Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/9fd26b9f4430b23e16eb80e9cdc955e912045534.roa
File: 9fd26b9f4430b23e16eb80e9cdc955e912045534.roa (raw, json)
Hash identifier: MjZl0kVvuG132SVWnqENDY2GIUT0fJc1ZVJSbXt8KQY=
Subject key identifier: 5D:4F:52:D1:54:FF:D9:A7:B8:35:93:9A:12:E2:C0:98:E7:94:B3:74
Certificate issuer: /CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
Certificate serial: 0DCBA8
Authority key identifier: 88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/9fd26b9f4430b23e16eb80e9cdc955e912045534.roa
Signing time: Wed 24 Mar 2021 14:33:50 +0000
ROA not before: Wed 24 Mar 2021 14:33:50 +0000
ROA not after: Tue 24 Mar 2026 14:33:50 +0000
asID: 61506
IP address blocks: 138.204.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 19:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904104 (0xdcba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
Validity
Not Before: Mar 24 14:33:50 2021 GMT
Not After : Mar 24 14:33:50 2026 GMT
Subject: CN=9fd26b9f4430b23e16eb80e9cdc955e912045534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:09:ff:28:91:6a:1d:a6:d3:e2:62:10:9c:
31:6e:e3:6b:1a:42:f0:e0:ec:73:2a:db:62:05:df:
8d:62:d7:d7:d4:49:bb:d1:6f:d9:2a:9b:99:18:6b:
0b:2a:65:f9:5f:69:e9:51:dd:29:60:c5:39:ca:16:
7a:b3:28:b8:c4:e0:9f:7c:58:67:a2:dc:ea:aa:01:
04:0a:36:57:2f:02:d4:8e:f1:b1:c9:56:bc:b6:99:
22:fb:5e:64:1a:20:63:35:a4:42:cb:5c:c9:de:17:
8c:82:5d:a5:9c:02:aa:bc:f0:f3:85:87:b5:20:f1:
57:94:60:b5:49:54:93:dc:9d:c0:b5:6b:f9:6c:df:
49:ee:6e:b6:da:52:7c:c9:5f:0b:62:9a:70:13:ec:
ef:2f:58:80:5d:27:9b:52:13:c1:06:c1:5c:e2:d5:
7f:50:4a:74:5d:da:c1:fc:ba:ba:02:d1:be:8a:c1:
c0:d7:01:d9:49:d1:c1:c3:55:8c:73:83:c6:25:61:
b3:13:4c:c6:0e:d6:c1:de:f3:64:29:08:2f:b0:65:
84:73:a7:d1:ff:c9:00:c8:cf:ca:6c:d9:30:8f:83:
29:ff:03:d0:56:bb:83:b3:0e:27:8c:2c:ec:96:2e:
44:02:fc:20:0c:5c:f0:27:c6:6c:16:b5:3f:0c:49:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4F:52:D1:54:FF:D9:A7:B8:35:93:9A:12:E2:C0:98:E7:94:B3:74
X509v3 Authority Key Identifier:
keyid:88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/9fd26b9f4430b23e16eb80e9cdc955e912045534.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/9d44e5cc8623c5cdabd559bdad688e9f03759533.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.230.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ed:1e:49:33:62:34:12:6d:b1:de:9c:2e:c7:20:de:80:21:
bd:40:87:a0:62:17:08:7f:4f:02:24:04:9f:8a:1c:ab:b6:7c:
1f:0c:97:15:c5:e4:0e:2a:07:c5:e8:c8:17:7e:90:b6:e6:d0:
2a:e2:92:58:e7:b6:6c:85:45:76:e2:98:bc:7d:20:53:d0:0e:
02:8e:2d:ba:71:41:0d:1b:77:32:f3:3d:28:1a:7a:c1:12:23:
a1:c7:ce:74:58:58:23:f3:21:a7:b2:48:eb:56:0b:10:31:4e:
c6:c9:da:7d:17:43:c2:f9:bf:5d:c5:5f:7f:b6:7a:f8:2d:76:
3a:db:8f:16:2d:71:98:1a:9e:05:d2:66:cd:af:d3:54:71:13:
fd:79:cb:83:ad:55:f4:ce:ee:60:7b:7a:e3:0e:0a:32:76:e0:
c9:30:ec:87:b8:01:e8:f1:4c:49:65:c5:81:d3:4c:e9:ec:ca:
f5:fe:2a:da:b1:02:96:e4:fa:d6:2b:68:69:34:86:18:0a:d1:
85:27:4f:f2:3b:bd:41:a1:c2:a5:0d:8f:05:2b:5b:62:a9:77:
e1:57:db:3a:a5:b9:b1:87:90:f6:53:e8:55:39:b7:27:c7:ab:
59:7b:a9:06:71:07:c8:a2:4a:ba:31:85:5d:be:b6:4e:cd:f8:
ed:77:d7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 22:43:43 2024 by rpki-client on console-fra.rpki-client.org