Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/f60680b53146a9f869f5d6165c38ec0e6baf161a.roa
File: f60680b53146a9f869f5d6165c38ec0e6baf161a.roa (raw, json)
Hash identifier: WBUwn7iLlMDmum1LuAYfYeZSfRIQ3j5cf9mKV9Bg8bs=
Subject key identifier: 02:DE:37:68:EF:0B:16:5E:31:25:73:EA:FC:81:08:18:19:5A:9C:13
Certificate issuer: /CN=b698b12c769bcfc856d5f3728b1c9b42d5bf4724
Certificate serial: 212CB2
Authority key identifier: D4:15:74:FC:9D:30:FF:74:72:33:D3:A3:20:4C:B5:E5:30:17:3D:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b698b12c769bcfc856d5f3728b1c9b42d5bf4724.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/f60680b53146a9f869f5d6165c38ec0e6baf161a.roa
Signing time: Fri 12 Apr 2024 15:17:42 +0000
ROA not before: Fri 12 Apr 2024 15:17:42 +0000
ROA not after: Sun 12 Apr 2026 15:17:42 +0000
asID: 263726
IP address blocks: 138.36.96.0/22 maxlen: 24
2803:f80::/32 maxlen: 64
Validation: Failed, certificate revoked on Fri 12 Apr 2024 20:11:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174130 (0x212cb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b698b12c769bcfc856d5f3728b1c9b42d5bf4724
Validity
Not Before: Apr 12 15:17:42 2024 GMT
Not After : Apr 12 15:17:42 2026 GMT
Subject: CN=f60680b53146a9f869f5d6165c38ec0e6baf161a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:07:ee:ce:79:9f:53:08:51:68:c9:26:a9:
d6:2c:cd:15:62:39:3e:32:1a:79:4c:fa:f1:f9:a5:
4c:da:fb:08:2c:3c:7b:fc:45:11:ca:d8:5d:8f:36:
3a:d1:a0:98:2c:d7:e7:99:5f:3d:50:db:b2:68:74:
25:9e:98:d4:0c:e9:a1:46:5c:c9:24:76:88:82:5d:
dd:ab:2b:ed:1c:fa:00:f0:91:ca:86:a4:ec:62:46:
cc:f4:a2:68:3e:fd:fc:ea:5b:6f:8a:2a:f0:72:e4:
7d:9e:fd:3f:a3:3d:e1:ed:0f:c2:29:a2:7a:0f:e6:
63:72:ec:ed:cb:62:80:2f:d8:b1:fa:e8:ac:b5:df:
5b:8b:13:17:f9:37:51:dc:a4:d0:e8:d3:a3:67:9a:
0b:df:ed:52:33:72:63:34:61:3b:f5:52:d0:4c:6c:
ce:d6:f3:b3:12:5b:61:a1:b9:7f:25:50:95:25:12:
98:37:fc:02:1b:21:a4:10:89:6c:38:ba:2d:a5:88:
7c:dc:2f:2b:84:d7:13:bb:81:df:ee:d0:77:b1:51:
93:27:1f:27:f0:77:be:0c:85:9b:42:0a:36:b6:d9:
6e:4d:e4:04:6c:16:29:03:74:2c:1b:56:bf:07:75:
30:4e:03:50:68:34:76:d3:3e:bc:01:93:3e:13:95:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DE:37:68:EF:0B:16:5E:31:25:73:EA:FC:81:08:18:19:5A:9C:13
X509v3 Authority Key Identifier:
keyid:D4:15:74:FC:9D:30:FF:74:72:33:D3:A3:20:4C:B5:E5:30:17:3D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b698b12c769bcfc856d5f3728b1c9b42d5bf4724.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/f60680b53146a9f869f5d6165c38ec0e6baf161a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ebb9a9a9-8864-43db-9a4b-6df67c73fdee/b698b12c769bcfc856d5f3728b1c9b42d5bf4724.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.96.0/22
