Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/e79244db1ad2de8e9d44668e4cb337093bb71381.roa
File: e79244db1ad2de8e9d44668e4cb337093bb71381.roa (raw, json)
Hash identifier: n+Hna3jIsLRlszHog9gfCz1YWmXFfiU9jzlij1+Dj+k=
Subject key identifier: 2C:DB:14:4B:54:35:B8:0C:94:4A:63:5B:BC:8C:9F:EE:32:83:E8:5F
Certificate issuer: /CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
Certificate serial: 0DCE20
Authority key identifier: 88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/e79244db1ad2de8e9d44668e4cb337093bb71381.roa
Signing time: Wed 24 Mar 2021 14:33:50 +0000
ROA not before: Wed 24 Mar 2021 14:33:50 +0000
ROA not after: Tue 24 Mar 2026 14:33:50 +0000
asID: 61506
IP address blocks: 138.204.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 19:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904736 (0xdce20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d44e5cc8623c5cdabd559bdad688e9f03759533
Validity
Not Before: Mar 24 14:33:50 2021 GMT
Not After : Mar 24 14:33:50 2026 GMT
Subject: CN=e79244db1ad2de8e9d44668e4cb337093bb71381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:40:54:e5:16:4f:c9:ed:a7:4d:53:83:13:8e:
e2:0f:ca:61:44:c9:a6:48:fe:28:97:0c:6a:e6:4e:
3e:ab:bd:f0:a7:81:56:70:a4:3a:bd:6a:35:c3:25:
95:4c:8c:d5:a8:95:9b:ff:09:77:89:6e:4a:e8:84:
e3:73:2d:25:2a:b3:b6:91:06:b2:6a:9e:58:42:86:
35:4b:89:81:ab:37:fa:a6:b3:a5:2a:e6:b0:5b:24:
33:67:64:63:06:60:9b:a0:10:68:af:d3:e2:12:62:
a8:08:c0:19:5b:71:68:43:87:f1:e7:6d:80:75:29:
53:f4:d2:a2:8a:5e:8d:15:31:06:c9:a4:43:23:48:
85:16:4c:20:d1:56:0d:3c:f4:71:d3:e4:9b:cd:d1:
66:8c:5a:ce:17:13:d7:41:51:2c:c3:e9:93:43:9d:
d6:c5:99:8e:c4:ec:1d:d6:d2:30:b3:ec:ce:44:11:
b0:3b:ab:52:89:96:b2:97:be:b3:b8:09:21:52:4b:
41:c9:7a:f1:e4:91:49:25:2a:0c:4a:be:b4:71:c4:
72:77:3b:c7:b8:27:3f:1d:4d:cc:b1:08:e8:46:24:
ae:93:09:5a:e7:ee:bd:be:db:02:27:f1:99:d4:df:
bc:d1:9e:7a:3f:62:d9:f5:88:9f:d5:19:44:3c:21:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DB:14:4B:54:35:B8:0C:94:4A:63:5B:BC:8C:9F:EE:32:83:E8:5F
X509v3 Authority Key Identifier:
keyid:88:50:96:CD:A6:E7:72:8D:C1:9C:13:39:45:81:74:B5:69:6E:44:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d44e5cc8623c5cdabd559bdad688e9f03759533.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/e79244db1ad2de8e9d44668e4cb337093bb71381.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcf91970-903a-4734-815f-762b38efe5a3/9d44e5cc8623c5cdabd559bdad688e9f03759533.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c8:4c:cc:02:de:47:dc:b6:39:15:04:4e:f7:30:4f:ac:30:
e8:f8:cd:d4:9c:72:98:08:6f:cf:ae:d3:f3:36:9d:10:6e:f4:
dc:5a:f8:5e:c1:f6:c0:fc:01:3f:29:af:92:3c:ec:12:30:b3:
87:2c:c8:3f:7a:c0:1d:44:47:b7:26:32:93:22:e8:02:e2:5e:
72:a8:7f:a9:f5:40:d6:5a:8b:68:26:7b:14:18:ad:ef:cc:ec:
40:35:71:df:9e:7c:d4:12:62:63:97:25:8c:c8:af:bb:9b:36:
2a:de:bd:be:e9:90:96:6d:fb:4e:86:44:12:ce:35:1e:f1:fe:
ac:cb:99:b3:58:d3:c0:8c:cd:aa:ed:31:cf:82:d4:ba:10:e7:
52:4b:64:89:f9:f8:2a:13:71:3a:a8:cb:8a:be:8f:88:68:69:
cb:f0:24:36:dd:a7:02:44:36:00:28:88:81:1d:2f:77:bd:3d:
54:d2:3e:7b:54:da:1f:97:75:27:2b:7c:33:c6:61:ab:f9:45:
2f:eb:07:ee:24:2b:5e:2d:a6:f2:84:0a:8c:39:3c:c0:93:9c:
04:cf:4f:1d:28:f7:01:1e:b7:58:ca:00:95:c7:19:28:5d:59:
05:be:8e:94:79:da:6a:c9:87:04:e9:e1:cc:36:36:e7:37:43:
e8:c5:bd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 23:00:00 2024 by rpki-client on console-ams.rpki-client.org