Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/570b64d20722b9811b6093c1bdb9fa329a279110.roa
File: 570b64d20722b9811b6093c1bdb9fa329a279110.roa (raw, json)
Hash identifier: C5RykvAftC+YJqXa89vPALHdkW/BuZNfQTmde92TonU=
Subject key identifier: 76:32:13:6A:4C:3B:39:4A:6A:9B:D4:EB:1C:C4:C4:D8:1E:DA:34:E8
Certificate issuer: /CN=dbd36e815108aff3b7b3a80ea6302316bea35e09
Certificate serial: 1187DA
Authority key identifier: 77:88:5B:39:00:EE:9E:4E:18:31:E5:B3:56:5A:B0:E7:AA:12:1C:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbd36e815108aff3b7b3a80ea6302316bea35e09.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/570b64d20722b9811b6093c1bdb9fa329a279110.roa
Signing time: Tue 21 Sep 2021 19:45:36 +0000
ROA not before: Mon 20 Sep 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 271970
IP address blocks: 131.196.188.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148890 (0x1187da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd36e815108aff3b7b3a80ea6302316bea35e09
Validity
Not Before: Sep 20 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=570b64d20722b9811b6093c1bdb9fa329a279110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:57:67:85:ea:62:85:92:2b:fa:8b:a5:77:
0c:a3:b2:a8:3f:62:ab:a5:dd:35:92:9c:23:d0:ce:
e1:c4:0d:30:d7:fc:1e:b3:6e:52:23:8e:fb:74:b4:
6f:7c:75:bd:2b:23:08:5d:29:b7:70:69:0c:cb:67:
a7:34:cf:b0:02:8e:5f:71:48:16:f2:f6:f2:01:cd:
0b:d4:3d:98:7c:66:63:9b:3b:91:cc:5a:78:68:6c:
ca:51:14:40:bf:f1:07:18:e6:dd:ab:91:70:a1:fc:
2b:27:53:c5:1d:9e:b2:7f:86:04:12:b7:aa:96:26:
50:b3:d5:58:67:bd:4b:d9:a4:63:3b:9b:0a:f1:e4:
3f:6f:68:9e:56:9f:7f:7e:51:c1:12:76:1b:83:3f:
8e:70:81:0f:67:fc:33:b8:1d:6a:b9:df:c7:e5:32:
2e:fb:9b:9f:c2:01:9d:28:5b:ca:bc:98:cd:9d:e6:
1e:3e:1b:07:0b:fd:c7:44:69:2e:d4:25:d9:35:e2:
0c:02:94:37:59:61:61:b2:0c:ef:ba:7d:35:31:74:
85:66:f4:01:0a:6d:91:7e:d2:50:34:53:af:d1:8c:
f2:be:67:43:16:4f:1d:36:8a:b6:8d:45:30:1c:48:
46:8f:65:cd:b9:76:73:0c:5a:c2:21:78:78:f6:94:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:32:13:6A:4C:3B:39:4A:6A:9B:D4:EB:1C:C4:C4:D8:1E:DA:34:E8
X509v3 Authority Key Identifier:
keyid:77:88:5B:39:00:EE:9E:4E:18:31:E5:B3:56:5A:B0:E7:AA:12:1C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbd36e815108aff3b7b3a80ea6302316bea35e09.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/570b64d20722b9811b6093c1bdb9fa329a279110.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/dbd36e815108aff3b7b3a80ea6302316bea35e09.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.188.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:08:68:b1:ba:ac:4e:e5:8e:ae:e4:f9:19:f0:f2:43:5e:e5:
f2:97:30:53:f8:d0:71:34:9f:52:d3:8b:7b:1e:79:90:58:31:
5e:cb:69:26:20:af:fa:44:c2:43:3d:ed:cc:b1:17:c4:6b:1a:
e8:e4:7f:b5:ba:7a:7a:b3:69:17:5b:18:81:8e:5c:8b:1f:6f:
d9:4c:91:4c:db:5b:62:18:89:31:56:9c:a3:4e:86:ba:68:d8:
26:32:e4:48:e2:60:65:cc:c5:fb:c1:2f:42:9b:fc:45:33:26:
75:00:e4:33:bd:55:4d:45:5c:5d:5b:2b:a1:59:2e:a4:f0:ab:
8b:d3:e8:0d:a2:26:4b:b2:36:09:47:8f:d3:77:6e:76:7c:34:
38:4e:eb:4e:70:e0:c4:2d:e0:b1:6c:eb:13:41:e8:11:bb:6c:
d1:8c:e7:04:1a:df:57:06:17:54:6d:c6:69:dd:b3:d0:18:7a:
04:4b:89:37:6e:35:65:42:b2:c4:60:ae:87:7d:99:ab:f5:f6:
ac:0c:80:1c:6c:40:23:b4:41:da:47:c0:ad:e5:06:45:db:67:
c5:2e:28:c8:8b:21:9c:99:de:84:d9:e0:4b:5e:e8:1c:90:d4:
79:2f:c7:1d:62:c0:03:fe:ff:ad:90:04:d2:49:6c:04:45:0b:
11:92:6b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:08 2023 by rpki-client on console-fra.rpki-client.org