Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/5026fcd39ec9c1fcefdabb46d8c31af39475c33e.roa
File: 5026fcd39ec9c1fcefdabb46d8c31af39475c33e.roa (raw, json)
Hash identifier: yXxKU8TXfcPosaheA3CI17A4IRmaubYzjKpJ2ZKapl0=
Subject key identifier: EF:82:C9:48:7D:87:4D:87:FD:9A:E6:22:75:C3:5B:10:C1:6A:38:C7
Certificate issuer: /CN=a79f7c916be3a1ea7251327afacd5a877554edc2
Certificate serial: 15B30C
Authority key identifier: 72:FE:A5:0E:06:DE:B4:49:AE:7A:DE:6D:E0:3A:29:CA:3D:AA:DF:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79f7c916be3a1ea7251327afacd5a877554edc2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/5026fcd39ec9c1fcefdabb46d8c31af39475c33e.roa
Signing time: Tue 22 Feb 2022 19:27:23 +0000
ROA not before: Tue 22 Feb 2022 03:00:00 +0000
ROA not after: Thu 22 Feb 2024 03:00:00 +0000
asID: 52327
IP address blocks: 131.72.240.0/23 maxlen: 24
131.72.241.0/24 maxlen: 24
131.72.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 08:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1422092 (0x15b30c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f7c916be3a1ea7251327afacd5a877554edc2
Validity
Not Before: Feb 22 03:00:00 2022 GMT
Not After : Feb 22 03:00:00 2024 GMT
Subject: CN=5026fcd39ec9c1fcefdabb46d8c31af39475c33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:4c:bd:90:e6:be:43:db:f5:c3:60:5e:7a:
88:1f:96:9b:2c:5e:f8:16:4c:aa:20:d7:59:11:11:
80:f5:c8:fa:85:d8:43:2a:6c:d3:2b:f5:41:01:52:
a2:27:15:0a:0a:94:14:fc:a4:1f:dc:c0:be:eb:37:
11:8a:7b:f5:b9:24:fe:99:11:00:f6:8d:63:0e:73:
18:66:90:71:49:a5:29:42:de:2f:ab:ea:71:b4:5c:
fe:fa:83:4c:4c:bf:b2:95:90:7d:a2:f9:11:de:ec:
c1:ef:af:33:cd:6d:e5:62:ef:fc:bc:78:60:3f:46:
16:3d:9e:0f:8d:9f:ea:06:cb:41:f6:00:c9:37:37:
fc:7d:13:46:a1:4c:b9:19:a0:cb:f6:99:6e:bc:99:
9c:d4:05:b1:c7:2a:86:ba:b2:28:8f:83:d6:3d:3d:
8a:de:50:c6:3d:c6:85:b4:f6:8e:d3:fa:00:08:a3:
69:83:f1:a9:f9:b9:14:ac:e4:9e:d7:fd:19:ab:9a:
72:fc:28:ce:63:fb:8f:91:e4:ce:db:88:28:89:87:
02:a3:87:d1:44:99:40:e7:0e:b0:df:17:8e:26:bf:
e1:db:c9:3d:c7:cd:2a:3d:00:60:e0:17:b9:12:97:
82:10:5b:c1:8d:d1:a5:b7:ab:bd:a6:a5:86:37:40:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:82:C9:48:7D:87:4D:87:FD:9A:E6:22:75:C3:5B:10:C1:6A:38:C7
X509v3 Authority Key Identifier:
keyid:72:FE:A5:0E:06:DE:B4:49:AE:7A:DE:6D:E0:3A:29:CA:3D:AA:DF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a79f7c916be3a1ea7251327afacd5a877554edc2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/5026fcd39ec9c1fcefdabb46d8c31af39475c33e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ce70e6b8-9013-4bd6-9c8f-dfbbfa3bc112/a79f7c916be3a1ea7251327afacd5a877554edc2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.240.0-131.72.242.255
Signature Algorithm: sha256WithRSAEncryption
3a:14:28:e5:ea:bb:fb:a4:29:33:31:77:28:5a:bd:a7:39:0e:
e1:1d:ff:05:10:ea:fa:60:f7:5b:ae:17:dc:0d:3f:ef:a5:b1:
84:1b:9f:ee:98:a0:93:95:52:4e:7a:3a:ba:54:1e:cb:dd:0f:
30:09:08:67:4f:05:b7:72:02:8e:1a:f5:38:8d:40:9f:e2:4c:
cb:65:76:61:b6:92:16:c4:67:1e:dc:be:2e:a9:fd:b6:53:47:
4c:4e:61:cb:71:fc:90:95:c1:2a:b5:5a:ff:c5:0b:d6:6c:5f:
06:1b:22:95:15:46:e7:36:d8:ca:b4:2f:0e:09:da:52:fa:1b:
aa:26:38:85:c1:13:5a:77:c1:8e:2a:d4:2d:90:9c:f8:06:53:
29:3c:4b:87:b2:6c:44:c8:06:1f:9f:c4:e0:d0:d0:05:2a:d0:
dc:88:17:ee:f1:c6:05:3d:2d:4d:b1:92:df:0d:dc:28:6f:ee:
a7:61:7a:86:22:f3:fc:88:de:1f:c2:2d:13:df:d6:3b:44:18:
38:13:63:88:01:5f:ac:a9:f5:21:fd:92:90:58:d2:05:1f:3b:
f9:e4:64:fb:05:af:a6:36:4b:bb:a4:cf:e6:4a:77:d4:f5:b3:
36:c2:51:e9:95:ba:00:40:54:a6:27:91:d8:f0:28:ea:36:63:
5d:28:ef:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 09:21:07 2024 by rpki-client on console-fra.rpki-client.org