Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/4bab63383d20f20601bac30fe95d68fcf0edf863.roa
File: 4bab63383d20f20601bac30fe95d68fcf0edf863.roa (raw, json)
Hash identifier: ip8vC6jPww8ku8Z/mopNlapumygsOGg1BnHfR0Ae2Vs=
Subject key identifier: E5:FA:D3:CB:87:B0:73:0E:A9:3B:6A:10:7D:D4:36:14:F0:A8:B4:B4
Certificate issuer: /CN=e10299c1af81d7fbd554ad8da2099da215779551
Certificate serial: 0DD349
Authority key identifier: F4:DE:D6:0D:E4:4B:6E:A9:9A:05:7E:76:40:6D:04:7E:81:9D:D0:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e10299c1af81d7fbd554ad8da2099da215779551.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/4bab63383d20f20601bac30fe95d68fcf0edf863.roa
Signing time: Wed 24 Mar 2021 14:42:16 +0000
ROA not before: Wed 24 Mar 2021 14:42:16 +0000
ROA not after: Tue 24 Mar 2026 14:42:16 +0000
asID: 27884
IP address blocks: 131.72.208.0/22 maxlen: 24
138.94.120.0/22 maxlen: 24
143.0.236.0/22 maxlen: 24
143.208.16.0/22 maxlen: 24
190.6.192.0/20 maxlen: 24
190.92.0.0/19 maxlen: 24
190.92.32.0/19 maxlen: 24
190.92.64.0/19 maxlen: 24
190.211.136.0/22 maxlen: 24
201.158.48.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906057 (0xdd349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10299c1af81d7fbd554ad8da2099da215779551
Validity
Not Before: Mar 24 14:42:16 2021 GMT
Not After : Mar 24 14:42:16 2026 GMT
Subject: CN=4bab63383d20f20601bac30fe95d68fcf0edf863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:a6:05:5e:d0:0b:f6:2e:24:fb:2b:e8:44:
bc:ba:81:f8:85:2a:f6:27:e7:48:75:a6:c8:3a:48:
35:71:b4:c6:2a:d8:8e:09:e3:b0:b2:ad:68:b4:ae:
fb:b5:3a:16:10:01:f7:d7:b6:12:0a:92:44:67:de:
48:c4:43:31:db:4a:9d:cf:09:95:03:c0:9b:84:31:
8a:99:d5:76:bd:42:f6:e1:f5:2e:80:62:d0:7f:98:
d5:21:30:b9:b7:90:fc:6d:f8:70:8e:56:73:db:6f:
56:d4:5d:64:ea:0b:90:1e:bf:a9:71:68:ef:95:8a:
ab:e7:1a:cd:fa:67:ae:09:a7:fb:ba:36:f6:30:0b:
a5:c0:49:e1:52:e2:ef:20:9f:06:24:34:2b:78:e4:
57:94:1d:cf:ec:94:fd:c5:07:35:2a:a2:50:f7:cd:
2d:cc:66:cd:7a:bf:78:9f:f1:22:5e:90:c1:1e:9e:
79:6b:43:fb:48:95:43:50:c3:68:90:46:a9:63:e0:
4d:bb:ae:8b:9a:40:57:dc:b6:d2:e9:c5:b9:09:6f:
83:dd:2a:f5:12:3e:fc:11:ce:17:6b:c9:61:d9:e0:
cd:bf:08:aa:d3:bf:9a:23:29:88:36:74:43:4a:5e:
16:e2:3a:c3:c8:42:4c:36:c7:38:03:4f:74:f1:2b:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FA:D3:CB:87:B0:73:0E:A9:3B:6A:10:7D:D4:36:14:F0:A8:B4:B4
X509v3 Authority Key Identifier:
keyid:F4:DE:D6:0D:E4:4B:6E:A9:9A:05:7E:76:40:6D:04:7E:81:9D:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e10299c1af81d7fbd554ad8da2099da215779551.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/4bab63383d20f20601bac30fe95d68fcf0edf863.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/e10299c1af81d7fbd554ad8da2099da215779551.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.208.0/22
138.94.120.0/22
143.0.236.0/22
143.208.16.0/22
190.6.192.0/20
190.92.0.0-190.92.95.255
190.211.136.0/22
201.158.48.0/22
Signature Algorithm: sha256WithRSAEncryption
14:1e:2d:ab:3c:04:cf:c4:8a:7e:75:2b:1c:2e:56:1f:ef:80:
40:88:64:33:39:dd:75:c4:e2:5b:8f:05:f1:90:68:c1:d8:62:
52:1e:25:72:b6:11:62:6b:10:3e:19:fc:14:0d:7b:26:17:22:
18:05:c5:37:05:21:af:9e:f1:3e:ef:6c:0b:02:5c:08:55:a0:
e2:4a:82:9a:f4:a2:87:17:b2:7c:65:92:be:d7:8b:f0:2a:34:
a6:3d:ea:56:35:9a:4d:6a:e9:5d:dc:05:80:b0:0d:7f:da:6a:
6a:ee:89:49:23:5e:c1:ce:cb:42:e8:e2:ed:5f:37:42:2f:9f:
84:5d:2e:6e:3a:de:16:d8:ec:8b:6d:df:15:3b:4d:7b:6f:45:
02:1b:ef:10:5a:8f:5a:8a:ae:e5:28:84:79:7f:3a:ae:9c:f4:
1b:cb:e3:e8:ba:c4:f0:3f:d3:8d:9a:38:d5:f0:63:b7:2e:5a:
93:e5:37:30:07:68:97:a5:fd:07:b0:f1:f3:0d:b5:e5:58:21:
13:11:f8:b4:db:63:23:e5:06:a8:89:40:f0:cc:4d:1a:35:6a:
01:52:f0:60:86:5e:58:9a:78:f6:8e:e3:cf:23:51:43:ff:52:
f4:c1:0c:ff:30:a6:cc:bd:e3:fa:2c:41:b2:75:5b:ab:d3:ff:
b1:f6:6c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org