IPv6:
2803:f80::/32
Signature Algorithm: sha256WithRSAEncryption
2f:f9:e8:0d:ca:26:fe:bf:e6:83:5e:13:fa:cf:3d:cc:a6:37:
ce:a8:f4:83:2f:2a:dc:65:bf:23:c9:28:7d:f5:8b:94:b3:61:
e1:b4:8f:27:52:7f:29:89:fe:0b:36:aa:3f:9d:62:a0:c5:df:
ca:9d:81:8c:73:61:7f:10:7b:b2:0e:72:73:8f:7a:9e:64:a7:
5c:19:bd:37:5b:ae:b1:14:1a:99:cf:bf:75:e2:bd:46:8c:a5:
d3:84:f2:b4:5e:79:2a:17:ee:d9:fd:a8:0a:d1:68:af:d1:d9:
f3:da:a5:ca:aa:d2:b3:57:67:22:30:c8:db:b7:be:ec:ae:44:
77:66:99:74:25:fd:b0:c7:b6:91:50:24:c8:b9:d6:55:b7:f6:
4d:c5:c7:b6:ce:f6:bd:81:5d:cb:97:d1:db:b7:89:9a:35:1a:
97:cc:4e:2a:38:35:d7:d1:4f:f4:ea:f0:1d:72:87:10:e1:2f:
bc:85:1e:b6:82:e3:8b:cf:8c:11:b2:41:ca:45:36:4c:a2:3d:
f7:e2:7d:ec:ca:61:41:98:5b:90:12:38:5a:b2:95:9f:2c:6b:
e5:f6:87:75:47:ec:70:4f:be:9c:57:58:9e:25:90:97:06:02:
79:67:db:fb:33:66:1e:c4:83:cc:77:f2:e8:26:a8:46:2f:89:
22:04:d7:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDISyyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI2
OThiMTJjNzY5YmNmYzg1NmQ1ZjM3MjhiMWM5YjQyZDViZjQ3MjQwHhcNMjQwNDEy
MTUxNzQyWhcNMjYwNDEyMTUxNzQyWjAzMTEwLwYDVQQDEyhmNjA2ODBiNTMxNDZh
OWY4NjlmNWQ2MTY1YzM4ZWMwZTZiYWYxNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnIEH7s55n1MIUWjJJqnWLM0VYjk+Mhp5TPrx+aVM2vsILDx7
/EURythdjzY60aCYLNfnmV89UNuyaHQlnpjUDOmhRlzJJHaIgl3dqyvtHPoA8JHK
hqTsYkbM9KJoPv386ltviirwcuR9nv0/oz3h7Q/CKaJ6D+Zjcuzty2KAL9ix+uis
td9bixMX+TdR3KTQ6NOjZ5oL3+1SM3JjNGE79VLQTGzO1vOzElthobl/JVCVJRKY
N/wCGyGkEIlsOLotpYh83C8rhNcTu4Hf7tB3sVGTJx8n8He+DIWbQgo2ttluTeQE
bBYpA3QsG1a/B3UwTgNQaDR20z68AZM+E5VEMwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFALeN2jvCxZeMSVz6vyBCBgZWpwTMB8GA1UdIwQYMBaAFNQVdPydMP90cjPT
oyBMteUwFz3sMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjY5OGIx
MmM3NjliY2ZjODU2ZDVmMzcyOGIxYzliNDJkNWJmNDcyNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWJiOWE5YTktODg2NC00M2RiLTlhNGItNmRmNjdj
NzNmZGVlL2Y2MDY4MGI1MzE0NmE5Zjg2OWY1ZDYxNjVjMzhlYzBlNmJhZjE2MWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYmI5YTlhOS04ODY0LTQzZGItOWE0Yi02ZGY2
N2M3M2ZkZWUvYjY5OGIxMmM3NjliY2ZjODU2ZDVmMzcyOGIxYzliNDJkNWJmNDcy
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAookYDANBAIAAjAHAwUAKAMPgDANBgkqhkiG9w0BAQsFAAOC
AQEAL/noDcom/r/mg14T+s89zKY3zqj0gy8q3GW/I8koffWLlLNh4bSPJ1J/KYn+
CzaqP51ioMXfyp2BjHNhfxB7sg5yc496nmSnXBm9N1uusRQamc+/deK9Royl04Ty
tF55Khfu2f2oCtFor9HZ89qlyqrSs1dnIjDI27e+7K5Ed2aZdCX9sMe2kVAkyLnW
Vbf2TcXHts72vYFdy5fR27eJmjUal8xOKjg119FP9OrwHXKHEOEvvIUetoLji8+M
EbJBykU2TKI99+J97MphQZhbkBI4WrKVnyxr5faHdUfscE++nFdYniWQlwYCeWfb
+zNmHsSDzHfy6CaoRi+JIgTXqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 12 20:47:48 2024 by rpki-client on console-fra.rpki-client.org