Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/234ebba3aa5ba6204db40259ba8e98bc69f12bcb.roa
File: 234ebba3aa5ba6204db40259ba8e98bc69f12bcb.roa (raw, json)
Hash identifier: dltIihfY26oDiKbZS2DO2csE4U2fbQ1grZ3affC4imI=
Subject key identifier: 96:C1:4F:98:E3:BF:5D:80:35:E0:FD:C0:52:3F:6B:28:50:ED:05:71
Certificate issuer: /CN=36e192b55cb56ddb327e18a090fa757000686249
Certificate serial: 0CFEC7
Authority key identifier: 75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/234ebba3aa5ba6204db40259ba8e98bc69f12bcb.roa
Signing time: Wed 24 Mar 2021 14:35:05 +0000
ROA not before: Wed 24 Mar 2021 14:35:05 +0000
ROA not after: Tue 24 Mar 2026 14:35:05 +0000
asID: 270057
IP address blocks: 191.102.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851655 (0xcfec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e192b55cb56ddb327e18a090fa757000686249
Validity
Not Before: Mar 24 14:35:05 2021 GMT
Not After : Mar 24 14:35:05 2026 GMT
Subject: CN=234ebba3aa5ba6204db40259ba8e98bc69f12bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:13:28:64:44:b0:ee:65:e5:17:86:0f:d2:
fb:37:9c:c1:fe:ef:f6:3c:c7:d6:ac:b0:9c:b8:3f:
45:9d:f5:d8:f0:23:4f:38:18:02:96:ad:fc:b7:de:
d4:9f:d0:f2:62:ca:1c:86:89:0c:ab:58:da:72:0e:
d9:fc:c0:97:27:9a:a5:15:63:70:b6:5b:3c:03:c0:
f8:5c:af:53:05:4e:12:62:53:af:1c:9b:61:fc:1b:
65:c1:82:e0:2b:7f:21:89:d0:af:b9:46:23:28:79:
58:d4:27:86:15:88:3b:fd:06:8a:05:c2:ae:b1:57:
81:2e:3c:ed:35:e8:fa:95:62:79:80:ed:d5:f0:88:
68:b9:ae:f1:67:52:d4:15:d4:7f:22:3b:26:a6:ea:
03:25:e9:db:72:05:95:18:54:f5:8f:4f:d9:d8:ef:
c3:98:19:ec:17:38:87:19:16:29:b0:9e:1e:1a:ae:
0c:2a:27:80:72:a7:6c:1c:01:f8:6b:c7:38:33:14:
52:9c:28:af:22:36:91:79:4c:58:da:26:ea:d5:08:
7e:c7:2d:c5:00:a4:57:a2:38:c6:73:1e:4b:7c:f1:
bc:85:3d:05:4b:32:18:fa:df:45:e1:04:a2:cd:14:
c7:1e:99:70:96:70:96:d7:6a:e7:c7:85:62:d9:d5:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C1:4F:98:E3:BF:5D:80:35:E0:FD:C0:52:3F:6B:28:50:ED:05:71
X509v3 Authority Key Identifier:
keyid:75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/234ebba3aa5ba6204db40259ba8e98bc69f12bcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/36e192b55cb56ddb327e18a090fa757000686249.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.102.225.0/24
Signature Algorithm: sha256WithRSAEncryption
09:bc:d0:40:25:59:83:87:fb:d8:e3:0e:32:02:ba:77:03:87:
3a:d4:44:74:96:bd:59:f0:6e:3b:70:08:d6:6c:6f:37:4a:7c:
89:b7:ff:2c:ec:76:0a:ed:c2:cb:d0:84:0a:88:2a:3c:82:b4:
1a:a5:a8:25:12:d6:fa:e4:e8:5f:8c:02:7a:f0:48:12:24:51:
0e:eb:a6:af:b0:c9:c5:70:d2:7f:86:a5:a1:f5:a4:2c:90:a8:
1d:c6:15:2b:3b:33:a8:a5:19:a7:c6:ff:4c:cf:3c:b9:48:d0:
b4:6e:db:99:a8:99:68:dc:f6:f5:0c:f6:35:fa:96:99:dd:82:
91:e8:df:03:0f:73:00:65:35:24:73:bf:a5:d0:90:67:f5:76:
51:7c:73:20:5b:b0:a8:29:29:fe:a3:2f:c3:b4:85:b6:ac:07:
a8:f6:8e:16:ec:ec:22:fb:0b:af:80:56:46:f0:0f:95:ea:d4:
b8:33:7a:b0:8b:04:78:20:80:d4:6f:b5:47:02:2e:06:03:60:
78:94:4f:cd:f7:b8:1e:5c:7e:87:02:20:e0:a4:06:24:33:91:
12:31:4b:be:46:46:96:2c:39:1c:a8:eb:73:04:35:c8:7e:78:
01:ec:49:5a:3a:94:ec:1a:a1:ca:c9:dd:70:b7:8e:85:1e:3a:
5e:0c:ac:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 16:22:58 2023 by rpki-client on console-ams.rpki-client.org