Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c8e44697-6439-4ff4-8eca-cbfb1cb9fa18/f97d7affcdc078aad4b768741a4ba25c29c84d01.roa
File: f97d7affcdc078aad4b768741a4ba25c29c84d01.roa (raw, json)
Hash identifier: a25MySz70zlCjjGolNoBRj30O4VkfW2MDRVHzK7rcRc=
Subject key identifier: 50:AA:F9:D5:73:34:04:A8:E8:AF:0D:70:CF:1B:43:D4:78:E9:B0:FB
Certificate issuer: /CN=bd6057380dd89aff72d7ae49a56065fc54e4eeee
Certificate serial: 012D
Authority key identifier: F0:C8:B1:04:9F:A1:06:94:7E:E6:C0:0B:55:38:AC:EB:10:2B:ED:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd6057380dd89aff72d7ae49a56065fc54e4eeee.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c8e44697-6439-4ff4-8eca-cbfb1cb9fa18/f97d7affcdc078aad4b768741a4ba25c29c84d01.roa
Signing time: Mon 22 Nov 2021 20:21:05 +0000
ROA not before: Mon 22 Nov 2021 02:00:00 +0000
ROA not after: Wed 22 Nov 2023 02:00:00 +0000
asID: 28397
IP address blocks: 138.94.140.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd6057380dd89aff72d7ae49a56065fc54e4eeee
Validity
Not Before: Nov 22 02:00:00 2021 GMT
Not After : Nov 22 02:00:00 2023 GMT
Subject: CN=f97d7affcdc078aad4b768741a4ba25c29c84d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5c:bd:70:02:d4:b6:e4:88:09:e1:c6:6c:4f:
49:5f:98:42:79:62:44:65:81:73:b0:01:fa:73:8e:
83:4c:87:59:45:33:cb:c8:98:17:b4:77:75:f5:02:
d1:bb:81:97:ec:8a:cb:c5:17:9b:0d:c8:cf:d9:aa:
d8:56:5e:30:76:7d:d4:c9:56:8d:6b:8e:99:70:9f:
37:cb:27:10:93:5b:d9:27:ae:a4:79:f7:25:79:de:
a8:42:74:7e:d7:66:7b:fe:2d:ea:15:f0:8a:ae:fd:
b8:81:58:96:2f:1c:38:e2:74:b5:69:23:c4:66:51:
24:88:ec:e8:2a:0e:3c:11:a8:2f:10:ad:6c:f2:c8:
7f:32:3b:28:a8:d7:d3:83:67:f9:b5:f3:21:2a:37:
ea:50:0b:2c:5c:ef:54:cd:5e:93:d3:80:50:98:b7:
d7:f9:b4:d8:9e:cd:1a:6e:e7:bb:7e:38:a0:66:fb:
54:14:8e:e8:5d:ba:6e:be:c8:4e:f4:e7:4c:15:f2:
cd:9d:08:1e:b9:ac:90:79:a1:f0:80:e1:0a:22:8d:
f7:ef:20:81:5e:21:07:54:3a:e5:42:02:96:e9:d6:
c4:85:e0:ad:85:f0:80:64:54:6b:cd:80:c3:38:c3:
d7:46:a6:dd:8e:dd:e6:57:36:80:58:53:4e:8c:13:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AA:F9:D5:73:34:04:A8:E8:AF:0D:70:CF:1B:43:D4:78:E9:B0:FB
X509v3 Authority Key Identifier:
keyid:F0:C8:B1:04:9F:A1:06:94:7E:E6:C0:0B:55:38:AC:EB:10:2B:ED:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd6057380dd89aff72d7ae49a56065fc54e4eeee.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c8e44697-6439-4ff4-8eca-cbfb1cb9fa18/f97d7affcdc078aad4b768741a4ba25c29c84d01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c8e44697-6439-4ff4-8eca-cbfb1cb9fa18/bd6057380dd89aff72d7ae49a56065fc54e4eeee.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.94.140.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:43:ff:89:4f:a4:57:89:e0:5e:7f:b7:fb:4e:da:33:66:1d:
b4:25:f3:f4:ca:57:e5:09:66:60:f1:b2:69:e3:dd:c2:f4:47:
05:de:70:5f:d7:3a:4b:0e:b9:b7:22:26:75:42:56:55:7c:0f:
04:5c:26:d2:9e:0d:c6:97:11:ab:bf:53:67:92:73:06:62:d2:
67:e7:51:31:ef:7a:b7:a7:ea:c0:0f:8d:e2:cd:59:61:15:c7:
f4:fe:bb:55:14:71:47:4b:5f:e7:99:14:84:7f:85:6b:d7:1e:
37:3d:9a:a3:38:01:53:3e:ae:96:01:58:99:4f:ad:b1:83:67:
49:ab:d7:6f:51:1f:df:c7:01:56:96:d8:85:58:16:c0:64:ef:
f1:a4:eb:81:cd:97:ea:ed:20:ab:33:c1:1e:ee:a4:cc:28:1a:
06:d8:af:ab:80:46:63:ee:c8:59:62:2e:ef:a1:c4:40:33:e1:
8b:ee:a0:b9:ad:2f:01:8a:72:76:1d:a5:75:a7:02:c0:58:18:
97:bc:91:6c:93:ef:76:e1:7b:af:b5:69:86:82:12:7b:5c:84:
75:20:8d:ca:59:cd:e0:f9:85:76:bd:a8:fa:51:fc:47:e2:49:
ef:d7:39:25:68:ff:4d:a1:f4:bb:d1:2e:31:5b:c8:88:25:56:
78:54:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 08:32:57 2023 by rpki-client on console-ams.rpki-client.org