Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/58a9d1276f7c54824e0c4598fca4a0f2405321a0.roa
File: 58a9d1276f7c54824e0c4598fca4a0f2405321a0.roa (raw, json)
Hash identifier: Mi+q+lIXLY1jsznHxoFLdJzurFI3ZDm75GR56g7rRk0=
Subject key identifier: 1F:D4:98:19:43:A6:44:3B:26:8C:D2:EB:E9:DE:26:46:8E:E9:4E:B3
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 1D6971
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/58a9d1276f7c54824e0c4598fca4a0f2405321a0.roa
Signing time: Mon 01 Aug 2022 16:12:04 +0000
ROA not before: Tue 27 Apr 2021 03:00:00 +0000
ROA not after: Thu 27 Apr 2023 03:00:00 +0000
asID: 14080
IP address blocks: 190.144.192.0/19 maxlen: 19
181.49.224.0/19 maxlen: 29
186.85.72.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1927537 (0x1d6971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Apr 27 03:00:00 2021 GMT
Not After : Apr 27 03:00:00 2023 GMT
Subject: CN=58a9d1276f7c54824e0c4598fca4a0f2405321a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:eb:da:58:53:6c:0e:7f:45:d7:2f:d9:31:
74:cc:ba:4a:38:4c:23:09:55:dc:64:62:57:43:5a:
8b:90:a3:61:7d:65:f4:5b:90:ea:3c:10:8d:81:57:
24:50:ad:41:3a:5e:15:7e:4b:ab:ff:0a:e5:17:ca:
b1:e7:3d:c8:fe:6c:99:87:1f:92:cf:4e:13:ab:25:
ab:61:2e:79:fa:6d:9d:9e:b5:5c:21:6f:b5:be:e6:
6b:02:e2:8e:df:4e:f2:c2:71:b4:9a:67:34:f4:51:
15:61:d4:14:69:5b:39:76:49:4d:3b:8c:35:7c:b2:
85:a1:2f:16:fe:75:5b:4d:20:00:d8:cb:5e:07:cf:
82:85:a4:05:13:0a:46:c0:f1:06:3b:d8:20:cf:85:
16:e0:44:72:c3:ee:53:ee:94:1d:b5:95:e2:50:0f:
98:a9:dd:6f:36:ce:4c:c5:97:e9:d6:d4:35:8b:ce:
17:71:2a:84:b2:dc:14:72:d0:6f:63:22:b8:81:ae:
08:32:db:98:a5:7d:e3:25:eb:85:52:46:54:6f:d6:
fd:67:cf:a3:3d:ad:77:63:c8:c7:ca:dc:01:ae:6e:
a5:f4:f4:19:9a:e3:43:01:ea:03:dc:d9:41:07:3b:
fa:03:1f:50:58:c0:b2:41:44:de:fb:04:28:f4:37:
e3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D4:98:19:43:A6:44:3B:26:8C:D2:EB:E9:DE:26:46:8E:E9:4E:B3
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/58a9d1276f7c54824e0c4598fca4a0f2405321a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.49.224.0/19
186.85.72.0/22
190.144.192.0/19
Signature Algorithm: sha256WithRSAEncryption
10:82:17:5f:b6:ba:31:c9:53:08:ec:bc:3b:7f:8c:b3:16:a1:
24:09:d9:4f:e7:6f:5a:61:99:3a:b2:67:e9:5d:e7:c3:5a:a4:
05:3a:96:84:8f:9c:ee:a4:84:8b:ce:bf:dc:13:47:ac:71:8a:
0e:0f:c0:64:75:59:5f:10:fe:93:b4:ef:05:78:84:36:3c:3a:
a0:1b:db:9e:57:78:ef:95:a1:20:49:28:ee:bc:1b:6d:fb:94:
04:16:ff:e3:2e:a5:2f:63:75:da:e1:62:0a:d1:53:9d:97:5c:
95:4b:8e:16:5a:c3:89:83:c3:a3:f1:3e:f0:57:6c:c2:86:dd:
fb:41:b6:b3:d6:ae:ea:46:38:93:16:6e:4c:3b:88:cd:cf:da:
a1:b9:ae:eb:f6:1d:50:6f:58:13:e4:c5:8c:e5:ec:e0:cf:df:
f7:a7:4b:2b:c9:96:63:88:db:ad:e4:e1:7c:d3:49:a8:2e:01:
b4:0c:3e:fb:42:26:61:7c:0d:4a:be:1a:f0:3f:6e:24:cc:f7:
4f:c5:af:da:68:46:4e:c0:7d:d9:11:81:fb:e4:bc:6e:12:2c:
8f:0b:55:6d:cf:03:f4:eb:2f:15:34:be:88:3c:4e:45:56:81:
6a:40:92:65:f0:de:46:38:98:37:33:bf:f8:01:00:f5:eb:57:
de:a5:b8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:07 2023 by rpki-client on console-fra.rpki-client.org