Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/2a6e915c4d25a1de722fde93bc15509ba64007c0.roa
File: 2a6e915c4d25a1de722fde93bc15509ba64007c0.roa (raw, json)
Hash identifier: oAC7KIEKupYxJHnwUeqTLLWV3ULLTdU3sr8mRMkTORI=
Subject key identifier: B3:DA:1E:08:25:92:E0:8F:53:46:AB:A8:5B:B8:18:A9:89:25:74:22
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 0E4922
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/2a6e915c4d25a1de722fde93bc15509ba64007c0.roa
Signing time: Wed 24 Mar 2021 14:30:55 +0000
ROA not before: Wed 24 Mar 2021 14:30:53 +0000
ROA not after: Tue 24 Mar 2026 14:30:53 +0000
asID: 263771
IP address blocks: 190.216.241.0/24 maxlen: 24
190.216.244.0/24 maxlen: 24
190.216.251.0/24 maxlen: 24
190.216.253.0/24 maxlen: 24
190.216.254.0/24 maxlen: 24
200.41.117.0/24 maxlen: 24
201.234.224.0/24 maxlen: 24
201.234.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936226 (0xe4922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Mar 24 14:30:53 2021 GMT
Not After : Mar 24 14:30:53 2026 GMT
Subject: CN=2a6e915c4d25a1de722fde93bc15509ba64007c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:f6:f8:97:29:c1:d4:49:a5:6c:1f:20:d5:
98:86:1f:9c:b4:de:df:14:7c:00:13:da:d9:9a:5e:
08:68:53:0e:8a:21:cd:d0:f4:24:f0:b8:c8:74:f9:
db:bf:b7:03:f0:50:2d:cc:5e:de:d7:33:c6:92:6f:
87:34:12:2a:b1:6c:03:ee:47:48:a0:31:c8:d1:fe:
2d:ea:35:80:27:17:2b:01:a9:1f:c0:77:ae:a4:e2:
04:42:8b:72:dc:98:9b:5d:3c:b9:d5:cc:1e:84:30:
3b:0f:95:3b:76:90:14:37:74:65:72:80:d0:e8:a0:
6d:b3:7f:25:99:0f:5d:7f:30:c1:f6:d3:86:c1:62:
19:b0:91:67:8c:62:e5:46:9d:9b:1b:66:74:31:58:
39:b8:d7:0c:06:c5:07:d9:f9:a9:53:88:a3:28:fe:
42:18:e9:db:0d:54:2b:b9:1d:50:b5:f6:44:d5:86:
64:30:c7:19:f3:18:4b:d4:ca:98:55:0f:34:f4:ea:
fd:64:87:2e:2c:0f:dd:e2:f8:d5:da:80:2e:4f:af:
51:28:8c:33:81:6c:a0:42:21:c2:09:33:a8:bb:08:
77:14:85:dd:f7:19:c2:c7:75:17:31:cb:e2:9a:49:
e1:9c:33:67:44:03:ab:cf:bd:80:f0:2c:9e:70:ed:
45:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DA:1E:08:25:92:E0:8F:53:46:AB:A8:5B:B8:18:A9:89:25:74:22
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/2a6e915c4d25a1de722fde93bc15509ba64007c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.216.241.0/24
190.216.244.0/24
190.216.251.0/24
190.216.253.0-190.216.254.255
200.41.117.0/24
201.234.224.0/24
201.234.235.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:28:7d:77:4d:44:9f:07:2d:4f:a4:66:48:01:e1:80:e2:18:
7d:17:2e:43:6f:48:d0:22:62:20:74:08:48:61:2c:9f:ff:30:
3c:4b:b2:f7:9d:ca:98:dc:02:3d:f1:00:6b:4e:91:1c:84:1c:
a4:69:eb:11:12:6c:27:95:3d:0a:56:65:d7:a1:2a:c5:34:7e:
77:15:ef:fc:75:9b:86:96:c0:59:d9:4e:0a:2a:73:23:ae:7c:
2f:5e:4b:d3:7a:1a:13:71:30:2e:fd:1b:8c:03:80:d9:69:d6:
fd:9d:1d:a5:0e:02:86:38:18:78:8e:d7:bc:45:68:67:72:dd:
a9:0d:01:40:07:e2:ff:95:4d:1a:c0:37:c2:15:c8:e8:24:20:
22:c8:7b:30:3a:ad:58:1c:e2:03:68:02:c1:08:fe:2e:39:08:
b1:5f:f5:92:c2:5a:8f:b2:4e:90:0b:76:60:d8:5f:6f:2c:de:
4f:ec:ee:be:08:1b:53:86:04:ea:45:47:ba:a6:a4:47:6d:55:
9f:ac:e2:f0:7e:1b:c4:07:c6:6a:94:c3:6b:08:00:15:a4:b1:
4a:3d:6f:8f:7d:d6:05:f2:56:23:17:cc:fb:53:c4:68:32:2b:
8b:43:71:6c:43:4a:5d:5d:31:1b:80:13:ab:22:a6:60:9d:58:
6b:e1:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 21:31:50 2023 by rpki-client on console-fra.rpki-client.org