Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/84ee442eba47a228cb8e1a597ed3782b56ff0b53.roa
File: 84ee442eba47a228cb8e1a597ed3782b56ff0b53.roa (raw, json)
Hash identifier: P4XGZaFO8wKGD64Vq5LopcUogcKokuwD/w49mTesGPc=
Subject key identifier: C3:CF:F3:41:B6:2D:DA:30:9F:9B:69:1F:B1:15:1A:5C:91:EA:4B:3F
Certificate issuer: /CN=520a0d5e45ba98b3623fd2e4c2f44d192076b7f8
Certificate serial: 11EAA1
Authority key identifier: 85:F5:91:97:72:D7:FD:41:EA:ED:80:91:30:3C:E5:92:C6:CA:E7:6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/84ee442eba47a228cb8e1a597ed3782b56ff0b53.roa
Signing time: Mon 01 Nov 2021 03:13:55 +0000
ROA not before: Mon 01 Nov 2021 03:00:00 +0000
ROA not after: Wed 01 Nov 2023 03:00:00 +0000
asID: 263817
IP address blocks: 138.185.28.0/24 maxlen: 24
138.185.31.0/24 maxlen: 24
2803:a40::/47 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1174177 (0x11eaa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=520a0d5e45ba98b3623fd2e4c2f44d192076b7f8
Validity
Not Before: Nov 1 03:00:00 2021 GMT
Not After : Nov 1 03:00:00 2023 GMT
Subject: CN=84ee442eba47a228cb8e1a597ed3782b56ff0b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:e9:b2:50:76:31:9f:93:0b:88:98:a4:c6:
f0:1b:a8:0b:dc:f4:d3:e4:87:d5:64:f0:3f:ae:b0:
eb:ec:6a:c7:e4:b6:b4:5b:26:3a:0c:4a:18:f8:e2:
e7:e4:6f:c2:76:bc:e3:08:e0:09:43:1c:4b:d7:ef:
58:22:a6:06:b9:cd:8d:43:c8:8a:00:a3:57:83:71:
90:f8:01:73:cb:98:22:53:b2:c4:57:4e:16:7c:8e:
6c:aa:fc:b1:4f:a8:da:00:8d:7f:36:06:fc:b6:a0:
1b:d3:df:8f:d6:40:91:c3:28:01:44:81:95:d3:a2:
e1:16:74:08:a3:57:c5:ec:a1:68:0e:56:08:08:2d:
3f:f6:94:b9:f3:bf:55:43:95:8b:ed:25:a6:44:59:
c5:f9:4d:3b:52:80:c6:22:34:d4:39:bc:c5:9c:f6:
e3:1d:9d:16:80:1b:92:8d:86:79:93:b4:5b:b1:2b:
cf:60:cd:60:88:d0:81:2d:95:fc:83:24:86:16:88:
c6:9d:9f:ea:ac:69:55:b6:01:da:ff:cf:fa:d7:29:
cf:18:23:e7:7b:51:71:99:5f:3e:e5:20:57:e3:bd:
21:8a:ab:55:2c:7e:25:e3:41:72:6f:d6:46:3f:d7:
1f:83:40:d0:f6:96:35:64:cf:e3:0f:a4:36:c3:0f:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CF:F3:41:B6:2D:DA:30:9F:9B:69:1F:B1:15:1A:5C:91:EA:4B:3F
X509v3 Authority Key Identifier:
keyid:85:F5:91:97:72:D7:FD:41:EA:ED:80:91:30:3C:E5:92:C6:CA:E7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/84ee442eba47a228cb8e1a597ed3782b56ff0b53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c9cdbd63-8f01-448b-8c1e-f2e94e1c9e7b/520a0d5e45ba98b3623fd2e4c2f44d192076b7f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.28.0/24
138.185.31.0/24
IPv6:
2803:a40::/47
Signature Algorithm: sha256WithRSAEncryption
66:a7:36:18:65:12:7a:69:6a:74:09:9a:76:e9:43:a3:c5:a0:
ba:2d:48:6b:3c:c5:2b:c4:75:02:35:96:85:3f:10:1e:8f:9b:
be:81:c3:9b:f0:ab:5c:07:5d:f2:41:73:3c:aa:9a:98:b8:3e:
e3:d6:e4:dc:aa:a5:01:3d:62:c5:1f:71:38:39:f9:2e:f5:13:
b3:71:2a:20:1a:38:f2:93:76:e2:19:83:fe:6e:f9:8b:56:21:
c5:94:21:6d:e2:5d:8f:4b:6a:19:2b:40:9b:3c:57:89:d0:d0:
3f:11:d4:eb:45:11:f0:a2:3c:04:79:04:43:0e:ac:2a:62:c3:
6c:a1:57:c6:ed:11:8f:f9:7f:95:95:a0:4a:98:b9:51:2b:76:
37:4f:49:04:2c:19:3a:9c:5e:ba:78:92:49:db:01:58:cc:0c:
56:0a:aa:7c:98:98:f5:2c:f3:a2:73:b1:dc:74:44:86:8f:bc:
3e:73:f2:29:64:6a:45:e9:dd:85:93:8c:85:ff:9b:eb:38:3d:
f7:d4:ea:cc:36:91:1d:e6:ec:cf:00:05:35:0b:22:d7:ca:e0:
fa:70:c4:13:53:15:98:c1:3f:3d:f9:c8:88:fc:4b:c1:c1:bf:
32:e9:0c:c6:66:b6:ca:6a:7b:59:3c:17:a3:eb:8b:11:69:98:
34:38:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 08:18:28 2023 by rpki-client on console-fra.rpki-client.org