Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/c5da19864ca37f10090a3f203ee5a595abd6c8d0.roa
File: c5da19864ca37f10090a3f203ee5a595abd6c8d0.roa (raw, json)
Hash identifier: xtOQTkzASeRIQt9VMntXb5LOcfkXehyX2eGx8SYC8Tw=
Subject key identifier: 93:18:96:EE:91:3D:0B:BE:9B:B9:34:E1:FF:7E:37:5B:EC:92:19:8B
Certificate issuer: /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial: 023D1D
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/c5da19864ca37f10090a3f203ee5a595abd6c8d0.roa
Signing time: Wed 01 Sep 2021 17:36:39 +0000
ROA not before: Wed 01 Sep 2021 03:00:00 +0000
ROA not after: Fri 01 Sep 2023 03:00:00 +0000
asID: 263833
IP address blocks: 138.255.168.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146717 (0x23d1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Validity
Not Before: Sep 1 03:00:00 2021 GMT
Not After : Sep 1 03:00:00 2023 GMT
Subject: CN=c5da19864ca37f10090a3f203ee5a595abd6c8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:a9:e0:27:26:21:e5:9e:85:0a:85:89:43:
5b:92:28:e5:e9:98:b6:dc:da:07:cc:3b:d4:fd:ba:
67:42:e7:da:42:2f:23:5e:f0:3e:8c:1e:7c:3e:c5:
69:a5:41:f6:eb:dc:94:aa:60:70:08:a5:6f:6e:9b:
64:d1:f6:25:fb:11:44:02:08:23:91:4c:10:48:a4:
dd:6d:7c:76:06:77:16:42:ba:08:61:67:b7:ff:f5:
83:d0:7a:d1:eb:55:b3:ce:3e:5d:cf:44:5f:da:f3:
db:af:d4:22:31:5e:ff:a9:a9:9f:2a:a6:ee:6e:9b:
d6:fe:2d:23:e1:b3:2f:e3:7c:22:0f:b9:43:3a:6b:
e8:4e:e8:e2:d2:e4:61:2a:44:d2:a7:24:cd:d4:7a:
2a:57:b7:e3:f6:82:92:09:67:86:bd:94:06:66:02:
09:71:14:7c:40:65:87:98:bb:7b:99:36:22:62:21:
55:98:e2:26:d0:85:ff:86:97:54:7b:f0:fd:c1:9e:
2d:2e:78:a9:69:70:84:70:27:0e:f5:f1:4e:85:30:
89:cd:91:04:e1:09:c9:67:65:d6:df:b5:9f:31:17:
85:de:44:c7:cb:0e:1d:d7:7b:ae:cc:67:55:8c:05:
1f:47:27:c9:45:9c:8d:07:75:20:02:c6:70:b5:b3:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:18:96:EE:91:3D:0B:BE:9B:B9:34:E1:FF:7E:37:5B:EC:92:19:8B
X509v3 Authority Key Identifier:
keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/c5da19864ca37f10090a3f203ee5a595abd6c8d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.168.0/23
Signature Algorithm: sha256WithRSAEncryption
59:3f:7c:82:11:05:26:81:e7:ad:d6:4e:24:73:84:b8:53:e5:
00:31:45:0d:ad:22:16:54:78:5a:f7:ca:57:66:ba:08:d9:4e:
c1:97:f5:7f:9c:58:fc:55:25:d5:b3:bf:4a:29:49:da:e1:1b:
a4:dc:0f:97:e1:ba:b1:82:ab:ed:b7:dc:df:47:b7:5c:78:dd:
92:a3:9c:06:97:82:c3:60:1d:fe:ee:32:9c:2f:01:af:ed:27:
87:02:e0:d8:ab:8e:76:1d:d7:b3:92:04:47:c6:2f:b6:19:d6:
0f:44:a8:6a:52:86:25:35:49:d7:71:99:bf:02:b7:be:9d:5c:
60:69:7c:30:ba:12:a3:79:a5:6d:a9:22:b6:89:38:a2:13:9c:
ed:9e:7c:78:07:c6:bc:26:8d:5c:3b:8f:50:88:d8:94:00:6a:
bd:e4:59:db:37:fa:82:90:f4:23:a0:7d:69:2a:9a:7c:63:a1:
5a:63:d4:13:3c:89:88:fd:9d:a3:03:a6:67:be:37:76:d5:16:
be:00:e4:cf:05:98:28:0f:7d:eb:04:eb:d7:99:a8:e8:1b:7f:
3e:ea:a8:ec:d0:f1:d5:87:70:c0:22:08:05:0d:95:fd:cf:2f:
f7:c1:59:09:1f:a8:7e:eb:45:e4:44:db:6b:30:f6:87:3a:51:
04:3a:c4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 08:49:08 2023 by rpki-client on console-fra.rpki-client.org