Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/f01c78aff682d80d2cb5ff315dbc1743af59372d.roa
File: f01c78aff682d80d2cb5ff315dbc1743af59372d.roa (raw, json)
Hash identifier: qmTVxFRnJJTFe6RqrhD8ojC7dMz70ZK6UfpDriaF7Mw=
Subject key identifier: 51:23:5B:48:61:6F:F7:0A:FC:B9:6D:10:9B:53:7F:7F:26:6C:E2:44
Certificate issuer: /CN=53a84133ecea8791e075c28348a5c7805616cc52
Certificate serial: 09ADD7
Authority key identifier: F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/f01c78aff682d80d2cb5ff315dbc1743af59372d.roa
Signing time: Tue 25 Apr 2023 21:48:52 +0000
ROA not before: Mon 24 Apr 2023 21:48:52 +0000
ROA not after: Fri 25 Apr 2025 21:48:52 +0000
asID: 272043
IP address blocks: 131.72.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 13:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 634327 (0x9add7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a84133ecea8791e075c28348a5c7805616cc52
Validity
Not Before: Apr 24 21:48:52 2023 GMT
Not After : Apr 25 21:48:52 2025 GMT
Subject: CN=f01c78aff682d80d2cb5ff315dbc1743af59372d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:b2:87:31:a5:c9:10:7a:6c:64:2b:f8:ab:
24:a1:0c:3b:84:f2:09:49:d1:00:c7:57:a1:76:d7:
c3:ac:a6:43:55:ac:15:61:6d:f6:5c:d1:d4:3b:42:
c7:76:ad:86:75:7d:cc:73:55:b2:06:75:c9:50:ec:
42:f6:23:c8:dd:7d:2e:68:7e:c3:67:67:7c:cf:bc:
78:d3:68:0a:c7:a3:78:f1:42:30:5d:7f:c4:31:62:
21:21:49:84:1b:9d:27:1b:9b:2f:78:9c:c2:8c:34:
43:e3:b1:b4:15:14:4f:d9:71:22:58:95:29:87:13:
52:74:e6:72:20:41:34:31:51:72:2e:59:98:2d:9f:
5b:48:82:b5:4f:76:fd:47:9c:3e:4b:7d:1a:4a:9f:
a0:99:a0:fc:de:bd:f7:58:c8:9b:7d:01:a5:28:a5:
d8:54:f1:2c:aa:8c:03:3d:70:73:90:94:17:2c:72:
fb:97:62:7e:10:65:60:7d:01:e5:bb:82:ae:ef:d0:
f7:04:86:83:69:a3:76:29:ef:ad:46:0a:bf:c7:5f:
a7:1d:2b:1b:ed:e5:ce:5c:3d:b3:3d:bf:9d:0e:d4:
a4:e1:2f:9f:1e:13:41:a0:2c:13:f3:f4:8c:f2:2e:
ce:53:fd:3b:d5:d9:f7:5a:18:1d:ec:55:ae:ea:82:
e2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:23:5B:48:61:6F:F7:0A:FC:B9:6D:10:9B:53:7F:7F:26:6C:E2:44
X509v3 Authority Key Identifier:
keyid:F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/f01c78aff682d80d2cb5ff315dbc1743af59372d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/53a84133ecea8791e075c28348a5c7805616cc52.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.138.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c2:9c:0e:0e:86:7f:52:72:b0:c8:68:35:61:24:4e:19:fa:
e8:fe:f1:48:cc:b4:39:fa:95:49:1d:7b:cc:3a:58:cf:85:ff:
de:22:3d:7c:61:7e:82:66:2d:ab:f8:b0:00:eb:04:b5:57:17:
bd:d8:62:31:2e:d6:da:d6:04:0a:f0:40:6f:91:6d:49:75:85:
59:25:86:13:a9:4f:cd:c5:41:37:d2:7a:31:7b:f7:01:3c:60:
7a:53:1a:4f:fb:dd:a6:cb:0e:59:03:f4:57:30:04:85:c2:64:
73:b5:44:05:c0:43:35:8a:e9:67:45:9a:6a:25:87:f7:00:e9:
7a:29:84:3d:34:65:26:73:c6:60:e0:34:ba:28:fd:48:14:db:
70:ad:12:57:af:0e:28:fa:12:36:86:56:79:2c:eb:c2:71:2a:
68:b9:f7:73:fd:3a:8d:a7:f0:db:b5:68:60:37:14:02:bc:36:
69:4f:21:2c:6e:2f:00:19:aa:28:19:3f:56:a5:1e:02:9f:df:
fd:bc:8b:d8:32:aa:c5:ff:77:7f:e3:1d:4c:35:43:d4:04:13:
60:7a:7e:f7:46:4d:fd:8a:91:9e:1d:0c:83:85:80:b4:6d:30:
c1:43:99:54:fc:4a:33:da:a6:64:35:bc:87:0b:65:8e:07:80:
cf:c5:a4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 18:34:31 2024 by rpki-client on console-fra.rpki-client.org