Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/16d9cc0fdf34305831e2d55d1b024578a8a6673e.roa
File: 16d9cc0fdf34305831e2d55d1b024578a8a6673e.roa (raw, json)
Hash identifier: NgG4G6ltO3gnPY55iRvSHqc3+FXTCe9E9ZgTxxAiaVE=
Subject key identifier: CB:C8:1F:9C:BE:44:98:86:91:E2:E2:7C:E2:F7:12:43:4B:48:25:02
Certificate issuer: /CN=5f126d30fa6a87627cafe0e8a0ca50fa3b12e800
Certificate serial: 011FB8
Authority key identifier: 61:3B:0E:DA:DF:D9:37:A0:EB:D2:3A:E3:96:08:F0:1D:D9:9A:BA:01
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/16d9cc0fdf34305831e2d55d1b024578a8a6673e.roa
Signing time: Thu 15 Apr 2021 22:14:05 +0000
ROA not before: Thu 15 Apr 2021 03:00:00 +0000
ROA not after: Sat 15 Apr 2023 03:00:00 +0000
asID: 270076
IP address blocks: 138.186.76.0/23 maxlen: 23
138.186.78.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73656 (0x11fb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f126d30fa6a87627cafe0e8a0ca50fa3b12e800
Validity
Not Before: Apr 15 03:00:00 2021 GMT
Not After : Apr 15 03:00:00 2023 GMT
Subject: CN=16d9cc0fdf34305831e2d55d1b024578a8a6673e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:1c:00:e3:8a:8c:6a:e5:7d:cd:52:f3:5b:
91:c5:39:96:7c:16:2a:85:ea:09:c0:3f:1e:0d:58:
ba:19:d6:65:aa:44:8f:4a:b8:b2:5d:1a:8d:cd:bf:
5f:0b:4e:56:bc:e5:48:16:d6:8f:98:bb:a0:db:16:
8e:f2:6d:7f:a1:4b:87:96:88:43:ae:55:bb:47:88:
22:56:1c:0a:bb:25:63:df:f6:07:84:ae:c2:6c:cd:
ce:8e:b3:2a:83:3f:9c:a0:98:52:c5:a8:c4:a3:2f:
38:fa:c1:fc:a5:27:30:a1:16:60:02:34:df:02:c2:
68:85:08:70:ce:e2:4d:a7:e9:7b:67:9f:51:df:67:
26:1a:64:c6:80:25:30:04:39:5f:16:40:5c:07:c2:
07:c7:3a:ca:15:78:3e:0a:dd:9d:7c:0b:cb:c7:c1:
9d:4a:de:5c:f9:aa:52:b8:b4:01:99:ba:77:6e:70:
5b:5f:35:1d:ca:ad:61:78:9a:32:3a:86:06:b1:de:
eb:4b:d0:1d:d0:de:ee:b8:18:87:db:e9:59:80:39:
77:98:3d:25:b8:f6:95:52:b1:09:51:4f:39:ef:90:
98:1e:c0:b0:22:f4:ed:a7:21:fa:7b:27:01:2d:56:
3f:2c:a9:c5:6f:7e:c4:c8:24:83:2d:e7:34:ac:e0:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C8:1F:9C:BE:44:98:86:91:E2:E2:7C:E2:F7:12:43:4B:48:25:02
X509v3 Authority Key Identifier:
keyid:61:3B:0E:DA:DF:D9:37:A0:EB:D2:3A:E3:96:08:F0:1D:D9:9A:BA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/16d9cc0fdf34305831e2d55d1b024578a8a6673e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/eda6ea3f-b95b-43e1-9b3c-17f3f9fb6a5c/5f126d30fa6a87627cafe0e8a0ca50fa3b12e800.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.76.0/22
Signature Algorithm: sha256WithRSAEncryption
54:dd:cd:d9:a0:f0:2e:bd:66:8e:e8:1c:ea:73:7d:e2:86:41:
02:f8:4f:87:77:f8:c9:44:8e:ea:d6:21:53:36:d4:a6:a0:b6:
b3:be:35:34:35:cf:9b:db:62:d5:7b:1c:0f:6b:79:22:03:37:
f3:59:4f:0b:58:7c:df:06:82:3f:34:87:29:90:ee:00:d8:e3:
b8:64:d4:37:7c:6d:34:d3:ab:12:79:1e:ee:31:15:9e:e1:7c:
0d:af:2c:3b:83:83:00:b2:39:6d:ce:e1:02:e8:5a:e2:37:59:
8d:32:0b:17:08:05:9b:1b:f7:84:59:7c:b5:24:1d:ab:34:9d:
19:81:ff:4b:53:a4:6e:a6:1c:a8:71:5f:84:51:44:0c:f2:34:
ed:16:b9:47:69:dd:0f:3e:64:f9:a4:e9:a1:f7:6a:d8:fc:98:
68:5a:e8:28:39:dd:22:c3:a5:55:57:1d:89:d1:67:6e:69:0e:
c5:ef:fb:86:ad:66:0a:73:eb:80:3b:28:8a:e6:33:24:c2:0f:
09:b3:11:b9:70:37:62:06:43:55:1b:24:c6:65:56:ef:34:06:
06:65:b2:5a:59:d8:1f:bc:ca:2f:02:93:5a:f5:41:ab:d4:da:
ba:cb:74:a2:21:4e:02:e0:82:e4:14:84:b1:12:de:ce:ea:52:
38:4c:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:57 2023 by rpki-client on console-ams.rpki-client.org