Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/aa8ba721d71e4f1d119dc92d41e97f23d194cc15.roa
File: aa8ba721d71e4f1d119dc92d41e97f23d194cc15.roa (raw, json)
Hash identifier: en3PyztZr8OI0lxb8QUC/WdZzWH4SNtYbKPps5dUUDA=
Subject key identifier: DC:0C:B6:74:76:55:6D:95:28:83:13:D7:71:B9:DC:BA:92:63:F6:4F
Certificate issuer: /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial: 146986
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/aa8ba721d71e4f1d119dc92d41e97f23d194cc15.roa
Signing time: Sat 02 Sep 2023 08:30:00 +0000
ROA not before: Fri 01 Sep 2023 08:30:00 +0000
ROA not after: Sun 31 Aug 2025 08:30:00 +0000
asID: 263833
IP address blocks: 138.255.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1337734 (0x146986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Validity
Not Before: Sep 1 08:30:00 2023 GMT
Not After : Aug 31 08:30:00 2025 GMT
Subject: CN=aa8ba721d71e4f1d119dc92d41e97f23d194cc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:b3:80:75:37:d8:a0:28:d4:0c:55:d2:07:
e7:ee:f4:36:0b:be:94:07:20:36:f6:ea:c9:cb:15:
61:e4:82:73:37:88:09:ef:5c:a0:cd:41:41:ab:95:
79:39:33:7a:3b:6e:5c:3c:04:23:2d:a8:cf:91:bf:
32:ef:25:6d:f1:4e:f5:5f:5a:d6:36:4c:ca:23:da:
11:f1:4e:1c:10:71:e8:a8:44:aa:37:e4:ba:3e:9e:
6f:d6:71:f5:c0:17:af:dd:b2:62:05:d0:36:61:84:
75:c4:a2:10:63:bf:ce:9d:25:d0:53:ed:66:f9:e6:
14:48:e0:38:74:18:bd:00:e4:06:be:ca:bf:0e:2f:
8a:89:91:60:a5:88:06:9e:f1:7c:a1:fb:16:4b:c2:
91:01:b1:30:b9:2d:08:9b:b7:21:36:56:4e:b7:f1:
7b:7d:0d:0c:a3:6c:11:2b:c3:36:0b:1b:7a:be:c4:
27:fa:96:0f:03:c0:c7:f1:32:28:75:0b:ea:7e:15:
de:77:2c:fa:f8:15:29:b6:42:ba:07:cc:66:69:b2:
56:42:75:f4:00:e9:a5:57:b6:23:5a:4a:cb:09:43:
35:f0:49:c4:58:17:c8:20:4b:e8:5a:bb:bb:61:ac:
ef:ee:aa:51:3d:98:63:bf:d4:f8:fb:71:36:ed:be:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0C:B6:74:76:55:6D:95:28:83:13:D7:71:B9:DC:BA:92:63:F6:4F
X509v3 Authority Key Identifier:
keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/aa8ba721d71e4f1d119dc92d41e97f23d194cc15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.168.0/24
Signature Algorithm: sha256WithRSAEncryption
81:34:60:25:f1:a5:c8:2e:4f:5b:e1:da:f9:06:18:41:e9:1e:
88:e5:65:9b:36:86:a9:41:17:90:c5:17:ff:1e:4e:b2:33:89:
b0:0b:a2:e5:e4:14:81:c4:f5:e9:8b:4f:e4:3b:b3:f5:9a:6b:
d1:85:7b:a9:50:5e:f6:a0:71:f6:94:b0:0f:72:3d:bb:16:92:
58:f0:5d:cf:64:6a:72:07:66:a5:1f:61:4a:ff:31:86:1c:ae:
f6:df:f0:f3:67:7b:f6:d0:89:9b:46:35:ff:81:56:14:04:a0:
fb:a0:41:fe:e7:02:83:5a:c9:39:b4:7b:b0:18:0b:b2:4c:95:
4e:55:c9:1e:fb:5a:e2:d6:bb:f2:df:99:b9:fa:f8:17:ec:86:
fd:4d:ae:6c:5b:55:13:0d:25:04:d0:b9:f2:cd:6a:22:96:8f:
b9:3d:12:8c:2a:b7:7f:77:5b:cb:79:4a:d6:df:6f:0e:3b:a3:
06:8f:21:02:89:79:46:08:74:79:d8:65:8e:2d:b6:c5:af:f3:
4b:6a:c3:ad:7d:62:06:31:ae:f5:79:3b:50:95:50:6a:7b:da:
a6:03:df:4d:93:b6:64:33:93:c8:15:14:56:ab:78:69:65:82:
1a:99:40:ee:d6:3e:25:9f:fe:25:84:6d:24:94:53:fa:66:36:
dd:e4:c4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 16 18:58:22 2023 by rpki-client on console-ams.rpki-client.org