Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cca5f695-fecd-407f-b078-c217a0316e38/f64b93de4bbfcf664b9dc85bc58b1657570275f9.roa
File: f64b93de4bbfcf664b9dc85bc58b1657570275f9.roa (raw, json)
Hash identifier: bNmGUxE6Ke3Eh9urHVikcHCo4/fg2yBSj8aOZ2YPSRc=
Subject key identifier: 9D:1D:26:AD:19:1A:18:59:B1:B8:BB:74:4A:55:5F:BE:4D:17:FA:91
Certificate issuer: /CN=1669ca96bfe8f1b5fa34f63e50283fba6bc06ef7
Certificate serial: 06D89E
Authority key identifier: 6A:E1:AD:F9:2A:56:B4:A4:E6:6A:4D:1C:F4:F2:F0:50:8D:72:EB:C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1669ca96bfe8f1b5fa34f63e50283fba6bc06ef7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cca5f695-fecd-407f-b078-c217a0316e38/f64b93de4bbfcf664b9dc85bc58b1657570275f9.roa
Signing time: Tue 30 Jan 2024 19:24:27 +0000
ROA not before: Tue 30 Jan 2024 19:24:27 +0000
ROA not after: Fri 30 Jan 2026 19:24:27 +0000
asID: 265798
IP address blocks: 138.204.158.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 19:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448670 (0x6d89e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1669ca96bfe8f1b5fa34f63e50283fba6bc06ef7
Validity
Not Before: Jan 30 19:24:27 2024 GMT
Not After : Jan 30 19:24:27 2026 GMT
Subject: CN=f64b93de4bbfcf664b9dc85bc58b1657570275f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:4d:48:46:5f:10:65:0c:26:9a:40:3c:c6:
35:6c:71:f5:c8:5d:47:bf:ff:d2:e9:8d:8e:48:91:
ef:12:5b:39:b5:bd:0f:03:ff:b3:22:31:03:f6:6c:
09:fa:10:0a:ef:c8:9c:47:b8:21:f5:c1:ec:20:6e:
17:ce:8b:48:80:8d:97:ed:b1:89:f6:88:e1:3c:22:
e6:83:76:88:f2:3b:d6:cc:b0:68:70:a0:65:43:95:
29:2c:fc:ad:61:5f:18:39:3b:72:aa:cf:e3:9e:73:
c2:bc:e2:0c:eb:a9:ec:a8:64:0d:12:8b:7d:03:6b:
f9:23:1a:2f:ba:a7:cc:0e:bb:02:ac:75:04:1c:ae:
b8:cd:a3:ed:e7:55:11:b8:75:0a:78:f1:a8:4a:85:
f0:37:60:59:3c:b6:7c:74:aa:1c:bb:20:73:b8:93:
63:7c:25:fe:98:cc:04:c9:a6:a3:3f:7e:23:73:1a:
cd:99:8d:eb:4d:08:56:8a:d1:e0:f7:58:9a:25:0a:
0d:ba:c0:9d:91:36:46:9c:5f:52:0b:54:eb:77:a1:
5e:42:3c:58:10:a4:26:d8:78:f5:4e:16:66:18:5f:
97:a4:e6:28:b8:b6:59:5c:6a:d6:1c:13:81:fa:98:
67:58:27:6f:8b:16:26:86:c4:c8:77:9d:6a:fc:ae:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1D:26:AD:19:1A:18:59:B1:B8:BB:74:4A:55:5F:BE:4D:17:FA:91
X509v3 Authority Key Identifier:
keyid:6A:E1:AD:F9:2A:56:B4:A4:E6:6A:4D:1C:F4:F2:F0:50:8D:72:EB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1669ca96bfe8f1b5fa34f63e50283fba6bc06ef7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cca5f695-fecd-407f-b078-c217a0316e38/f64b93de4bbfcf664b9dc85bc58b1657570275f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cca5f695-fecd-407f-b078-c217a0316e38/1669ca96bfe8f1b5fa34f63e50283fba6bc06ef7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.158.0/23
Signature Algorithm: sha256WithRSAEncryption
88:fc:d3:03:37:33:46:9e:c0:c7:52:8b:1f:d3:ae:6e:68:1a:
2f:65:63:bd:bf:55:20:cb:a8:da:3a:e4:14:bd:3d:46:29:90:
55:9a:f7:ba:03:d8:b1:3e:7b:27:94:bd:13:a8:51:66:c1:f8:
72:bb:ca:e0:3d:88:9d:d6:d4:ca:cc:2c:70:6a:a3:a2:99:a0:
17:d9:4f:10:e7:08:df:e1:6e:db:52:0f:f9:94:ba:e4:20:93:
15:31:bd:c9:cb:5e:1a:15:6b:97:bd:87:68:3b:d5:ce:45:5a:
85:aa:fb:f2:1e:49:03:88:e2:a3:05:79:7e:69:a0:bb:09:bb:
e3:1a:22:33:ba:98:32:f4:e5:1d:03:c5:17:6c:62:58:d8:90:
08:2b:2e:e0:0e:ce:d4:e8:58:a0:ba:e0:a0:fe:d8:1b:e0:96:
ed:ac:6c:ae:e3:40:23:50:99:8f:a5:d5:1e:e3:4b:ef:79:4b:
49:de:80:83:8a:72:97:d7:80:46:e7:a1:a5:d7:27:e6:b9:37:
f7:18:2f:b9:32:26:b9:9d:39:fb:87:a5:43:ac:17:48:84:26:
c8:94:ca:f5:5c:d9:72:eb:c1:45:22:43:3e:40:93:ac:37:f7:
b3:af:6d:c5:a4:99:b4:11:4f:f5:5a:a2:f8:87:07:91:ee:03:
35:dd:a3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 21:43:18 2024 by rpki-client on console-fra.rpki-client.org