Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f7b04195-7898-45d3-9726-d2e38fa7231f/9bae71b141c0b18cdcdde0824eb97c8c23fb958e.roa
File: 9bae71b141c0b18cdcdde0824eb97c8c23fb958e.roa (raw, json)
Hash identifier: wmOaiDYLCuTy4vj4466dszeECm66bSwlwpEP8rdHpXs=
Subject key identifier: B1:5E:FA:4F:9F:50:EE:7D:1B:27:A7:F5:FB:88:30:D9:15:AA:8B:49
Certificate issuer: /CN=a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4
Certificate serial: 0E0757
Authority key identifier: AD:14:68:D0:D2:7F:67:BE:31:0F:F2:48:87:9B:19:E2:DC:DB:00:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f7b04195-7898-45d3-9726-d2e38fa7231f/9bae71b141c0b18cdcdde0824eb97c8c23fb958e.roa
Signing time: Wed 24 Mar 2021 14:38:26 +0000
ROA not before: Wed 24 Mar 2021 14:38:26 +0000
ROA not after: Tue 24 Mar 2026 14:38:26 +0000
asID: 265632
IP address blocks: 131.196.8.0/24 maxlen: 24
131.196.9.0/24 maxlen: 24
131.196.10.0/24 maxlen: 24
131.196.11.0/24 maxlen: 24
2803:abc0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 919383 (0xe0757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4
Validity
Not Before: Mar 24 14:38:26 2021 GMT
Not After : Mar 24 14:38:26 2026 GMT
Subject: CN=9bae71b141c0b18cdcdde0824eb97c8c23fb958e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:79:3e:70:9d:00:95:36:7c:83:19:33:51:31:
97:18:fd:9d:94:51:2d:7d:2a:61:31:c4:7c:99:df:
93:c5:ab:5e:e3:10:57:9e:c3:c0:74:06:de:21:95:
81:e0:d5:cb:02:df:5e:da:1b:e4:65:05:35:bb:51:
06:24:6b:f9:30:b2:08:ae:29:aa:b2:af:55:19:93:
f0:34:10:a7:e7:5a:ab:95:b6:8e:40:f9:96:7d:0a:
cd:4c:a0:fa:ae:75:ea:a7:b3:75:3d:fd:28:7f:46:
94:d4:f3:b4:74:af:9f:67:96:7f:de:20:10:fb:cf:
e0:a2:ac:6f:7a:2d:fa:80:d7:a8:d4:6b:fc:04:8d:
07:7f:f3:01:d2:32:8e:b6:36:95:79:4d:27:ec:2b:
34:6a:c4:b3:5c:87:b2:27:66:68:5b:9f:e3:3c:cd:
03:a0:b0:7c:4f:c1:1b:be:b3:cd:43:e8:17:a5:3f:
8c:ed:04:a5:0e:a8:f6:fa:8a:a1:25:ca:43:f0:3a:
cd:81:46:95:8b:f2:fb:c1:9b:dd:7f:37:89:72:d6:
f6:a4:99:39:f4:6a:f4:ff:ae:a0:d6:da:03:7d:f7:
a3:03:3f:9c:d5:70:35:b4:d3:a5:00:cc:db:97:7b:
ba:a0:df:7f:a0:23:20:61:b0:7c:43:06:c3:b8:1d:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5E:FA:4F:9F:50:EE:7D:1B:27:A7:F5:FB:88:30:D9:15:AA:8B:49
X509v3 Authority Key Identifier:
keyid:AD:14:68:D0:D2:7F:67:BE:31:0F:F2:48:87:9B:19:E2:DC:DB:00:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f7b04195-7898-45d3-9726-d2e38fa7231f/9bae71b141c0b18cdcdde0824eb97c8c23fb958e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f7b04195-7898-45d3-9726-d2e38fa7231f/a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.8.0/22
IPv6:
2803:abc0::/32
Signature Algorithm: sha256WithRSAEncryption
70:b9:1b:5f:24:c1:99:66:b3:8b:d8:7f:08:0c:c5:1d:36:a0:
6c:27:db:fa:5c:dc:19:3a:a5:e1:b7:a0:e9:c1:ce:83:b8:47:
20:11:bf:38:57:e5:24:03:06:15:7a:70:d8:39:17:f2:91:a2:
3a:4e:12:47:68:8e:ab:e0:fa:8e:5c:71:23:dc:2d:24:97:5c:
a0:d9:85:57:bd:1e:bb:09:0f:7a:f3:0a:81:13:6b:7b:db:dc:
1d:ae:54:22:d6:70:9d:0c:2d:b9:03:c4:e2:ec:23:c3:94:e5:
dc:9a:95:f4:25:af:6a:71:02:a2:9f:6c:aa:9c:f0:8d:7d:a4:
9b:e3:84:49:18:d2:bd:78:6a:0e:ca:51:d8:e5:2d:ca:08:0b:
f0:b8:d4:63:a3:67:8b:63:68:ca:3b:1c:33:9b:9d:4f:32:d6:
ef:45:96:30:71:68:fd:c7:a3:8d:30:62:79:82:0c:a6:b2:0a:
88:0e:b1:0b:01:7a:87:da:19:c2:2b:d7:e6:7f:69:f8:9e:50:
d3:62:5e:e1:9e:75:75:c1:81:01:2d:db:07:8b:40:bd:68:d9:
36:ba:b0:9c:d2:6a:e2:eb:38:fd:67:8e:15:18:49:ff:f5:f0:
39:a4:58:3b:e2:90:78:0c:e1:9b:68:08:7a:1c:5c:39:10:e7:
f7:a8:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:58 2023 by rpki-client on console-ams.rpki-client.org