Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/35ae220d672b01c9c61f7afe1dc429402e560a1d.roa
File: 35ae220d672b01c9c61f7afe1dc429402e560a1d.roa (raw, json)
Hash identifier: kvYVEW8rmYGOIakHgV6kvZ0Ku6DxOHodOvwsOkuZKY8=
Subject key identifier: A8:72:95:46:EB:72:BE:3E:B5:8E:09:4B:EA:34:F3:5E:6D:84:1C:C4
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 1888BB
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/35ae220d672b01c9c61f7afe1dc429402e560a1d.roa
Signing time: Wed 09 Feb 2022 20:20:32 +0000
ROA not before: Tue 11 Jan 2022 03:00:00 +0000
ROA not after: Thu 11 Jan 2024 03:00:00 +0000
asID: 14080
IP address blocks: 181.48.0.0/13 maxlen: 24
190.85.240.0/20 maxlen: 20
200.26.128.0/19 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 07:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1607867 (0x1888bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Jan 11 03:00:00 2022 GMT
Not After : Jan 11 03:00:00 2024 GMT
Subject: CN=35ae220d672b01c9c61f7afe1dc429402e560a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:8e:a0:22:88:40:df:13:fe:03:b1:3d:dd:
1c:4c:c9:b1:31:b1:52:59:4a:0d:73:f8:f5:08:1a:
b0:4c:69:d5:d4:f6:3c:98:51:96:0a:cf:ff:18:41:
0a:d9:a8:55:cb:84:60:36:02:c0:36:54:0b:8f:ca:
66:eb:6e:88:25:45:e0:84:48:47:76:36:e6:76:44:
f4:be:ff:18:5f:10:2f:b1:f1:e2:af:0b:be:35:b2:
03:74:3c:47:17:d1:07:81:39:10:0b:8a:83:5b:ed:
47:bd:12:34:b4:33:5e:7a:bd:e9:11:f2:cc:47:5f:
8f:e5:00:21:46:66:1e:fa:2c:ae:76:bd:a5:af:15:
b6:f9:0c:a6:b7:d6:8a:da:f3:eb:bc:4c:0a:a7:28:
f5:36:b7:d0:c7:cf:02:bd:58:b8:3d:16:b9:d4:79:
5a:06:4f:82:32:12:bd:d7:a3:90:94:36:78:de:0c:
07:77:67:65:8c:75:23:85:87:e4:80:90:b1:fa:32:
01:51:2a:e4:77:73:91:b3:08:6e:0c:ce:0a:85:b1:
47:9c:4c:6c:72:4e:41:07:2a:c3:9f:1d:06:d3:9c:
5b:3d:1f:07:06:66:6d:bc:87:b6:95:5e:5a:78:f4:
c3:2e:5d:7e:91:4a:4d:1c:cf:99:c6:be:26:cf:e3:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:72:95:46:EB:72:BE:3E:B5:8E:09:4B:EA:34:F3:5E:6D:84:1C:C4
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/35ae220d672b01c9c61f7afe1dc429402e560a1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.48.0.0/13
190.85.240.0/20
200.26.128.0/19
Signature Algorithm: sha256WithRSAEncryption
7f:50:75:0e:db:e4:2f:56:34:9b:ad:b5:e4:93:01:d6:96:46:
b2:14:2c:7a:77:99:82:56:eb:52:ce:e5:80:0d:60:fa:44:49:
89:d4:dd:3c:6e:5d:0f:23:0f:06:02:96:d9:45:05:93:5a:28:
2b:16:90:60:77:15:f1:98:94:c3:2d:83:57:ab:24:6e:c3:5c:
dc:18:86:cf:e5:2b:ab:cd:6a:b9:63:75:d7:3b:3e:e3:0a:ab:
03:5c:79:63:e4:02:10:6b:01:39:b3:d7:6f:16:48:73:06:ed:
ec:5d:01:1f:a6:9d:8f:21:f8:1e:d5:3c:c6:f0:c0:62:9a:0d:
63:76:80:14:96:a9:24:55:7a:54:53:ab:ef:03:f4:3f:5d:c5:
36:52:b3:6a:aa:b2:63:eb:c6:0a:cc:76:cd:66:f7:4a:00:2b:
f9:e2:a8:d8:25:47:7c:50:b8:6c:17:c3:f8:c2:4f:64:33:21:
79:ec:83:67:46:24:6b:ad:ad:97:d5:fc:cf:54:2e:f7:29:d1:
67:ee:85:c0:95:2c:51:0b:1b:0d:19:71:ef:27:b1:79:d7:70:
0e:e9:a2:d8:f9:52:5e:37:f7:c3:75:93:cc:05:87:bc:0d:f5:
e4:65:eb:b5:83:56:60:a9:0d:ef:7d:79:6d:23:f5:2d:d9:7a:
cf:a6:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 10:40:50 2024 by rpki-client on console-fra.rpki-client.org