Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/aada78920c6462a4b9255f99aa9ae72656f59c89.roa
File: aada78920c6462a4b9255f99aa9ae72656f59c89.roa (raw, json)
Hash identifier: RFV5uhAXLdrSxKxY/b6Ug4CVXv7fAPxp9uoYxWYX5x4=
Subject key identifier: 5D:C3:79:62:DD:1E:0E:50:BB:46:CE:E3:42:E7:F0:DD:14:F8:3F:2C
Certificate issuer: /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial: 0239FC
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/aada78920c6462a4b9255f99aa9ae72656f59c89.roa
Signing time: Wed 01 Sep 2021 17:34:38 +0000
ROA not before: Wed 01 Sep 2021 03:00:00 +0000
ROA not after: Fri 01 Sep 2023 03:00:00 +0000
asID: 263833
IP address blocks: 138.255.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145916 (0x239fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Validity
Not Before: Sep 1 03:00:00 2021 GMT
Not After : Sep 1 03:00:00 2023 GMT
Subject: CN=aada78920c6462a4b9255f99aa9ae72656f59c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:d5:76:91:f0:8a:7a:8e:d6:17:5e:8e:20:
68:f0:71:80:82:38:e5:ff:52:1a:65:34:de:b7:0e:
f2:75:08:f5:8b:e0:89:d2:cf:d9:ba:62:ca:d3:8c:
c7:05:d6:19:ac:6a:5d:85:c6:89:c8:f8:57:ad:ba:
51:c6:cb:df:92:ae:4e:e6:f0:d1:62:21:4b:60:13:
af:ee:03:db:34:d9:99:8b:f9:be:d8:ee:15:0a:26:
bc:1c:77:57:02:5f:83:ce:74:27:39:67:83:af:6e:
4b:65:50:39:3f:d5:7b:0d:78:8e:1c:13:63:ad:3e:
df:50:7a:f8:1f:7d:57:21:b9:80:be:c8:33:38:5d:
30:2d:50:a2:5b:72:6b:a8:ce:68:17:b4:55:fb:94:
b9:7a:6a:d5:cc:1a:4a:ca:23:e4:a6:f3:1f:8f:02:
e0:b4:48:e6:79:26:94:0c:b2:55:df:71:9f:36:29:
8e:f1:be:1d:d6:78:12:07:35:d2:4d:98:59:52:a1:
2a:c2:1b:fc:b3:23:84:33:54:17:47:d0:c1:34:70:
08:cb:ed:95:c6:8e:61:60:aa:39:66:6c:03:e6:9a:
6b:a7:bd:e6:e0:10:ff:14:13:32:8e:d0:81:8e:85:
c5:75:c3:ee:89:83:23:f7:95:a0:a7:e6:77:8f:31:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C3:79:62:DD:1E:0E:50:BB:46:CE:E3:42:E7:F0:DD:14:F8:3F:2C
X509v3 Authority Key Identifier:
keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/aada78920c6462a4b9255f99aa9ae72656f59c89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.171.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:7c:84:ba:3a:88:8a:9d:e0:cf:09:d8:1a:f3:1c:03:2e:7a:
cc:49:48:c0:17:7b:44:71:b9:20:37:3c:4b:6f:3f:a1:9b:88:
d7:65:b8:b4:e0:6d:2f:7e:b2:61:f0:5e:c7:d6:3e:2e:70:32:
63:3e:7c:e9:3a:dd:d0:0c:5a:a5:81:a9:df:e3:96:23:07:28:
15:51:73:db:69:f5:0d:8b:fc:dc:57:96:f2:5f:61:e9:77:2a:
ac:5c:44:85:9e:cb:b5:6a:7e:8e:2d:26:4a:af:64:86:d6:c0:
e6:91:de:62:b8:cc:09:f8:1c:e7:b8:aa:b9:da:2b:b1:fb:37:
e7:f9:25:f9:6d:8f:f9:22:71:cb:f5:51:02:91:88:00:c7:71:
39:a1:b9:e6:6a:2e:67:e8:1d:86:93:ad:5e:83:5a:08:48:6a:
24:fd:67:2c:9d:e4:ae:0d:b9:59:94:5c:dd:1a:43:5f:2c:e7:
1d:a5:5c:98:35:36:f5:07:2d:77:30:ac:13:e1:31:c3:9b:ff:
88:58:37:4e:ac:1e:2a:70:4e:79:5c:63:83:2e:6e:f1:c7:cd:
50:89:d0:2a:ce:54:c5:a8:5b:f0:e0:94:96:8a:41:f7:d9:ef:
48:bc:3f:5e:13:3f:65:d0:58:4f:86:a1:53:59:b9:93:a4:7f:
fc:ea:3b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 08:49:08 2023 by rpki-client on console-fra.rpki-client.org