Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/5d431b284df671f6e937ef446db68ea7f986773c.roa
File: 5d431b284df671f6e937ef446db68ea7f986773c.roa (raw, json)
Hash identifier: pgzKGhXxQNwlDeC/H4YOwb63w23KN4M5UqSWST8IBso=
Subject key identifier: 43:C1:5A:83:0D:38:CE:C9:4A:FB:3F:D8:85:33:D1:34:89:EF:F7:65
Certificate issuer: /CN=231291584c896b71599d4bb8b4d15a658a7149ad
Certificate serial: 06FB
Authority key identifier: 64:87:98:0A:B6:3E:2D:3E:AC:27:72:40:35:FA:EC:BA:BC:5A:F0:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/231291584c896b71599d4bb8b4d15a658a7149ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/5d431b284df671f6e937ef446db68ea7f986773c.roa
Signing time: Tue 28 Sep 2021 18:47:33 +0000
ROA not before: Tue 28 Sep 2021 03:00:00 +0000
ROA not after: Thu 28 Sep 2023 03:00:00 +0000
asID: 20207
IP address blocks: 138.122.128.0/22 maxlen: 24
181.174.172.0/22 maxlen: 24
181.174.176.0/21 maxlen: 24
2803:cc80::/32 maxlen: 56
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231291584c896b71599d4bb8b4d15a658a7149ad
Validity
Not Before: Sep 28 03:00:00 2021 GMT
Not After : Sep 28 03:00:00 2023 GMT
Subject: CN=5d431b284df671f6e937ef446db68ea7f986773c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:48:99:af:6f:d3:7c:8b:33:11:1b:84:b2:41:
7b:8c:f5:fe:dc:7d:ec:64:06:49:a9:83:fd:f0:37:
cf:46:00:35:d9:3c:7b:53:23:60:86:70:39:c1:bd:
68:06:f0:f1:05:97:5c:d1:f8:3a:8d:2f:e3:14:3c:
35:36:30:b9:7c:a4:44:75:67:ab:07:0f:23:a5:71:
f5:82:1f:bc:cd:28:4b:a0:3f:d4:3c:ca:b1:e5:f2:
98:b2:62:ca:fe:e1:0d:e0:9f:13:5e:df:f4:a8:11:
84:89:0a:14:c7:9a:d6:de:58:00:d8:6e:2a:57:ab:
a1:6b:d3:78:d1:61:4b:b9:dc:e3:38:29:d8:6c:0a:
02:00:c5:39:a5:69:0a:82:20:6c:5c:70:54:84:1b:
7b:64:2b:97:88:7f:30:2b:bf:95:5d:b2:10:74:4e:
b7:b3:b7:28:d1:8c:1d:8b:f2:7d:79:36:a1:40:a5:
1e:fd:0e:4e:10:30:3a:14:0e:5c:2c:02:f4:5c:8d:
ea:b3:a8:66:bd:6d:00:74:eb:a9:9b:c4:8c:f7:ce:
90:c8:9d:ce:22:0f:de:3a:26:3d:5b:b2:6c:86:98:
25:0c:74:e2:e9:35:0e:22:92:de:e6:72:33:a7:fa:
1b:47:31:4d:3c:f0:ef:33:71:e9:90:0d:53:0b:4b:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C1:5A:83:0D:38:CE:C9:4A:FB:3F:D8:85:33:D1:34:89:EF:F7:65
X509v3 Authority Key Identifier:
keyid:64:87:98:0A:B6:3E:2D:3E:AC:27:72:40:35:FA:EC:BA:BC:5A:F0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/231291584c896b71599d4bb8b4d15a658a7149ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/5d431b284df671f6e937ef446db68ea7f986773c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/de84e000-f513-4191-a8ba-11f71aabf472/231291584c896b71599d4bb8b4d15a658a7149ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.128.0/22
181.174.172.0-181.174.183.255
IPv6:
2803:cc80::/32
Signature Algorithm: sha256WithRSAEncryption
59:d7:49:57:ce:66:14:69:82:d8:bf:af:83:20:2d:ce:a1:e7:
e3:8b:ef:31:b8:c8:cb:fa:d7:7c:92:56:20:35:bf:d7:73:b3:
64:6c:a9:99:1b:3b:fb:86:bc:14:fe:b4:68:51:fa:34:bb:37:
0f:c4:dc:8f:ad:89:8e:9e:af:6f:89:c4:8a:0f:e8:b0:d1:80:
c2:37:64:49:9a:b3:5b:7d:aa:bf:42:b0:a1:e2:f2:20:3c:00:
df:3f:e9:94:42:d0:59:d5:91:54:c2:68:82:85:fb:24:d1:d9:
b9:4d:58:1f:da:ef:82:e1:2d:19:bb:d3:e2:c9:fe:58:c6:b6:
ef:40:db:83:11:01:a7:ec:a4:b9:a6:5c:0e:b8:bc:58:fa:98:
68:1d:dd:46:5e:a7:ee:8e:17:1a:c5:27:55:be:5a:fb:16:d1:
2f:3f:9c:0c:c6:7c:0c:c7:c9:df:cb:30:25:6b:c7:54:5b:49:
29:c5:03:0f:f1:e3:cd:79:38:fe:3c:b8:45:e5:aa:cd:80:a2:
bb:73:9e:f3:c4:26:03:da:e3:99:16:84:a3:a9:a1:c3:00:9b:
8f:b6:e9:4d:f8:16:c8:e0:25:56:e4:fa:ff:43:77:79:0e:b0:
59:7b:9e:65:42:28:bc:41:eb:6d:fb:e0:eb:78:d4:8b:c0:ed:
b9:30:88:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:41 2023 by rpki-client on console-fra.rpki-client.org