Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/ab9a58fbb6ad8758e81124895c862cd44df0d979.roa
File: ab9a58fbb6ad8758e81124895c862cd44df0d979.roa (raw, json)
Hash identifier: 5SvBmEfQnYNQ9D/Ck6QpjtPcN/xESVLu2/Gw5M5R7qQ=
Subject key identifier: 67:44:E4:F2:79:DE:13:47:86:B7:D5:3D:55:97:23:70:D6:53:CE:45
Certificate issuer: /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial: 0617
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/ab9a58fbb6ad8758e81124895c862cd44df0d979.roa
Signing time: Fri 04 Jun 2021 02:30:18 +0000
ROA not before: Thu 03 Jun 2021 03:00:00 +0000
ROA not after: Sat 03 Jun 2023 03:00:00 +0000
asID: 263833
IP address blocks: 138.255.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1559 (0x617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Validity
Not Before: Jun 3 03:00:00 2021 GMT
Not After : Jun 3 03:00:00 2023 GMT
Subject: CN=ab9a58fbb6ad8758e81124895c862cd44df0d979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:af:0e:90:5a:96:cb:46:62:ea:46:10:1c:
33:9e:f9:a9:29:81:77:ef:94:34:19:96:fa:85:09:
bc:af:a7:1c:04:9c:ba:57:28:74:89:a1:34:ac:1f:
f1:0c:17:c9:0f:6b:6b:23:09:46:7f:5d:8f:a1:ec:
16:b9:b7:bc:23:4b:f2:3d:c2:c4:43:75:52:6e:fd:
e5:3a:91:5c:c1:03:b8:68:61:27:d9:99:43:8d:09:
19:43:c8:ae:a5:12:18:a5:9b:ce:3a:da:d9:4b:7a:
dd:7c:99:32:aa:44:0a:58:9b:d8:81:ef:f4:62:f3:
f0:95:d1:ea:43:f1:f7:9b:86:4b:e8:60:d3:8d:aa:
1c:cf:3d:1d:41:ec:1d:3c:10:b0:b8:dc:6e:10:f1:
35:cc:da:6c:e8:cc:73:5b:6b:2d:6b:d2:a8:c6:f8:
c8:51:a0:43:74:bc:7c:54:62:fc:c5:94:69:bb:d0:
61:0d:20:d9:ae:bd:f0:b2:4a:72:17:7f:be:ea:d9:
4c:3a:de:5e:00:27:ef:1a:6f:6c:bb:b1:f3:f5:79:
fb:11:7e:9f:54:35:17:ce:4a:5a:7f:8e:66:b0:86:
f8:48:48:be:4a:b3:d2:f1:a7:1c:08:61:92:09:c9:
38:6d:08:18:a3:be:ff:cb:cd:67:38:dd:b3:38:94:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:44:E4:F2:79:DE:13:47:86:B7:D5:3D:55:97:23:70:D6:53:CE:45
X509v3 Authority Key Identifier:
keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/ab9a58fbb6ad8758e81124895c862cd44df0d979.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.168.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ad:05:dd:07:15:3b:60:70:b3:c0:48:14:13:03:8d:0c:6d:
5a:c4:8a:70:ed:19:b2:89:62:cf:ad:51:89:d2:fb:eb:dc:22:
59:8e:dd:e2:3e:4c:3e:36:43:bc:57:28:7e:ef:ce:e0:cc:e3:
2b:5e:20:41:73:a5:66:7d:e4:3b:9e:13:d0:db:cf:a5:36:c9:
4c:b1:07:be:11:4d:77:0b:a1:d6:2c:a7:4f:f1:71:de:43:6c:
2f:2e:a0:f8:14:5e:83:99:d6:e0:b7:a0:ab:f4:ef:53:70:8c:
7c:6b:24:29:6e:46:22:3e:32:c0:1d:2d:6e:21:ef:0d:e9:8d:
57:8f:99:10:24:56:10:f2:46:b2:00:14:d3:bc:e8:a9:27:d9:
d4:10:fc:b7:60:ae:7a:86:bb:46:3f:62:cf:f1:d7:46:1a:92:
26:cf:51:93:36:76:ee:64:1f:52:54:ea:f9:46:0f:9d:6f:46:
e6:91:13:eb:b8:dd:3b:50:82:12:a3:ce:93:1c:c6:98:e7:6f:
5b:1e:52:f3:ac:6b:50:da:6b:51:23:40:01:c4:07:25:78:ec:
fc:95:65:c9:e0:83:8d:17:42:5a:8f:4c:32:ff:ee:b5:a0:0c:
14:1c:b1:c8:3e:9f:9f:40:75:dc:65:f3:bd:da:33:fa:51:30:
aa:ee:c1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:55 2023 by rpki-client on console-ams.rpki-client.org