Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/3b01a6a027dba0e473a9fea342041986a6771eb0.roa
File: 3b01a6a027dba0e473a9fea342041986a6771eb0.roa (raw, json)
Hash identifier: Z1LpYggH0BrREFnxrvtcx/Vs+wGOd3gyQAlwFML2vdI=
Subject key identifier: 1C:3A:C3:A3:F6:0E:C7:DB:6E:A0:B2:85:9D:AB:6F:74:A8:0B:14:B9
Certificate issuer: /CN=24dd0c2e45ab4767cf1938370eb67d9303fc8de7
Certificate serial: 0C819F
Authority key identifier: 05:5C:71:4F:E8:BB:2C:EA:C2:68:08:CF:5A:5C:91:A6:D9:E8:ED:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/3b01a6a027dba0e473a9fea342041986a6771eb0.roa
Signing time: Wed 24 Mar 2021 14:38:17 +0000
ROA not before: Wed 24 Mar 2021 14:38:17 +0000
ROA not after: Tue 24 Mar 2026 14:38:17 +0000
asID: 28053
IP address blocks: 190.52.224.0/20 maxlen: 24
190.52.240.0/20 maxlen: 24
200.89.88.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 819615 (0xc819f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24dd0c2e45ab4767cf1938370eb67d9303fc8de7
Validity
Not Before: Mar 24 14:38:17 2021 GMT
Not After : Mar 24 14:38:17 2026 GMT
Subject: CN=3b01a6a027dba0e473a9fea342041986a6771eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:0e:a6:f6:2c:f9:71:82:1e:68:c5:6e:19:
75:91:67:fa:2d:3e:4c:7a:94:40:44:93:2c:ea:e9:
d0:d4:b9:09:86:ee:4f:4f:32:81:d0:bb:c4:13:b0:
fc:c4:71:a6:fb:39:dd:9c:ef:dc:f1:2e:53:c2:bf:
01:54:df:79:6e:df:3a:d2:61:79:d4:3c:4e:4c:52:
fb:bc:fc:20:50:d7:c1:a3:2e:63:eb:36:43:67:71:
f4:f7:2e:78:41:5f:22:f3:d5:25:f3:f1:8b:d9:1f:
a9:b9:78:f8:ae:7f:21:9d:e6:04:e1:75:75:cb:94:
7d:26:9b:43:27:a0:bb:29:7b:42:7c:7f:af:b1:83:
b9:1c:fb:43:0a:9d:ee:a4:d1:1b:d0:57:37:cc:3a:
d1:bb:92:09:99:c7:2f:47:98:a2:20:46:53:31:46:
94:01:a0:1f:e1:0c:ac:73:aa:0d:b2:96:f1:56:e3:
cb:e2:6a:a0:ae:49:97:42:a4:f6:e9:90:58:68:96:
39:fe:4f:f1:a9:da:c4:69:c4:b3:a2:0b:f1:ff:80:
1f:0b:b2:1d:5b:8e:c0:42:77:ec:d7:df:1d:89:bd:
80:14:be:70:43:ee:56:ce:7c:68:32:c6:02:50:61:
3a:a4:da:f9:f9:1c:89:37:3a:4a:34:61:2d:8d:75:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3A:C3:A3:F6:0E:C7:DB:6E:A0:B2:85:9D:AB:6F:74:A8:0B:14:B9
X509v3 Authority Key Identifier:
keyid:05:5C:71:4F:E8:BB:2C:EA:C2:68:08:CF:5A:5C:91:A6:D9:E8:ED:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/3b01a6a027dba0e473a9fea342041986a6771eb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/79d6562e-b1d9-4842-bbd5-db67705ce3e5/24dd0c2e45ab4767cf1938370eb67d9303fc8de7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.52.224.0/19
200.89.88.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:68:38:69:ed:29:ef:97:5c:9a:3c:22:e9:31:3a:f7:9a:e3:
3b:4a:fb:eb:81:5e:e1:1a:49:a9:e1:70:98:b6:e3:8a:22:59:
32:13:0d:ae:c2:35:cf:e6:5b:78:dd:5c:ee:df:15:d7:41:67:
74:98:a3:25:f5:03:6d:42:f8:17:25:d2:1e:24:24:d2:60:98:
54:9e:66:e8:9d:f8:98:08:9f:16:fc:2a:68:36:19:a9:95:ec:
ad:8a:e2:0f:2c:d7:ce:60:43:4c:c3:16:23:b5:db:e4:52:ce:
5f:79:52:09:5f:11:9a:0d:82:ee:95:d5:32:73:03:0f:55:ab:
11:88:14:b7:3b:59:0f:43:1d:10:31:cc:ad:c0:93:10:1f:6c:
ad:ca:73:fa:69:e3:21:1c:bc:f9:53:b2:95:aa:cb:bc:fc:e0:
23:78:66:8c:b9:56:e8:51:73:5b:ce:a8:e6:64:17:e1:3d:c5:
5c:26:a5:e6:eb:34:1d:46:da:62:c3:96:59:f3:18:f4:ae:64:
33:45:69:f8:7e:f8:92:3a:2d:84:7f:51:bf:12:5d:57:c7:4e:
12:80:78:0b:a4:0c:6c:01:59:b3:eb:64:6e:5f:b0:88:c0:6f:
c2:71:ba:3e:3a:72:36:bd:0d:fb:a7:fb:44:11:d2:7c:5b:9d:
df:97:7f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-ams.rpki-client.org