Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/b896b230f159cea2abcb79a7a3b53b72f82e8e38.roa
File: b896b230f159cea2abcb79a7a3b53b72f82e8e38.roa (raw, json)
Hash identifier: KgxRao4eMjZNXDn68PMxt6ok0uPFQa1l55zlZ7anOyA=
Subject key identifier: 42:55:23:17:14:DE:FB:A3:DE:28:8D:B4:91:06:2E:A0:A1:21:20:CB
Certificate issuer: /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial: 17E0A3
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/b896b230f159cea2abcb79a7a3b53b72f82e8e38.roa
Signing time: Fri 08 Apr 2022 14:05:06 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Fri 24 Mar 2023 03:00:00 +0000
asID: 61461
IP address blocks: 190.124.28.0/23 maxlen: 23
190.124.28.0/24 maxlen: 24
190.124.29.0/24 maxlen: 24
190.124.30.0/23 maxlen: 23
190.124.30.0/24 maxlen: 24
190.124.31.0/24 maxlen: 24
2803:d700:8000::/33 maxlen: 33
2803:d700::/33 maxlen: 33
2803:d700:2000::/40 maxlen: 40
2803:d700:3f00::/40 maxlen: 40
2803:d700:4000::/40 maxlen: 40
2803:d700:8000::/40 maxlen: 40
2803:d700:8100::/40 maxlen: 40
2803:d700:8200::/40 maxlen: 40
2803:d700:8300::/40 maxlen: 40
2803:d700:8400::/40 maxlen: 40
2803:d700:8500::/40 maxlen: 40
2803:d700:8600::/40 maxlen: 40
2803:d700:8700::/40 maxlen: 40
2803:d700:8800::/40 maxlen: 40
2803:d700:8900::/40 maxlen: 40
2803:d700:8a00::/40 maxlen: 40
2803:d700:8b00::/40 maxlen: 40
2803:d700:8c00::/40 maxlen: 40
2803:d700:8d00::/40 maxlen: 40
2803:d700:8e00::/40 maxlen: 40
2803:d700:8f00::/40 maxlen: 40
2803:d700:9000::/40 maxlen: 40
2803:d700:9100::/40 maxlen: 40
2803:d700:9200::/40 maxlen: 40
2803:d700:9300::/40 maxlen: 40
2803:d700:9400::/40 maxlen: 40
2803:d700:9500::/40 maxlen: 40
2803:d700:9600::/40 maxlen: 40
2803:d700:9700::/40 maxlen: 40
2803:d700:9800::/40 maxlen: 40
2803:d700:9900::/40 maxlen: 40
2803:d700:9a00::/40 maxlen: 40
2803:d700:9b00::/40 maxlen: 40
2803:d700:9c00::/40 maxlen: 40
2803:d700:9d00::/40 maxlen: 40
2803:d700:9e00::/40 maxlen: 40
2803:d700:9f00::/40 maxlen: 40
2803:d700:a000::/40 maxlen: 40
2803:d700:a100::/40 maxlen: 40
2803:d700:a200::/40 maxlen: 40
2803:d700:a300::/40 maxlen: 40
2803:d700:a400::/40 maxlen: 40
2803:d700:a500::/40 maxlen: 40
2803:d700:a600::/40 maxlen: 40
2803:d700:a700::/40 maxlen: 40
2803:d700:a800::/40 maxlen: 40
2803:d700:a900::/40 maxlen: 40
2803:d700:aa00::/40 maxlen: 40
2803:d700:ab00::/40 maxlen: 40
2803:d700:ac00::/40 maxlen: 40
2803:d700:ad00::/40 maxlen: 40
