Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/ea981d2c27e9a6289bc3cebee2ddff4364fbeb94.roa
File: ea981d2c27e9a6289bc3cebee2ddff4364fbeb94.roa (raw, json)
Hash identifier: yYSeRplwn8ZJ+NLTIPNwiH5UnkWhBrzDNobXYr3klaw=
Subject key identifier: 00:FB:A6:BE:8F:F8:AA:60:68:9E:B5:A6:B8:E7:47:39:A3:E4:22:35
Certificate issuer: /CN=e8e60ce967bb3600b1ab69a25627f26d48b06694
Certificate serial: 0DA378
Authority key identifier: 02:F3:E8:5B:88:E9:BB:34:88:F5:9A:4E:52:5C:EC:64:B5:66:AE:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8e60ce967bb3600b1ab69a25627f26d48b06694.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/ea981d2c27e9a6289bc3cebee2ddff4364fbeb94.roa
Signing time: Wed 24 Mar 2021 14:31:04 +0000
ROA not before: Wed 24 Mar 2021 14:31:04 +0000
ROA not after: Tue 24 Mar 2026 14:31:04 +0000
asID: 28048
IP address blocks: 190.112.64.0/18 maxlen: 23
191.103.0.0/18 maxlen: 19
200.91.32.0/21 maxlen: 24
2803:ea80::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893816 (0xda378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e60ce967bb3600b1ab69a25627f26d48b06694
Validity
Not Before: Mar 24 14:31:04 2021 GMT
Not After : Mar 24 14:31:04 2026 GMT
Subject: CN=ea981d2c27e9a6289bc3cebee2ddff4364fbeb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:5c:ef:73:86:26:41:3e:3a:a5:d9:b9:bc:
c3:71:61:15:d0:7b:cd:03:3e:e8:0a:3d:d4:b6:17:
a7:70:8f:b1:7a:e1:74:ae:39:d9:d8:78:78:5e:01:
c5:90:6e:19:e8:ea:bc:18:83:6f:5b:56:47:e3:0f:
97:1f:2e:98:b1:11:14:1b:6f:17:8e:6f:e0:54:aa:
c7:9d:48:57:84:3f:a5:aa:02:79:79:9f:ed:21:db:
e3:58:df:58:ee:d8:b2:1b:12:02:b1:c2:9d:d6:e6:
c3:4a:08:ca:75:a3:14:70:e5:8c:fa:f3:fc:ef:d1:
4e:2e:ac:d3:50:2d:7f:4c:08:05:58:15:72:09:e9:
6f:f8:21:70:af:6f:a1:29:7a:7e:45:1c:82:97:89:
8a:ac:25:57:7b:b7:a0:21:87:13:af:82:72:9c:4e:
aa:18:f6:2c:dc:e3:e4:98:1e:33:e5:0d:da:36:67:
15:84:6c:8a:d7:57:6a:3c:94:86:0a:81:63:85:bd:
f7:16:e3:a1:32:9c:64:6f:b0:f2:40:eb:a5:b0:a2:
e8:c1:c3:fe:f6:d7:92:17:04:6d:73:c3:84:db:d0:
29:d9:51:c2:1e:58:80:cc:b3:ae:c6:8d:08:46:b3:
f4:75:91:13:0d:e7:7e:e1:96:63:39:ca:72:09:ae:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FB:A6:BE:8F:F8:AA:60:68:9E:B5:A6:B8:E7:47:39:A3:E4:22:35
X509v3 Authority Key Identifier:
keyid:02:F3:E8:5B:88:E9:BB:34:88:F5:9A:4E:52:5C:EC:64:B5:66:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8e60ce967bb3600b1ab69a25627f26d48b06694.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/ea981d2c27e9a6289bc3cebee2ddff4364fbeb94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/e8e60ce967bb3600b1ab69a25627f26d48b06694.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.64.0/18
191.103.0.0/18
200.91.32.0/21
IPv6:
2803:ea80::/32
Signature Algorithm: sha256WithRSAEncryption
46:1a:be:2b:83:5c:8d:46:7d:b8:db:c7:a9:da:38:89:be:ff:
37:73:68:37:3f:10:0d:bf:2f:81:45:9b:d2:33:30:bb:7c:71:
20:cf:9b:f4:51:e4:04:38:ad:71:f6:d8:6d:a4:a8:66:14:dd:
87:b2:50:1a:44:44:40:d4:ea:eb:49:06:ed:04:c5:d6:1b:71:
b9:4b:26:d1:19:92:9d:eb:33:95:88:83:18:8f:fa:7d:38:ec:
d0:30:22:7e:6d:57:2e:4b:b4:d4:05:b6:75:a4:30:23:ed:2e:
ee:a9:d4:e7:08:42:d6:2e:9c:43:c0:be:7a:97:13:f5:d7:ed:
04:df:5b:96:42:16:18:7d:de:e0:22:ed:f4:e8:f4:95:d4:a6:
80:19:07:cf:10:c3:8d:41:33:55:3f:7f:f5:e0:26:71:13:ec:
42:b5:cc:a7:eb:85:ef:3e:8e:5d:b2:93:b6:44:50:d9:e2:10:
91:81:56:31:b9:90:79:dc:3f:21:2d:67:c9:e8:0f:c8:d0:5d:
fc:ea:ce:75:5b:c4:4b:2a:c7:27:c5:53:e3:7f:17:c9:f2:df:
61:0b:4c:fa:93:96:d2:a6:1f:65:81:ff:30:a5:91:c6:e2:e3:
03:9c:cf:3c:38:47:cc:f6:90:f8:58:08:21:94:92:a7:33:6b:
9a:a5:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org