Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/918a6aca19869eb5a686e6a93eb7537c6401d7e4.roa
File: 918a6aca19869eb5a686e6a93eb7537c6401d7e4.roa (raw, json)
Hash identifier: myRm1hjKXl7rxg0QIAsAcJQjHVgBSNtUbUW3I3nSu/8=
Subject key identifier: F4:F4:7C:97:6A:4D:9A:CD:F9:32:48:DA:F9:55:66:CD:34:B7:BD:41
Certificate issuer: /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial: 024C8C
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/918a6aca19869eb5a686e6a93eb7537c6401d7e4.roa
Signing time: Fri 03 Sep 2021 18:57:09 +0000
ROA not before: Fri 03 Sep 2021 03:00:00 +0000
ROA not after: Sun 03 Sep 2023 03:00:00 +0000
asID: 263833
IP address blocks: 138.255.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150668 (0x24c8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Validity
Not Before: Sep 3 03:00:00 2021 GMT
Not After : Sep 3 03:00:00 2023 GMT
Subject: CN=918a6aca19869eb5a686e6a93eb7537c6401d7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:34:2d:75:8a:2e:55:7a:31:01:d8:21:31:52:
bc:fb:2f:35:cc:1b:ba:1b:c3:0c:26:3f:41:2e:88:
b4:7d:a1:db:21:05:89:68:ae:99:a0:8b:3f:f5:bd:
61:40:8b:75:df:55:a1:1f:9c:b1:6c:7c:42:cc:4c:
3d:fb:f3:7a:83:63:5d:df:a1:11:82:84:34:92:4f:
83:95:20:93:ef:d3:3b:57:fa:e9:e5:dc:78:b0:67:
3b:f8:df:86:38:02:45:e3:c3:83:8b:9f:3d:ac:c0:
dd:b3:32:a2:76:15:b7:9f:6d:63:41:f4:1b:4b:05:
c1:9f:69:07:71:ad:64:00:36:dc:d4:ae:51:40:a0:
7b:e2:cc:1d:d0:f1:43:25:83:0b:72:39:77:52:28:
38:5c:27:bc:11:1b:2a:27:a7:6d:db:8a:30:d5:a2:
7b:68:c5:69:14:c2:64:fd:3b:2e:e6:06:25:e9:f2:
c1:c1:28:94:99:1c:b8:b3:11:db:5a:17:27:bf:89:
79:7b:13:67:91:1f:e6:f4:99:21:4e:e1:02:7a:bc:
a8:9d:b5:41:57:84:ee:30:24:76:94:1e:e9:ef:3c:
12:2f:d5:83:ac:ca:00:ec:05:cb:bc:21:0f:1e:c6:
09:85:f1:db:58:2d:68:5f:d5:0a:4f:e5:e8:cd:48:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F4:7C:97:6A:4D:9A:CD:F9:32:48:DA:F9:55:66:CD:34:B7:BD:41
X509v3 Authority Key Identifier:
keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/918a6aca19869eb5a686e6a93eb7537c6401d7e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:17:31:37:2a:88:68:fe:1d:cc:43:4a:b6:a9:11:1d:e9:29:
7b:de:0d:c4:51:b1:b6:e2:80:74:05:b4:be:23:9c:e1:a5:51:
c0:11:ee:99:20:ca:23:39:c0:0c:06:05:3d:dd:f3:23:5b:0c:
01:cd:e6:9c:b0:6e:82:38:3e:bd:d9:e2:28:ee:f5:3a:fb:49:
de:dc:f1:c6:f8:5d:20:6b:ff:a1:bc:ca:07:60:67:4e:3d:82:
5b:7b:54:1b:3b:85:42:92:55:da:d3:36:83:75:e8:af:a8:fd:
01:2b:9d:1b:19:c4:3f:57:7c:a3:fd:b0:46:82:46:49:07:03:
9d:31:6c:0b:18:b6:86:3b:61:01:52:d4:82:92:82:61:36:fe:
d2:cc:47:20:2d:04:94:20:96:d8:72:8f:d1:fb:cb:f0:01:47:
69:04:b9:e1:f3:f4:8f:4c:87:a1:87:95:d9:3e:42:27:fd:c8:
fc:e6:7b:a1:ac:aa:f0:26:a8:a4:04:f7:b4:4e:c7:7a:ab:82:
33:67:ad:43:85:b9:c4:9d:3c:02:e4:58:bc:a8:4d:9c:28:38:
f2:1f:e8:fd:57:eb:ea:58:ed:b4:c0:30:48:46:02:00:e8:ae:
fd:26:22:b0:67:66:8f:58:37:66:af:bf:34:4d:3f:32:1c:c6:
38:2e:99:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 2 08:51:33 2023 by rpki-client on console-fra.rpki-client.org