Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/2af3264dba6652781679055aa63564e9054c604c.roa
File: 2af3264dba6652781679055aa63564e9054c604c.roa (raw, json)
Hash identifier: kmVZHX917UCMSwhfpIWTVGZVGd3Y3yj/9f8vUkf1NXs=
Subject key identifier: D8:0B:E2:1D:C6:38:03:D4:60:6D:BB:35:16:0F:37:49:7D:93:A0:3D
Certificate issuer: /CN=f2cbbb792ff42fa718619507a50663798055643b
Certificate serial: 0FD6E5
Authority key identifier: AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/2af3264dba6652781679055aa63564e9054c604c.roa
Signing time: Tue 06 Jul 2021 17:49:42 +0000
ROA not before: Tue 06 Jul 2021 03:00:00 +0000
ROA not after: Thu 06 Jul 2023 03:00:00 +0000
asID: 52308
IP address blocks: 190.108.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1038053 (0xfd6e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cbbb792ff42fa718619507a50663798055643b
Validity
Not Before: Jul 6 03:00:00 2021 GMT
Not After : Jul 6 03:00:00 2023 GMT
Subject: CN=2af3264dba6652781679055aa63564e9054c604c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:48:da:42:cb:06:e0:8a:95:dd:92:2b:79:
94:d7:ce:99:6f:9d:4c:1e:9d:79:71:f7:71:04:17:
67:c4:16:1d:c0:79:43:24:f7:20:97:03:ee:09:67:
a6:d2:65:85:00:f4:53:68:67:20:48:57:e5:9a:e4:
09:76:85:d5:8b:27:b8:cf:a5:cd:41:35:68:88:2d:
ee:a1:d4:62:6d:b0:40:71:99:08:30:59:f3:10:ae:
e2:b2:55:87:17:06:17:3f:91:7b:c8:c8:e4:3a:5e:
c5:f7:ad:99:a2:76:3e:85:ce:9f:bd:aa:28:bc:15:
e6:57:b6:90:41:05:79:67:ab:37:c6:16:b4:f4:e1:
02:27:67:03:5f:9b:dd:0e:e5:b5:eb:57:15:60:de:
58:55:44:cd:69:38:63:da:6a:fc:fe:9b:d1:35:f4:
21:ec:af:02:1f:3d:f9:85:e3:38:08:57:61:73:25:
05:1b:b8:ec:b0:6f:2a:50:f9:28:7b:32:8f:cd:81:
a5:d5:a4:e5:9e:34:f1:78:f4:7b:5b:01:61:f9:cc:
3b:12:ca:f5:61:88:7a:a3:8e:35:de:46:6f:eb:36:
f5:53:f9:4a:54:1d:09:20:05:a9:05:58:d1:85:cd:
f1:55:94:99:30:ef:70:7e:52:07:c0:77:08:de:ce:
1b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0B:E2:1D:C6:38:03:D4:60:6D:BB:35:16:0F:37:49:7D:93:A0:3D
X509v3 Authority Key Identifier:
keyid:AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/2af3264dba6652781679055aa63564e9054c604c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f2cbbb792ff42fa718619507a50663798055643b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.108.37.0/24
Signature Algorithm: sha256WithRSAEncryption
65:73:3e:75:9f:00:a0:68:87:d4:51:3a:97:fb:94:fa:7e:bf:
78:35:80:d2:9c:25:e5:cd:c8:2e:00:bf:74:75:51:3b:d9:18:
03:16:ab:e2:77:c6:bf:c2:e6:8b:c4:7e:9d:14:c0:55:bd:b5:
8c:d0:b9:0d:63:b9:9f:70:71:77:77:8a:4c:32:33:d3:df:47:
d2:e1:e9:4a:96:29:1d:49:77:a6:67:f4:bb:31:c2:ab:ad:3c:
ca:b1:2f:10:1c:cb:b3:93:77:2a:f7:06:45:37:8f:01:e3:c9:
bb:19:4c:35:5b:13:c8:f7:61:bc:27:64:17:51:4d:54:5c:31:
2c:ba:6f:8d:74:72:db:37:45:fa:da:00:d5:06:1c:ee:e4:e7:
70:0c:ac:96:77:c1:b0:1a:73:4d:e1:bd:27:b5:db:fa:e4:fd:
75:ba:ad:c2:b2:fe:36:13:6c:00:c9:74:be:90:94:11:a6:0b:
ce:04:29:04:1f:b4:5b:80:ef:e3:f7:d9:40:91:4f:31:9c:35:
bd:12:69:9a:95:16:6b:cc:26:08:15:2e:63:e8:2b:ab:72:82:
d6:17:ac:ea:f6:c9:77:a9:bf:f4:64:94:e9:18:5e:04:c4:df:
9c:d0:bb:62:5a:73:82:75:a2:d0:e8:b4:4d:10:ad:9b:cb:b6:
a1:23:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org