Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/0d0e88761337a1cfa16b91934f41048d151a5f5b.roa
File: 0d0e88761337a1cfa16b91934f41048d151a5f5b.roa (raw, json)
Hash identifier: kW8RBY9LAuKMQSCyxKn7wxZklgK7A7wdhKrsfEuKUjY=
Subject key identifier: 00:6B:2F:64:E4:89:BB:29:2C:A3:54:79:6B:EF:00:70:02:D5:53:13
Certificate issuer: /CN=e2edf50309c3c920eebef8b0ecf1643bb8c31a10
Certificate serial: 124A87
Authority key identifier: AC:6A:EB:DB:86:63:84:03:68:2E:07:33:65:62:7F:97:35:CC:4A:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/0d0e88761337a1cfa16b91934f41048d151a5f5b.roa
Signing time: Wed 06 Oct 2021 19:20:40 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 20207
IP address blocks: 138.0.152.0/22 maxlen: 24
143.202.16.0/22 maxlen: 24
170.78.192.0/22 maxlen: 24
190.7.0.0/18 maxlen: 24
190.57.224.0/19 maxlen: 24
190.183.0.0/16 maxlen: 24
200.229.148.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198727 (0x124a87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2edf50309c3c920eebef8b0ecf1643bb8c31a10
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=0d0e88761337a1cfa16b91934f41048d151a5f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:89:4d:f6:30:3c:30:e0:73:ad:9b:16:a5:
c0:bb:ac:12:ed:b3:e3:35:d0:a6:0d:62:04:de:bd:
84:cd:92:83:d5:f5:98:08:a9:2e:1e:34:9d:86:f5:
2a:6c:0b:96:64:9a:76:ac:b7:53:ec:27:ab:b1:61:
3a:26:9d:98:38:0b:ce:41:f7:64:93:a9:3e:4e:22:
e5:bb:52:9c:a8:d0:75:09:72:11:35:6d:ff:f1:f8:
f0:58:6f:c4:82:b1:25:78:ad:a4:83:0d:88:a2:54:
f8:9f:a5:b0:59:bd:f0:31:4d:06:9c:1f:35:5b:ca:
d7:fb:dd:98:4d:a1:ed:ab:4b:f9:f1:16:d9:8b:e2:
cb:88:9b:d6:73:ac:03:d1:88:e4:19:32:fa:8a:21:
b9:52:37:6c:7d:3f:64:82:06:43:f7:a4:3a:01:85:
32:de:88:c9:76:32:cf:82:4d:2e:7e:7d:65:f7:ce:
d4:97:bb:2b:f4:00:c3:79:cc:29:b1:50:a4:54:05:
7d:a9:90:31:a7:99:06:c0:2e:da:cc:01:a4:65:2f:
fa:46:eb:a9:50:53:8f:69:09:3d:e9:1f:fd:b8:6f:
45:4d:05:2f:d1:5a:7c:13:a2:e2:eb:0b:0b:ae:35:
13:16:27:a0:f7:50:04:c2:48:3e:7b:7a:21:20:f4:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6B:2F:64:E4:89:BB:29:2C:A3:54:79:6B:EF:00:70:02:D5:53:13
X509v3 Authority Key Identifier:
keyid:AC:6A:EB:DB:86:63:84:03:68:2E:07:33:65:62:7F:97:35:CC:4A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/0d0e88761337a1cfa16b91934f41048d151a5f5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7dcd23fc-00b8-4f95-bf49-9eccd14ea648/e2edf50309c3c920eebef8b0ecf1643bb8c31a10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.152.0/22
143.202.16.0/22
170.78.192.0/22
190.7.0.0/18
190.57.224.0/19
190.183.0.0/16
200.229.148.0/22
Signature Algorithm: sha256WithRSAEncryption
18:54:b4:70:62:42:04:ca:2f:2a:7b:ac:7f:a7:3a:3f:1f:09:
77:38:3f:0d:cf:18:9c:49:85:ce:11:5b:35:27:68:22:8a:1e:
2e:b7:4e:84:2e:6f:02:3a:b3:6d:d4:6c:99:ac:19:0c:74:15:
d5:13:33:7c:9b:ed:f8:4e:55:19:99:30:35:18:5a:2f:53:6f:
ea:0e:92:f5:b1:fa:5c:3e:cf:b1:42:83:57:c9:fc:cf:4c:3c:
6e:3a:ca:80:17:33:50:a7:cd:36:d8:9e:89:ae:e3:f6:84:03:
f3:5a:78:d1:ae:37:0e:f3:61:3f:a7:fa:24:56:42:d3:1a:4d:
f9:f1:d6:f2:36:81:49:24:c1:2a:2b:64:98:38:7c:fd:73:a9:
c1:4c:7f:8e:27:a4:89:49:f8:e4:96:a8:d4:1a:44:7d:e4:b3:
9f:30:19:82:55:05:c3:30:38:84:97:b4:86:58:7a:5c:63:51:
8a:81:d7:a0:61:3a:db:de:d0:3e:10:6d:29:d3:eb:e1:99:92:
63:ad:ed:74:a1:a3:e5:d5:e8:e2:e5:ac:e0:43:dc:4a:57:1e:
b3:c8:82:93:ab:0c:3e:d4:07:0d:b9:0a:8c:e6:10:b3:7b:92:
6f:7e:16:a4:37:4f:0f:ad:5e:08:22:f0:6a:48:8a:27:e4:44:
ca:c8:3b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-ams.rpki-client.org