Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/197bef1743f7f8215694c39451dfefdae862b033.roa
File: 197bef1743f7f8215694c39451dfefdae862b033.roa (raw, json)
Hash identifier: AqirNWxC9Paul8RTxy/SXDHLr3oeNNAabCe71UaR5GE=
Subject key identifier: 26:DD:29:63:60:73:43:81:29:7B:FD:9E:80:E2:BF:63:A9:07:63:59
Certificate issuer: /CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Certificate serial: 0D3B3B
Authority key identifier: D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/197bef1743f7f8215694c39451dfefdae862b033.roa
Signing time: Wed 24 Mar 2021 14:39:23 +0000
ROA not before: Wed 24 Mar 2021 14:39:22 +0000
ROA not after: Tue 24 Mar 2026 14:39:22 +0000
asID: 27738
IP address blocks: 190.130.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 15:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867131 (0xd3b3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Validity
Not Before: Mar 24 14:39:22 2021 GMT
Not After : Mar 24 14:39:22 2026 GMT
Subject: CN=197bef1743f7f8215694c39451dfefdae862b033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:32:be:3e:c2:ab:eb:13:b2:47:c9:39:30:7b:
ba:84:aa:9e:16:0a:9a:2a:2f:1a:b6:5d:b3:65:18:
ba:c5:92:1e:07:10:a8:01:7e:aa:e5:cf:c9:55:0e:
5c:00:f7:5c:64:52:ba:ff:5b:c6:6b:30:ca:38:6a:
fa:87:2a:d1:39:ed:cf:96:93:52:d1:8e:36:84:fd:
9d:40:8a:d9:a5:00:81:6c:ba:42:30:3a:bc:d6:ac:
5b:0b:71:12:8a:b7:7c:af:2f:9b:22:67:03:83:01:
bd:7d:39:31:ac:a1:af:75:50:eb:9d:1f:bd:de:87:
7b:3b:f0:44:a5:67:db:cc:7a:d6:af:d5:62:e4:d9:
f6:8f:fb:18:e5:52:e4:52:7d:2c:3c:a9:c6:ba:e2:
36:f5:25:ed:7d:43:d7:08:d4:4d:d7:b4:aa:09:d4:
da:70:80:39:03:4f:9a:ee:16:34:b2:f4:76:ae:e1:
83:c8:56:8d:19:0a:cb:18:4e:2b:fe:3a:d2:11:fe:
1c:bc:64:f2:28:07:65:de:70:62:a7:8c:38:c2:23:
76:ce:f1:2e:e7:db:b3:ee:df:b8:aa:0d:1b:49:19:
11:85:c9:4d:b1:50:b7:2f:c4:c4:92:9b:85:d6:c3:
0f:83:bf:fb:bc:6e:e7:e0:0d:1f:dd:f8:9f:9f:29:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DD:29:63:60:73:43:81:29:7B:FD:9E:80:E2:BF:63:A9:07:63:59
X509v3 Authority Key Identifier:
keyid:D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/197bef1743f7f8215694c39451dfefdae862b033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.130.128.0/17
Signature Algorithm: sha256WithRSAEncryption
97:c0:2b:83:7c:b0:d0:93:e3:c7:9a:05:33:f0:a6:bf:be:20:
21:0b:50:ce:e4:2d:0d:8a:28:ad:5a:43:d8:fa:28:6f:34:ac:
06:8c:3d:e7:d8:49:8e:82:27:aa:eb:27:b0:db:24:2a:6a:1c:
2a:84:c5:e1:b0:fa:12:e2:a9:03:db:74:d3:be:1e:4d:c4:ec:
a9:79:b7:9b:7a:a6:2a:90:dd:24:a4:71:07:06:18:5f:87:06:
6a:71:1a:47:fe:a3:fd:2e:1e:0d:c2:ed:37:5b:a9:40:0a:ca:
3a:dd:45:80:70:5d:a0:37:a7:c9:a9:ab:9d:e1:07:63:86:7a:
19:57:80:74:2c:14:35:39:19:fc:cc:c0:9c:51:c7:84:40:53:
cf:d5:0f:6d:e2:99:42:b4:76:25:e4:e1:49:5e:6a:9e:10:19:
e4:a3:0d:00:07:6a:a0:68:7d:85:b8:d5:f1:0a:e7:b8:6d:bc:
d2:64:94:be:e8:bd:ca:03:74:8b:05:78:1b:42:8a:2f:af:25:
52:be:b4:cf:c1:39:93:7c:83:7f:3c:23:c3:4a:4b:fa:0b:f6:
1c:7e:b7:49:45:5d:db:70:9e:78:e1:87:43:1b:e1:a7:3d:00:
9d:e9:a8:84:c7:22:fb:df:8e:11:97:04:1b:29:ef:06:08:f5:
3b:59:aa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 18:34:31 2024 by rpki-client on console-fra.rpki-client.org