Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/09f6c70b3c44fa1728c69e744f5faa14f7f79e7b.roa
File: 09f6c70b3c44fa1728c69e744f5faa14f7f79e7b.roa (raw, json)
Hash identifier: /9yZXxLyJJ3EeYpEHRMk5JUzQVzcfQSGLnJ+FcqfszU=
Subject key identifier: D6:29:6C:8C:3A:DD:50:FF:5C:3F:74:CA:2F:4E:35:26:97:5D:7A:F1
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 183A8F
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/09f6c70b3c44fa1728c69e744f5faa14f7f79e7b.roa
Signing time: Tue 01 Feb 2022 17:12:13 +0000
ROA not before: Thu 18 Nov 2021 03:00:00 +0000
ROA not after: Thu 18 Nov 2060 03:00:00 +0000
asID: 14080
IP address blocks: 186.82.62.0/23 maxlen: 23
190.158.112.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1587855 (0x183a8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Nov 18 03:00:00 2021 GMT
Not After : Nov 18 03:00:00 2060 GMT
Subject: CN=09f6c70b3c44fa1728c69e744f5faa14f7f79e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:60:16:a1:7b:d7:70:c2:08:cb:55:d0:7a:
88:99:cb:5d:87:f3:24:c8:3e:5f:92:a3:31:e6:6b:
b9:1a:8c:8d:16:fc:bc:14:4c:70:30:62:6a:d7:03:
0d:53:f9:bb:1f:b0:df:ac:d3:2e:9f:0c:bf:2e:fd:
b0:1a:c1:a9:95:7c:83:b4:2f:ca:46:ff:2d:9a:a3:
d9:86:a5:d7:97:06:7a:33:46:a6:d4:01:da:ca:c4:
6e:e5:ec:d8:88:aa:df:46:94:81:de:17:23:4d:45:
ba:e2:96:15:ec:22:a8:5e:73:6e:a1:b4:5d:f0:3b:
3b:d1:1e:e2:0d:f8:98:6b:d3:46:53:fe:6c:d0:c9:
a7:fc:79:38:b8:ef:94:18:77:5c:cb:ae:3e:d6:9b:
c6:23:51:ba:e4:65:f6:d6:9b:9e:f8:d7:55:64:a7:
19:d0:58:c7:d8:ba:7f:0d:c2:e4:8a:64:e2:61:1f:
7d:e1:5d:fb:07:90:b9:45:89:76:21:47:cc:f3:6e:
fe:9f:c7:dd:eb:60:b9:17:68:72:4a:59:2b:cf:75:
00:c5:74:a6:0d:29:e0:10:b1:3e:a9:e1:b7:22:2d:
05:a8:6c:fc:ea:bd:b9:27:3c:ff:1d:20:86:eb:4e:
64:d8:46:07:c3:07:d9:47:eb:49:ef:07:e4:ca:38:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:29:6C:8C:3A:DD:50:FF:5C:3F:74:CA:2F:4E:35:26:97:5D:7A:F1
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/09f6c70b3c44fa1728c69e744f5faa14f7f79e7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.82.62.0/23
190.158.112.0/22
Signature Algorithm: sha256WithRSAEncryption
61:bf:75:89:84:96:03:c9:ed:97:47:9c:bc:7f:db:fb:c5:ee:
ea:4b:d8:a5:dc:60:23:b0:49:f0:a8:40:50:e3:42:d8:47:79:
bb:1e:e5:db:d7:ea:5a:56:50:4f:c0:ba:ee:03:04:4d:c1:ea:
29:60:51:b8:d4:92:37:67:e6:02:11:02:cc:5b:d0:31:5f:49:
3b:a3:86:2d:df:5c:80:97:c1:38:72:23:90:da:e7:ee:22:b3:
95:4b:1c:fa:95:ca:2b:30:5c:8e:3c:d7:e9:2b:d8:ad:01:a7:
09:63:09:e9:13:72:49:ec:a5:10:b2:f0:cc:f9:e4:b2:74:5d:
79:e7:e7:8d:3b:8a:d4:eb:43:d4:67:1e:b1:b8:bb:23:a9:04:
ea:27:67:c3:7a:5e:ae:28:0d:b0:01:fa:c0:fd:44:f4:e5:33:
5a:da:aa:32:42:d0:25:13:09:7c:d9:d8:53:33:f0:90:d9:64:
66:d4:21:f2:59:20:5f:d2:ba:63:03:1c:f7:6a:92:73:2d:40:
12:e8:a7:78:12:3d:ca:05:4c:82:0e:90:76:2b:d2:a9:06:9c:
59:80:30:cc:46:b4:4f:2e:dc:ae:e7:09:f6:4f:90:9d:38:83:
9a:9b:37:ea:47:48:05:5d:b8:d1:08:43:06:65:54:91:98:f1:
67:40:10:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org