2803:d700:ae00::/40 maxlen: 40
2803:d700:af00::/40 maxlen: 40
2803:d700:b000::/40 maxlen: 40
2803:d700:b100::/40 maxlen: 40
2803:d700:b200::/40 maxlen: 40
2803:d700:b300::/40 maxlen: 40
2803:d700:b400::/40 maxlen: 40
2803:d700:b500::/40 maxlen: 40
2803:d700:b600::/40 maxlen: 40
2803:d700:b700::/40 maxlen: 40
2803:d700:b800::/40 maxlen: 40
2803:d700:b900::/40 maxlen: 40
2803:d700:ba00::/40 maxlen: 40
2803:d700:bb00::/40 maxlen: 40
2803:d700:bc00::/40 maxlen: 40
2803:d700:bd00::/40 maxlen: 40
2803:d700:be00::/40 maxlen: 40
2803:d700:bf00::/40 maxlen: 40
2803:d700:c000::/40 maxlen: 40
2803:d700:c100::/40 maxlen: 40
2803:d700:c200::/40 maxlen: 40
2803:d700:c300::/40 maxlen: 40
2803:d700:c400::/40 maxlen: 40
2803:d700:c500::/40 maxlen: 40
2803:d700:c600::/40 maxlen: 40
2803:d700:c700::/40 maxlen: 40
2803:d700:c800::/40 maxlen: 40
2803:d700:c900::/40 maxlen: 40
2803:d700:ca00::/40 maxlen: 40
2803:d700:cb00::/40 maxlen: 40
2803:d700:cc00::/40 maxlen: 40
2803:d700:cd00::/40 maxlen: 40
2803:d700:ce00::/40 maxlen: 40
2803:d700:cf00::/40 maxlen: 40
2803:d700:d000::/40 maxlen: 40
2803:d700:d100::/40 maxlen: 40
2803:d700:d200::/40 maxlen: 40
2803:d700:d300::/40 maxlen: 40
2803:d700:d400::/40 maxlen: 40
2803:d700:d500::/40 maxlen: 40
2803:d700:d600::/40 maxlen: 40
2803:d700:d700::/40 maxlen: 40
2803:d700:d800::/40 maxlen: 40
2803:d700:d900::/40 maxlen: 40
2803:d700:da00::/40 maxlen: 40
2803:d700:db00::/40 maxlen: 40
2803:d700:dc00::/40 maxlen: 40
2803:d700:dd00::/40 maxlen: 40
2803:d700:de00::/40 maxlen: 40
2803:d700:df00::/40 maxlen: 40
2803:d700:e000::/40 maxlen: 40
2803:d700:e100::/40 maxlen: 40
2803:d700:e200::/40 maxlen: 40
2803:d700:e300::/40 maxlen: 40
2803:d700:e400::/40 maxlen: 40
2803:d700:e500::/40 maxlen: 40
2803:d700:e600::/40 maxlen: 40
2803:d700:e700::/40 maxlen: 40
2803:d700:e800::/40 maxlen: 40
2803:d700:e900::/40 maxlen: 40
2803:d700:ea00::/40 maxlen: 40
2803:d700:eb00::/40 maxlen: 40
2803:d700:ec00::/40 maxlen: 40
2803:d700:ed00::/40 maxlen: 40
2803:d700:ee00::/40 maxlen: 40
2803:d700:ef00::/40 maxlen: 40
2803:d700:f000::/40 maxlen: 40
2803:d700:f100::/40 maxlen: 40
2803:d700:f200::/40 maxlen: 40
2803:d700:f300::/40 maxlen: 40
2803:d700:f400::/40 maxlen: 40
2803:d700:f500::/40 maxlen: 40
2803:d700:f600::/40 maxlen: 40
2803:d700:f700::/40 maxlen: 40
2803:d700:f800::/40 maxlen: 40
2803:d700:f900::/40 maxlen: 40
