Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/d489aba1b8ee19cd74b660822d0cf56386929422.roa
File: d489aba1b8ee19cd74b660822d0cf56386929422.roa (raw, json)
Hash identifier: 0yAUMUlMRm5zYIRLmsd15cuxTAu2dPR664k6xYjAPwE=
Subject key identifier: C9:02:F9:36:71:64:00:BA:2A:01:07:E2:2F:51:95:C6:21:59:EC:1C
Certificate issuer: /CN=f04c66e47b3a8a66f313f04f07882f394b836678
Certificate serial: 0AF9E2
Authority key identifier: F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/d489aba1b8ee19cd74b660822d0cf56386929422.roa
Signing time: Tue 24 Jan 2023 19:03:31 +0000
ROA not before: Tue 23 Nov 2021 03:00:00 +0000
ROA not after: Sat 25 Nov 2023 03:00:00 +0000
asID: 52235
IP address blocks: 190.99.64.0/22 maxlen: 25
190.99.68.0/22 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719330 (0xaf9e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04c66e47b3a8a66f313f04f07882f394b836678
Validity
Not Before: Nov 23 03:00:00 2021 GMT
Not After : Nov 25 03:00:00 2023 GMT
Subject: CN=d489aba1b8ee19cd74b660822d0cf56386929422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:0f:1b:97:1a:52:56:33:e9:6f:1f:92:2b:
d2:4a:14:db:df:78:0c:fd:8c:b8:5f:2d:aa:a7:7f:
38:12:0e:6a:46:29:d0:bd:53:be:fb:81:a1:a1:02:
15:3d:0c:c9:29:84:f5:0c:e6:b4:e4:1f:db:29:af:
1d:13:3a:cb:de:83:8c:c8:e1:a8:c5:fa:5d:d7:38:
c9:91:01:69:2b:7f:f5:f2:4a:df:56:83:16:3c:7a:
0f:03:43:75:3c:32:66:92:ed:43:81:52:6e:51:73:
4f:5c:55:95:b8:05:45:e8:19:f3:21:56:c5:75:12:
49:bc:86:3c:c2:74:d6:9f:b4:25:41:da:5d:ba:27:
db:fd:87:5d:c1:63:1a:00:15:38:ae:cc:10:f3:03:
92:f6:82:b2:e4:e4:43:aa:02:18:48:3c:df:9e:f2:
53:1f:32:ae:19:75:47:6d:a4:f8:f8:b0:9f:23:db:
cb:be:a1:81:15:d9:5f:53:1c:a2:71:66:51:39:88:
05:bb:55:d1:48:b6:7d:4d:91:f2:2e:ad:0a:b5:9c:
4d:6f:b6:aa:4f:93:c7:28:5b:d7:64:4a:bd:33:93:
3f:a7:6f:61:ba:c2:47:b2:e7:c6:41:5d:32:28:a2:
a7:87:2e:b7:71:3b:1d:37:8d:ad:1c:f0:c9:97:54:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:02:F9:36:71:64:00:BA:2A:01:07:E2:2F:51:95:C6:21:59:EC:1C
X509v3 Authority Key Identifier:
keyid:F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/d489aba1b8ee19cd74b660822d0cf56386929422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/f04c66e47b3a8a66f313f04f07882f394b836678.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.99.64.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:2f:09:61:77:0d:be:c9:6b:42:58:f3:dd:85:7e:e2:39:3f:
64:b4:f2:ee:a0:f7:14:74:46:6c:9b:4e:90:ad:bd:b9:0f:6b:
25:d9:ff:52:87:ff:46:4a:a3:2e:f9:57:87:67:2b:74:c3:17:
db:43:fb:60:5b:6c:92:c6:b8:c7:e8:b4:93:8d:22:fb:e0:6d:
60:7e:7b:13:75:c4:47:2a:66:cf:c1:84:70:22:21:c3:d1:d3:
75:8b:69:e7:90:8c:ab:1f:f2:90:74:f9:4e:60:d6:e7:e2:ab:
35:f5:69:76:4c:ca:7b:d6:eb:c1:44:8d:7c:3f:e8:82:df:82:
aa:39:89:c0:d8:93:9f:04:13:56:ed:ed:dc:bc:bd:38:41:a2:
f4:b2:fc:fb:fe:d7:a7:4a:53:25:9a:e0:3e:1b:74:0f:9e:ca:
15:15:a6:d2:da:c7:ac:a5:df:b3:9e:44:e2:0e:5d:b3:6e:bd:
c2:53:0d:a5:44:62:7b:58:4e:a5:71:fc:69:24:38:5b:61:0d:
d4:e3:46:0e:42:71:46:29:51:f8:13:c5:43:eb:e0:e1:3f:7b:
c5:9e:d6:c1:de:50:e4:3f:8c:2a:c7:4e:99:65:e7:48:d3:51:
74:16:e1:49:03:23:eb:d5:b7:59:84:a3:9b:d6:4d:ad:da:de:
a0:a4:b1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org