Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/9ad17869f43e8298b6c23ab8754e00071c3fb86d.roa
File: 9ad17869f43e8298b6c23ab8754e00071c3fb86d.roa (raw, json)
Hash identifier: 1O2mX0YOxuZQTblk7T1i37yVsNJscKND5xOIKR0ukuI=
Subject key identifier: 35:48:09:44:3B:6A:9E:41:C3:18:2B:DE:64:9E:EF:33:01:4E:64:46
Certificate issuer: /CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
Certificate serial: 0CDE73
Authority key identifier: 84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/9ad17869f43e8298b6c23ab8754e00071c3fb86d.roa
Signing time: Wed 24 Mar 2021 14:29:58 +0000
ROA not before: Wed 24 Mar 2021 14:29:58 +0000
ROA not after: Tue 24 Mar 2026 14:29:58 +0000
asID: 27818
IP address blocks: 131.161.152.0/22 maxlen: 24
181.114.128.0/19 maxlen: 24
201.220.160.0/20 maxlen: 24
201.220.176.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843379 (0xcde73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
Validity
Not Before: Mar 24 14:29:58 2021 GMT
Not After : Mar 24 14:29:58 2026 GMT
Subject: CN=9ad17869f43e8298b6c23ab8754e00071c3fb86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:09:db:40:e2:40:3d:d1:48:b0:fc:41:30:
21:38:6b:be:fb:27:76:ae:c7:86:af:62:75:00:20:
02:72:4e:25:bc:d9:22:7e:b4:87:e7:3e:ea:6f:63:
41:d7:3f:96:13:d7:a8:77:66:d3:cc:ab:5f:69:57:
ba:29:d5:8e:bb:4d:ed:3e:66:8c:a0:fd:08:2d:67:
0d:ed:e9:9c:27:6c:68:e5:62:2c:7b:d9:00:b7:30:
b4:02:be:02:9c:3a:7e:69:85:b5:dc:80:da:18:52:
97:70:d9:7a:a7:44:a6:ba:86:ca:42:ce:5e:03:8f:
4b:e8:bd:77:d6:78:e1:65:c0:4a:b8:14:1d:51:f0:
2b:e6:73:e8:d7:c0:3a:aa:5b:c8:3c:44:55:fc:dd:
46:8a:d5:40:85:16:54:6a:d4:cd:3e:ff:a5:54:62:
c8:3d:fe:95:16:40:f6:aa:9f:0a:2a:df:2c:1c:a7:
05:a8:e1:7c:ee:63:4f:5b:8b:89:be:e0:66:9a:55:
ae:78:7a:93:60:13:3f:40:37:59:bc:c8:91:2e:0d:
b5:c9:c4:ca:6f:27:dc:b1:88:75:15:6f:fa:9d:19:
40:9e:e3:99:57:9e:8d:5f:ae:ef:ec:ac:6c:92:8f:
1c:24:27:06:a3:a1:cc:c7:6a:9b:cb:6e:fb:8c:4c:
44:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:48:09:44:3B:6A:9E:41:C3:18:2B:DE:64:9E:EF:33:01:4E:64:46
X509v3 Authority Key Identifier:
keyid:84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/9ad17869f43e8298b6c23ab8754e00071c3fb86d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/961b6618bb492a79bacf586c02bc72ae5ebcd74f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.152.0/22
181.114.128.0/19
201.220.160.0/19
Signature Algorithm: sha256WithRSAEncryption
14:37:42:a0:9a:b5:d4:02:cb:1b:e0:25:02:77:68:fd:f4:d8:
70:b5:e2:f4:f6:1d:45:65:a6:0a:51:b8:30:70:f7:23:94:91:
fa:5b:15:39:bb:b8:16:06:63:b9:70:35:b2:57:73:ff:b6:e0:
71:7d:7c:58:b8:5b:51:91:66:0b:45:eb:fb:16:a1:9b:41:35:
8b:3a:4e:b4:88:58:50:82:c9:11:2e:82:cd:c7:35:47:e0:0b:
41:3e:10:12:84:6a:bf:b1:e0:0c:76:14:cc:f7:a9:1a:67:12:
06:44:07:01:81:35:d4:92:82:c0:82:d8:6a:88:b1:b9:c2:48:
99:f0:84:61:78:e7:ff:aa:3d:ac:60:cb:46:07:d5:5d:88:cb:
f9:16:6e:bd:98:0e:ae:f7:b1:be:f9:3e:e7:e2:21:a9:d6:30:
7e:47:a0:df:4c:96:85:69:28:d9:81:0c:f3:36:b0:88:3a:6b:
83:fa:e5:a3:56:ba:bf:e0:b0:a8:d2:bd:54:07:5e:14:df:51:
63:0b:10:27:2e:76:b7:7e:ac:5f:05:9e:41:f3:88:f2:97:6f:
ee:c0:16:57:ff:20:56:f7:c4:2a:d8:09:a2:c0:bb:fa:13:92:
4b:d7:0e:98:2b:23:8a:36:60:52:8b:81:e7:35:dc:05:8d:98:
a7:eb:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 17:15:25 2023 by rpki-client on console-ams.rpki-client.org