Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/052f4016-d206-42ed-adb9-88280d25848d/26a841da322db136d21391f3d0f63a7be372d918.roa
File: 26a841da322db136d21391f3d0f63a7be372d918.roa (raw, json)
Hash identifier: Pis0q4QXy9ISYMv01TL/oXyYGiFHYyZfvOJsib1Tu1g=
Subject key identifier: 94:26:49:11:58:81:B0:0A:CB:01:C1:DF:6F:6C:2C:A0:81:B1:88:E5
Certificate issuer: /CN=a12940490bd588d04ca6f10e67f9895c773999a9
Certificate serial: 7FE9
Authority key identifier: 11:C9:5F:39:0F:5A:14:33:8F:15:FA:7E:F1:D9:12:5E:4D:A7:C6:D6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a12940490bd588d04ca6f10e67f9895c773999a9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/052f4016-d206-42ed-adb9-88280d25848d/26a841da322db136d21391f3d0f63a7be372d918.roa
Signing time: Wed 24 Mar 2021 14:38:06 +0000
ROA not before: Wed 24 Mar 2021 14:38:06 +0000
ROA not after: Tue 24 Mar 2026 14:38:06 +0000
asID: 52233
IP address blocks: 131.221.144.0/23 maxlen: 24
138.219.140.0/22 maxlen: 24
161.0.96.0/20 maxlen: 24
170.245.0.0/22 maxlen: 24
186.2.176.0/20 maxlen: 24
190.112.224.0/20 maxlen: 24
190.112.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 14:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32745 (0x7fe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12940490bd588d04ca6f10e67f9895c773999a9
Validity
Not Before: Mar 24 14:38:06 2021 GMT
Not After : Mar 24 14:38:06 2026 GMT
Subject: CN=26a841da322db136d21391f3d0f63a7be372d918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:93:c4:16:8e:f7:26:8e:a9:23:ea:15:89:18:
4c:18:aa:75:0c:c3:da:c3:e1:41:e4:94:6b:5e:1a:
b0:3c:93:67:95:57:d0:51:c3:fc:64:b4:ec:e4:c5:
d7:b5:7d:84:17:4c:da:26:ac:24:ab:a0:ab:b1:ba:
0f:35:00:51:33:98:9b:b9:89:86:08:a8:21:de:d2:
3c:9e:16:3f:6c:15:ae:b7:5f:5b:62:c6:9f:01:c1:
a2:56:6b:dd:70:10:66:8f:fc:e4:92:e1:59:51:f3:
40:e3:00:02:e1:99:2e:69:fe:74:ca:c5:17:0e:f1:
19:6e:84:bc:b0:45:42:b8:b8:01:c7:32:14:8e:22:
db:d8:93:fc:14:b1:f9:7e:6a:5b:bc:b6:82:28:ca:
f9:ea:04:72:b9:d4:ff:32:ee:5d:78:76:53:47:92:
eb:3b:44:6a:d2:fc:e6:de:6d:4e:1a:9a:fe:f6:e5:
8c:63:fe:76:16:cd:6d:96:bd:e4:36:cc:82:70:45:
a6:24:48:4b:20:95:bf:75:1a:71:2d:90:8d:e3:ef:
09:8a:1a:b3:46:a3:9c:83:b4:c9:55:ab:56:fb:08:
6e:4c:87:1c:76:f7:11:9c:46:ee:d8:32:ac:32:82:
4d:95:52:7f:cf:d8:dc:b8:7b:08:77:55:a5:d7:cd:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:26:49:11:58:81:B0:0A:CB:01:C1:DF:6F:6C:2C:A0:81:B1:88:E5
X509v3 Authority Key Identifier:
keyid:11:C9:5F:39:0F:5A:14:33:8F:15:FA:7E:F1:D9:12:5E:4D:A7:C6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a12940490bd588d04ca6f10e67f9895c773999a9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/052f4016-d206-42ed-adb9-88280d25848d/26a841da322db136d21391f3d0f63a7be372d918.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/052f4016-d206-42ed-adb9-88280d25848d/a12940490bd588d04ca6f10e67f9895c773999a9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.144.0/23
138.219.140.0/22
161.0.96.0/20
170.245.0.0/22
186.2.176.0/20
190.112.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:b0:49:95:0c:ab:56:36:46:b8:e4:51:5f:69:49:84:2e:27:
a4:77:c1:74:4a:7b:c2:8d:d0:10:ba:65:68:17:70:ac:21:52:
b4:8f:ca:e2:e2:a9:5f:8b:22:d8:4d:5a:1f:72:e0:23:82:99:
ce:61:02:ca:23:49:0d:6b:5f:27:ae:99:72:99:70:b6:e0:a9:
8f:79:aa:96:f7:37:87:e2:31:ca:5a:fd:ec:65:9d:93:ac:9e:
32:d3:37:c4:63:b3:4c:c9:ab:1a:6e:00:38:5f:dc:ea:6f:c7:
a3:72:e2:8d:a8:a6:a2:05:d9:60:15:ac:52:0b:43:72:99:76:
74:fa:53:e8:0c:ae:3a:51:40:c8:63:2c:d1:64:29:8c:d6:c5:
86:51:81:da:08:5a:1e:0c:10:bd:d6:aa:da:a9:e8:0e:3a:d1:
93:ad:fd:85:0d:5f:79:5b:15:7c:0b:09:1f:a4:6d:90:b7:4b:
5e:20:a3:a0:0e:a4:27:37:60:4b:12:06:04:94:75:29:ed:6b:
1f:be:0c:d0:00:ce:3a:cd:36:63:f7:43:9f:ab:ca:69:1f:b7:
1c:74:68:b8:1c:9f:13:0b:b9:e8:04:ee:4d:5b:26:6f:35:1b:
88:1c:79:5f:3c:6a:49:d3:6e:6a:b1:e7:69:10:43:64:a7:a4:
9d:a5:fc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 18:37:54 2024 by rpki-client on console-fra.rpki-client.org