2803:d700:fa00::/40 maxlen: 40
2803:d700:fb00::/40 maxlen: 40
2803:d700:fc00::/40 maxlen: 40
2803:d700:fd00::/40 maxlen: 40
2803:d700:fe00::/40 maxlen: 40
2803:d700:ff00::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1564835 (0x17e0a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2023 GMT
Subject: CN=b896b230f159cea2abcb79a7a3b53b72f82e8e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:70:7c:9a:9a:f2:2f:0d:32:5c:83:eb:30:
bc:c1:d2:9a:77:55:1b:04:d3:3d:2a:18:71:72:19:
c4:3e:81:eb:53:b9:bb:e2:ea:ea:5b:b9:1f:38:e8:
c2:cd:e2:e3:18:b8:94:45:bc:bb:8e:bf:b0:03:5c:
82:84:e1:f6:c2:80:9b:b4:dc:93:b1:a1:56:1d:e4:
15:74:2f:bf:b6:c9:fa:45:97:55:71:77:f1:d6:5d:
b7:a3:9d:9d:14:c7:96:4a:d7:66:a2:25:07:e1:b4:
8e:d5:ad:96:a7:11:c8:b9:07:a1:28:6d:c3:d5:79:
f2:40:c9:53:ff:83:21:2f:6e:3b:11:e0:87:1a:e2:
1b:f0:4b:c2:f2:16:f3:ae:1d:a1:e9:7d:a6:8c:cb:
73:53:ff:ac:9e:df:88:d7:c0:74:b7:1b:f7:2f:a3:
0d:1c:f3:83:8f:85:e3:6d:25:81:88:8e:7b:a6:bd:
91:11:86:c2:66:3a:3f:8d:7f:23:a8:cb:5d:81:f7:
b5:4d:f6:3b:98:1d:b3:04:6e:5d:f0:5f:06:e8:76:
73:bd:44:2b:db:f2:d4:2d:93:94:5f:8d:7d:ae:9f:
6f:46:71:47:5d:bf:eb:e6:5a:6d:a2:6d:21:b6:87:
e9:a8:bf:04:09:4e:9c:91:59:fb:e8:1b:f5:95:a2:
c8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:55:23:17:14:DE:FB:A3:DE:28:8D:B4:91:06:2E:A0:A1:21:20:CB
X509v3 Authority Key Identifier:
keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/b896b230f159cea2abcb79a7a3b53b72f82e8e38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.28.0/22
IPv6:
2803:d700::/32
Signature Algorithm: sha256WithRSAEncryption
6c:6b:28:42:d8:0a:5c:cb:2a:34:55:d5:4d:1f:f5:dd:8f:71:
5f:d5:14:3a:f9:69:ef:93:1c:ed:4b:55:0a:bf:d6:c7:15:b0:
40:8e:9d:2a:be:52:22:e4:5b:cb:09:c9:a1:c1:b2:05:03:df:
4c:46:89:69:ee:59:e8:64:77:4a:07:aa:8c:c3:9a:76:c9:3a:
b0:6a:c2:82:0e:1b:88:1c:5c:70:07:7c:8f:58:ec:7c:59:ea:
9f:74:71:2c:a4:b4:dd:cd:d0:b3:4b:32:6d:17:19:14:45:da:
bc:1a:f6:d5:f4:ae:39:ec:9d:d1:10:57:4c:04:75:5e:81:dd:
e2:41:6f:39:86:54:0a:24:92:02:02:1e:9f:7c:a0:73:91:ca:
92:65:fa:c2:69:f1:7c:45:54:69:f1:95:23:16:db:1a:63:6c:
e0:17:0e:e2:9b:1e:06:c4:8f:68:be:94:a3:1a:df:48:95:08:
8e:b9:fe:77:3b:ac:c8:4d:e6:41:8a:2c:e7:2a:10:95:71:08:
77:53:c1:40:8f:93:2e:1a:9a:20:5e:d0:ee:97:49:38:35:8f:
a7:be:3c:5c:c3:f6:0a:d5:bc:2f:d8:33:21:d0:f8:af:a0:4c:
ef:04:f5:ce:84:9c:b2:1b:f8:18:7f:68:da:4a:3e:b2:d5:cc:
80:b0:6c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org