Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/b6db41d873c6c96d107b8f97b64fc75d306c4ef6.roa
File: b6db41d873c6c96d107b8f97b64fc75d306c4ef6.roa (raw, json)
Hash identifier: QwCyq1/hGK22Ltpm7J8OSYY2+10uvDtjOiFJ/TJFulY=
Subject key identifier: 28:6A:1C:85:1A:4B:F7:E4:BC:6D:DA:19:E0:09:C7:EA:36:DD:6C:BA
Certificate issuer: /CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
Certificate serial: 16525F
Authority key identifier: EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/b6db41d873c6c96d107b8f97b64fc75d306c4ef6.roa
Signing time: Wed 28 Jun 2023 03:54:33 +0000
ROA not before: Tue 27 Jun 2023 03:54:32 +0000
ROA not after: Sat 28 Jun 2025 03:54:32 +0000
asID: 27775
IP address blocks: 138.186.208.0/22 maxlen: 22
190.98.0.0/17 maxlen: 24
200.1.156.0/22 maxlen: 24
200.2.160.0/19 maxlen: 24
186.179.128.0/17 maxlen: 24
2803:a200::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1462879 (0x16525f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
Validity
Not Before: Jun 27 03:54:32 2023 GMT
Not After : Jun 28 03:54:32 2025 GMT
Subject: CN=b6db41d873c6c96d107b8f97b64fc75d306c4ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:c0:8d:73:ec:8f:00:66:82:ef:d8:23:7e:
bc:0f:01:a0:93:4b:c2:22:91:f1:8a:21:7c:26:e9:
65:58:af:83:34:1c:5b:2c:d7:69:95:a2:da:aa:ff:
67:e5:df:02:1c:f4:9d:35:39:dd:d0:7d:6f:77:63:
5e:74:d9:67:ec:63:ca:a5:15:9d:2c:70:77:d2:80:
e9:07:f1:fe:4a:d2:7b:e4:0d:f9:bb:a5:3a:a7:6e:
9e:f1:46:82:86:e2:bc:da:f1:9a:0f:59:34:6f:04:
07:a2:dc:86:f6:0a:82:a0:c7:5c:e7:ab:eb:67:54:
a4:83:38:78:31:66:05:26:e3:4d:19:6b:47:42:de:
b2:4e:e3:cf:93:9c:b3:1c:a4:26:d8:e2:97:74:9b:
b8:a2:19:85:c1:b6:e2:37:1e:33:b7:94:e0:b1:dc:
b9:6f:78:89:f1:de:40:f1:1d:fe:3e:0b:c0:86:0c:
3b:06:e6:cd:56:1a:d6:6f:bf:f8:55:fb:36:13:89:
7b:47:0f:73:9c:cd:c7:4f:8f:ec:87:57:66:8b:e4:
34:3d:00:c7:89:24:fe:55:08:27:bb:8c:16:ab:c4:
40:a0:cb:2a:d7:f5:ba:f1:2d:92:dd:da:c4:57:21:
95:f4:ab:ab:48:05:60:27:b0:0e:13:2d:e1:c6:56:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6A:1C:85:1A:4B:F7:E4:BC:6D:DA:19:E0:09:C7:EA:36:DD:6C:BA
X509v3 Authority Key Identifier:
keyid:EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/b6db41d873c6c96d107b8f97b64fc75d306c4ef6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/5f073dc50d388f5e4b8416173329e5c9fb55bacc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.208.0/22
186.179.128.0/17
190.98.0.0/17
200.1.156.0/22
200.2.160.0/19
IPv6:
2803:a200::/32
Signature Algorithm: sha256WithRSAEncryption
1e:ac:bd:6a:db:08:1e:b9:0b:39:33:6c:3a:c8:4b:3b:6f:1f:
74:31:49:ba:16:ec:36:de:b2:ab:d7:45:af:0f:cb:c1:e0:de:
0a:ea:41:4c:84:e6:5e:ad:c1:b4:55:f7:44:8f:a7:c1:df:c7:
be:65:1e:f7:1c:98:f8:7d:2b:d4:3d:b9:49:6b:4e:7e:f0:8a:
b3:36:7d:82:4e:66:00:07:b4:86:eb:60:a8:a7:8e:58:ec:68:
5e:5f:4c:51:0e:d4:13:37:64:19:ae:c6:af:59:b8:43:b5:34:
3a:24:10:95:30:3f:22:fc:0c:a9:5b:be:20:ac:64:3b:65:45:
46:d4:3a:29:c0:5a:ff:1d:ee:a4:6e:1c:f8:61:55:cf:cd:d3:
b2:e4:87:7d:8a:fc:72:6b:8e:63:a6:a9:22:16:e7:a0:91:1a:
bb:2c:9e:48:b8:9e:8e:10:30:f0:78:7a:4b:f6:20:0f:b7:e5:
95:28:8c:bc:9c:ea:2d:9f:90:21:52:24:ee:34:38:db:b3:d2:
f1:04:37:ae:8c:35:4f:18:63:bf:ba:e3:c7:c0:89:0a:29:d1:
8c:0d:36:98:ad:2c:8d:73:3e:51:7c:2c:59:11:cd:63:86:8a:
15:be:9b:85:46:b7:4a:33:e7:54:8a:07:34:87:8d:b9:da:ac:
43:5d:10:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 19:08:08 2023 by rpki-client on console-fra.rpki-client.org