef:bc:85:d5:f5:e4:a8:8d:
d2:79:a9:4f:0e:c1:aa:91:09:c8:12:72:9e:85:e8:
ae:92:d4:b5:50:41:6d:88:b8:e7:20:09:c5:0e:45:
99:ec:84:8e:72:d3:5d:04:26:d0:af:0e:3f:d1:92:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CC:A0:8B:B9:DB:64:7A:0C:43:59:99:31:26:32:6B:A8:26:B6:FB
X509v3 Authority Key Identifier:
keyid:88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/11e363883045bb852b96a2d6ccbeeac658fa66c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/9d44e5cc8623c5cdabd559bdad688e9f03759533.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.228.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c1:84:71:9b:41:cf:b8:e8:1e:7d:8d:69:26:80:18:54:51:
30:5f:23:22:79:ce:1b:5f:45:dc:d2:76:a3:a6:ed:31:34:e0:
07:c4:06:10:4e:b3:11:04:2e:7e:06:43:2f:c5:0f:ee:f3:c1:
39:51:d1:2f:9a:30:cd:28:f3:11:59:33:00:e6:00:c5:ac:53:
c7:17:22:cd:7b:67:6e:49:45:de:3e:90:88:aa:3c:16:e2:45:
8a:e4:ff:61:77:4a:8e:74:f4:0f:c7:d0:82:64:e6:0b:c9:25:
d6:f4:50:79:1d:fe:58:98:c7:96:e6:11:af:42:1e:1d:cc:da:
a7:6e:9b:d9:39:8d:ec:b3:4c:4d:1b:4f:f4:d4:60:57:4d:98:
9b:ff:5d:2f:c7:cf:dc:86:ff:60:80:3f:78:fe:a3:31:92:9f:
f8:62:d0:2e:05:48:64:3d:c3:31:d9:82:41:93:d0:66:a1:06:
c6:46:f3:00:de:78:dc:d9:f4:d7:63:e8:cd:70:31:a4:1f:de:
85:b2:f1:71:4f:bd:46:6c:e1:cc:e3:79:f9:61:dc:b5:d0:d7:
45:1b:a5:8d:d1:a8:62:20:65:a2:9d:7c:ec:91:86:35:e5:3e:
f2:9a:6c:41:e5:f9:f9:29:c7:e8:f2:ff:66:1c:b7:05:7b:ab:
f2:35:b2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 22:59:59 2024 by rpki-client on console-ams.rpki-client.org