Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/17c99601803a567bc538ad4eb93e0f58e7197a65.roa
File: 17c99601803a567bc538ad4eb93e0f58e7197a65.roa (raw, json)
Hash identifier: GUh4Eh00SbTs8NvhAlk7u5NTAM8HBVE2zq4veCnDhdo=
Subject key identifier: 44:14:29:55:B8:EE:D3:85:C7:31:C9:57:F0:A8:4C:B3:E3:F5:B7:D5
Certificate issuer: /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial: 144ACB
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/17c99601803a567bc538ad4eb93e0f58e7197a65.roa
Signing time: Thu 31 Aug 2023 08:30:00 +0000
ROA not before: Wed 30 Aug 2023 08:30:00 +0000
ROA not after: Fri 29 Aug 2025 08:30:00 +0000
asID: 263833
IP address blocks: 138.255.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1329867 (0x144acb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Validity
Not Before: Aug 30 08:30:00 2023 GMT
Not After : Aug 29 08:30:00 2025 GMT
Subject: CN=17c99601803a567bc538ad4eb93e0f58e7197a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:61:0b:b4:d0:65:22:31:bf:05:a4:ba:49:ad:
fd:36:5b:ce:f5:5d:9f:42:da:1c:84:ae:c2:6e:4f:
26:7b:99:f8:c3:5e:78:0d:14:06:50:c5:bc:5e:b9:
40:e5:f3:ee:52:f9:32:88:23:78:55:8f:96:b4:15:
86:e0:a0:dc:b5:e5:16:bb:c9:c4:a1:43:30:7c:8f:
be:1f:35:e0:cd:51:9d:18:62:ac:2f:14:ae:1c:1a:
04:7e:d0:2d:8d:7b:19:85:f0:ff:ce:6d:da:6b:f8:
d0:fc:93:06:5a:4d:86:ac:47:29:a7:10:94:8b:69:
c4:64:04:20:2e:88:ff:1c:32:b4:da:6d:58:36:29:
9e:1b:f4:4c:8d:0d:c9:fe:37:bc:b6:1e:e2:88:76:
06:0f:79:af:db:1f:11:28:5a:32:e5:b0:de:5f:30:
44:5d:fd:b9:bd:23:f5:f3:00:6e:57:5b:d6:36:dd:
fc:cf:b7:f4:61:d1:06:46:76:fc:9e:19:b0:cd:56:
8d:46:b9:51:a6:e9:95:04:7e:ca:b2:e6:b9:58:6b:
74:c7:5b:9f:5f:8f:09:c9:ae:19:02:79:95:7c:ca:
19:83:20:95:95:64:db:3a:a2:95:aa:da:b3:a8:59:
e6:9a:c2:1d:fc:29:fa:8a:96:f0:fb:3b:bb:c0:7d:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:14:29:55:B8:EE:D3:85:C7:31:C9:57:F0:A8:4C:B3:E3:F5:B7:D5
X509v3 Authority Key Identifier:
keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/17c99601803a567bc538ad4eb93e0f58e7197a65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.171.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fc:47:21:92:68:c6:19:64:d0:79:59:25:b3:ce:e6:85:ad:
0a:e2:9f:92:9d:bd:3f:0e:fd:7a:b9:c5:38:5e:ca:f1:f2:1d:
c3:5e:05:71:1b:ea:32:2c:bb:cc:87:2a:aa:5a:07:15:42:7a:
31:50:98:97:2b:d0:d4:02:67:66:d6:6c:b5:d7:a7:9a:da:03:
50:58:1a:a3:9c:5e:7c:2a:57:b1:6e:03:f5:2a:9e:3e:75:ab:
b8:c1:46:05:70:f2:3e:55:08:97:55:53:5a:55:b5:9b:16:ed:
7b:26:db:52:0d:2b:5f:f0:81:46:a2:46:9a:10:c5:07:f8:00:
ff:92:96:ce:83:4e:75:46:13:9c:92:85:ea:39:23:ce:43:8f:
ba:8e:16:1a:1f:a8:54:28:3f:b9:cf:09:16:cc:09:05:62:9c:
08:30:d0:d3:82:74:65:39:61:d7:ec:53:48:30:ac:68:58:b7:
49:dd:7d:0e:97:2e:21:e8:fe:f2:ad:de:12:eb:6a:47:f4:5c:
d7:35:bb:4e:57:f1:7c:5a:df:b0:a9:4b:f3:7e:fd:70:6b:15:
09:06:51:0c:65:e3:9c:02:ac:05:02:9b:bd:00:e4:39:ed:2b:
c4:50:ef:11:4b:13:39:3a:8c:48:28:6c:8c:e8:88:c5:a5:45:
21:1f:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 16 18:58:22 2023 by rpki-client on console-ams.rpki-client.org