Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05b240cd-a4b0-430a-99d8-6854d774df26/9f1057e9cec6608a60f2d5b42a9c8488515b31c2.roa
File: 9f1057e9cec6608a60f2d5b42a9c8488515b31c2.roa (raw, json)
Hash identifier: FZLX1oTuC3j0ol5md0FOgc5I9gQaqNXO0vg5MSiOxtQ=
Subject key identifier: 53:5E:B0:3D:19:37:15:87:DC:12:47:EB:18:5C:A5:29:43:98:9B:6F
Certificate issuer: /CN=eceaebee3a7bbef322f7a029f03f5f54f0cddbbc
Certificate serial: 0705E7
Authority key identifier: CF:15:CE:28:E0:9E:14:19:5C:B1:40:92:71:0C:CF:87:87:4A:BC:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eceaebee3a7bbef322f7a029f03f5f54f0cddbbc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05b240cd-a4b0-430a-99d8-6854d774df26/9f1057e9cec6608a60f2d5b42a9c8488515b31c2.roa
Signing time: Wed 24 Mar 2021 14:30:44 +0000
ROA not before: Wed 24 Mar 2021 14:30:44 +0000
ROA not after: Tue 24 Mar 2026 14:30:44 +0000
asID: 28111
IP address blocks: 190.0.160.0/20 maxlen: 24
190.0.176.0/20 maxlen: 24
190.112.0.0/19 maxlen: 24
2803:1e80::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460263 (0x705e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eceaebee3a7bbef322f7a029f03f5f54f0cddbbc
Validity
Not Before: Mar 24 14:30:44 2021 GMT
Not After : Mar 24 14:30:44 2026 GMT
Subject: CN=9f1057e9cec6608a60f2d5b42a9c8488515b31c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a6:e9:9d:0f:4f:43:93:c6:41:a6:15:92:eb:
4f:df:53:73:ac:62:e1:e2:c2:f6:63:a8:8f:95:ed:
dd:58:b4:cc:86:ee:c7:ba:ec:cf:d2:4c:52:9a:d6:
4c:94:88:43:fb:58:5b:41:27:24:96:b4:12:fc:64:
12:f7:f2:8e:81:58:b4:ae:e1:b9:0e:5b:a0:3b:45:
f3:25:63:f5:e8:ed:39:2d:43:9a:d2:66:be:5b:0f:
b9:66:b9:c2:f3:e3:1a:96:26:cd:4e:63:3d:2d:f1:
00:de:e7:c8:6e:18:c0:7b:b5:01:65:39:1a:3e:fe:
e1:0d:30:51:99:91:0c:26:6b:77:13:bb:fb:3e:0a:
07:3e:50:35:d6:fc:84:0f:84:65:1c:0b:4d:78:c4:
8a:37:d8:4f:9a:c3:a7:ec:c4:1d:7f:6d:41:e1:f6:
3d:db:a4:e5:2a:2c:17:45:ea:34:e9:e9:13:03:a2:
08:b0:b1:51:6a:56:63:cd:48:9b:dc:2d:39:63:6f:
3e:8f:70:69:be:6f:7f:ee:70:96:06:83:8d:7c:5c:
fa:ae:8b:53:e3:73:e4:d4:1f:e6:42:2d:5e:e5:3a:
4c:af:11:43:90:6c:0e:d0:74:ca:3f:ad:e8:b8:6f:
8a:7f:0f:fc:0e:ba:de:2e:21:3f:52:9e:c5:cd:ce:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5E:B0:3D:19:37:15:87:DC:12:47:EB:18:5C:A5:29:43:98:9B:6F
X509v3 Authority Key Identifier:
keyid:CF:15:CE:28:E0:9E:14:19:5C:B1:40:92:71:0C:CF:87:87:4A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eceaebee3a7bbef322f7a029f03f5f54f0cddbbc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05b240cd-a4b0-430a-99d8-6854d774df26/9f1057e9cec6608a60f2d5b42a9c8488515b31c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05b240cd-a4b0-430a-99d8-6854d774df26/eceaebee3a7bbef322f7a029f03f5f54f0cddbbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.0.160.0/19
190.112.0.0/19
IPv6:
2803:1e80::/32
Signature Algorithm: sha256WithRSAEncryption
56:bd:c4:10:aa:ab:d5:44:e6:61:75:97:84:99:89:ec:6e:b8:
dd:f2:9f:0f:54:0d:07:71:25:db:bc:d5:e8:9c:62:67:7c:b1:
99:61:26:ad:49:12:88:90:a6:3e:8d:e3:d5:bd:0c:e7:ce:30:
50:80:37:2d:a2:cb:ed:91:51:ae:b7:0d:6c:d6:93:a5:24:39:
db:4e:a3:d4:ad:45:64:64:07:c4:d5:86:91:14:1c:9a:ad:fb:
02:2f:59:f5:95:7c:35:c4:2a:c8:2b:b1:00:43:28:5c:b5:86:
b2:8e:d7:0e:40:d6:57:15:78:16:2e:02:69:e3:f3:08:c7:15:
90:05:e6:79:a9:57:f6:af:e9:75:06:14:aa:28:e0:92:14:8e:
21:9a:ff:bf:50:2a:c9:87:36:a8:74:e9:c8:e7:7b:93:44:17:
36:22:f6:b8:18:3d:0c:49:5f:b9:7b:32:6c:d6:55:0e:61:97:
79:48:a8:aa:4d:38:bd:e0:5e:fc:ab:45:06:2f:cc:bd:70:99:
48:16:64:b3:60:98:07:08:0f:30:41:8f:91:dc:91:65:c5:fb:
5d:f0:3d:b6:57:ae:f6:b4:df:a5:e3:c7:ff:d7:b5:c7:5f:89:
9d:13:27:ff:75:fe:90:3d:1d:95:ee:c9:38:db:34:41:8d:21:
ae:74:7b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org