Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/ad3ee01cc650f2a9a99555ba517e01db3ba374f8.roa
File: ad3ee01cc650f2a9a99555ba517e01db3ba374f8.roa (raw, json)
Hash identifier: DJrT7D06OJ6D4RyL4ZBXMVM+raM5VxQQBa/z2uknr80=
Subject key identifier: 6A:12:E6:6A:02:8D:EF:6C:A6:36:60:3E:0B:18:39:6F:EE:E8:5E:0C
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 0F3591
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/ad3ee01cc650f2a9a99555ba517e01db3ba374f8.roa
Signing time: Sat 24 Apr 2021 14:53:02 +0000
ROA not before: Sat 24 Apr 2021 03:00:00 +0000
ROA not after: Mon 24 Apr 2023 03:00:00 +0000
asID: 18809
IP address blocks: 201.218.250.0/24 maxlen: 24
201.218.218.0/24 maxlen: 24
190.5.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 996753 (0xf3591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Apr 24 03:00:00 2021 GMT
Not After : Apr 24 03:00:00 2023 GMT
Subject: CN=ad3ee01cc650f2a9a99555ba517e01db3ba374f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:72:25:e9:43:d9:c9:5a:92:a4:3e:a3:2b:
a2:d7:6f:3e:35:c2:3b:3d:e8:84:de:5b:f8:c8:14:
2f:2e:43:b2:0a:79:45:cd:80:e8:bc:53:c0:e3:22:
81:ca:60:95:eb:db:1f:d2:ab:4a:69:ce:4c:ed:81:
c9:7d:95:95:fb:e9:bd:cf:15:8f:55:48:16:70:5c:
bd:c2:7a:27:3d:52:e0:96:14:10:8f:f7:1b:f5:2f:
30:bb:73:4c:5e:9a:d2:52:7e:a5:40:8d:99:08:04:
fc:be:70:12:85:97:e5:9c:4e:7b:cd:cc:69:63:98:
e4:8d:17:1b:71:49:77:6b:85:8c:81:19:a7:6a:42:
67:36:e5:68:b4:b8:ed:55:8c:bf:fa:b9:3f:ce:fc:
92:51:7c:f1:64:f7:b9:5e:66:a5:48:64:76:3c:3d:
53:c7:59:77:66:65:dc:2e:ff:f5:fe:06:ae:11:ed:
73:8e:f1:a3:68:89:9c:fe:2d:9a:6f:ee:44:65:21:
3f:8c:38:5d:0f:09:eb:e9:05:11:55:17:03:f1:08:
69:4b:fb:c3:5f:99:81:59:cf:af:69:44:96:15:22:
cc:c7:50:df:17:12:b2:20:6a:d1:83:6d:50:36:42:
6f:6a:27:0a:0a:b2:1b:ba:ec:5b:0e:54:e0:08:52:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:12:E6:6A:02:8D:EF:6C:A6:36:60:3E:0B:18:39:6F:EE:E8:5E:0C
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/ad3ee01cc650f2a9a99555ba517e01db3ba374f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.5.248.0/24
201.218.218.0/24
201.218.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:63:73:56:77:83:fb:10:a7:61:71:ca:f7:a0:be:48:9e:27:
82:5f:a4:75:19:bd:7d:99:ed:7e:64:19:25:c7:e2:ed:3e:db:
cd:2a:cd:39:6a:c0:27:a3:06:a2:33:45:1a:0d:9b:0f:e3:06:
c8:c7:7d:5d:8f:94:1d:ef:5a:18:ed:c2:16:fd:63:36:5a:ba:
4a:1a:d3:5b:85:f5:7f:b6:b0:91:09:5f:1c:87:2b:93:a6:a1:
57:4a:1f:02:ef:18:b4:95:19:5b:40:a0:87:31:92:63:bf:b6:
5d:fd:e5:e5:e0:43:f5:b3:c5:11:5b:c6:2f:17:ce:be:3c:c8:
15:0c:d5:58:9d:4b:e0:08:49:f3:c0:88:97:32:f8:47:09:3d:
e4:cd:3c:6d:8e:b7:4f:d3:ec:5c:bb:ee:4a:90:ea:9f:c1:20:
77:34:03:5a:50:a3:c7:15:51:67:97:1a:5b:ef:4d:75:06:41:
85:08:50:40:59:82:f4:4b:60:ed:f7:05:71:66:33:02:82:d7:
f8:72:10:59:cd:fa:16:6c:4e:d5:00:bd:44:75:26:e5:c3:79:
53:e3:9c:7c:92:7f:71:b6:50:e7:5d:f1:8f:1a:6b:8e:02:56:
22:02:73:9f:1f:aa:8f:99:8f:62:34:ca:cc:cb:b9:ca:6a:83:
89:20:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org