Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/f2945c248dee62a20e339900d208fd38720d7537.roa
File: f2945c248dee62a20e339900d208fd38720d7537.roa (raw, json)
Hash identifier: Gk6uumEPSrb7bBmKE+HNUedCcDiTmInLPXMCdH1Mrqw=
Subject key identifier: 0D:8E:34:C2:07:AD:02:0C:15:37:FB:68:AF:C4:11:85:F4:88:7A:BD
Certificate issuer: /CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
Certificate serial: 22F4D8
Authority key identifier: 84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/f2945c248dee62a20e339900d208fd38720d7537.roa
Signing time: Wed 23 Aug 2023 16:52:53 +0000
ROA not before: Tue 22 Aug 2023 16:52:53 +0000
ROA not after: Sat 23 Aug 2025 16:52:53 +0000
asID: 27818
IP address blocks: 131.161.152.0/22 maxlen: 24
181.114.128.0/19 maxlen: 24
201.220.160.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2290904 (0x22f4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
Validity
Not Before: Aug 22 16:52:53 2023 GMT
Not After : Aug 23 16:52:53 2025 GMT
Subject: CN=f2945c248dee62a20e339900d208fd38720d7537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:54:9e:19:74:1b:7e:40:01:1b:48:eb:c4:1e:
12:8f:34:4e:da:ad:75:77:2a:5c:51:ac:fe:43:cb:
10:d3:56:2f:30:4c:00:44:41:a1:9d:07:c7:31:48:
0f:2a:f9:7f:be:c7:2d:2f:9f:1e:02:14:d2:d8:e4:
09:f3:6b:35:fe:9d:0d:ca:76:9b:16:95:47:f5:07:
8d:f5:80:ec:ec:e3:59:3b:84:98:0e:f7:13:40:7e:
05:9b:8c:34:f3:77:5d:4d:ac:04:7a:34:1e:36:a1:
7b:a9:d2:f8:6d:81:cf:7c:bf:9d:73:18:f1:cc:c6:
b1:99:3c:cc:f4:07:72:58:30:6f:7d:60:d4:00:a3:
44:dd:2f:21:6e:fe:e8:c5:e0:78:6a:9c:e4:fe:40:
bc:c3:60:b2:c1:21:f8:cb:de:aa:e1:97:37:d0:0f:
cd:b1:9f:fa:7a:d0:02:0e:35:ce:2f:67:a8:8d:40:
42:84:6f:f3:5b:f0:fc:b5:b8:30:2f:24:cd:41:8a:
9e:17:af:69:4d:58:fb:79:31:68:f5:be:71:65:7a:
8f:1e:98:72:0b:e9:9c:0a:71:4b:50:b4:9c:c3:1f:
9d:c8:3f:d4:e9:3d:0c:cc:55:9e:c9:c9:cf:bd:16:
1c:08:3a:15:4f:16:66:f1:2a:11:ef:82:30:0b:92:
ba:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8E:34:C2:07:AD:02:0C:15:37:FB:68:AF:C4:11:85:F4:88:7A:BD
X509v3 Authority Key Identifier:
keyid:84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/f2945c248dee62a20e339900d208fd38720d7537.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/961b6618bb492a79bacf586c02bc72ae5ebcd74f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.152.0/22
181.114.128.0/19
201.220.160.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:2c:b4:db:32:26:a8:b3:91:21:a0:44:bc:32:6d:9a:49:ca:
58:0a:ab:d2:e4:62:0c:86:74:99:e3:a9:99:c3:dc:e8:fd:47:
b3:81:9f:65:f5:76:6c:3d:fb:4e:2a:d0:a2:22:db:34:f7:14:
48:bf:dd:5f:17:b2:c5:ac:29:06:27:a2:85:25:39:92:26:af:
99:27:2f:1c:46:e9:18:51:17:cb:49:e2:db:a9:b3:94:84:b5:
6d:5d:4b:f8:15:ee:ee:56:db:6e:be:d6:fd:12:84:67:62:c1:
2c:90:c5:de:46:ad:23:4b:a2:42:9b:50:ce:ac:35:2b:4e:b5:
97:a8:f3:a1:69:af:02:99:00:82:d2:d3:a4:78:89:b8:44:b3:
81:dc:e0:fb:97:2d:37:cd:ee:b6:7c:32:71:7c:7a:c6:56:80:
d4:05:97:11:0b:1d:65:c9:3b:81:4f:ff:11:29:47:1a:8a:45:
25:c3:a6:09:6b:9f:7f:50:d6:3d:4f:ed:ed:d5:cd:d7:02:6d:
0d:4c:49:94:4c:00:da:90:e8:0b:72:c2:87:23:25:40:ec:f9:
e1:77:1b:57:d9:4c:e6:f3:d9:d2:9f:32:6f:7f:81:27:69:82:
c9:4d:66:fd:fe:23:79:79:b2:91:fb:f6:ff:26:21:a7:2d:8b:
96:3a:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 17:52:51 2023 by rpki-client on console-fra.rpki-client.org