Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/d736c20ea6ae017b683fdb4da658aacf8dbc7d3a.roa
File: d736c20ea6ae017b683fdb4da658aacf8dbc7d3a.roa (raw, json)
Hash identifier: uWpMGB1NtMMGw9mLi16wjp7a2BCLTFlrmbQuntror6k=
Subject key identifier: 20:B4:05:30:17:31:78:79:88:9B:71:94:15:FD:9A:2F:C7:CB:F9:1B
Certificate issuer: /CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
Certificate serial: 1130E2
Authority key identifier: 44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/d736c20ea6ae017b683fdb4da658aacf8dbc7d3a.roa
Signing time: Fri 03 Sep 2021 11:00:21 +0000
ROA not before: Wed 26 May 2021 03:00:00 +0000
ROA not after: Fri 03 Sep 2027 03:00:00 +0000
asID: 60022
IP address blocks: 190.121.241.0/24 maxlen: 24
190.121.244.0/24 maxlen: 24
190.121.246.0/24 maxlen: 24
190.121.247.0/24 maxlen: 24
190.121.248.0/21 maxlen: 21
2803:1100::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1126626 (0x1130e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
Validity
Not Before: May 26 03:00:00 2021 GMT
Not After : Sep 3 03:00:00 2027 GMT
Subject: CN=d736c20ea6ae017b683fdb4da658aacf8dbc7d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:db:7d:49:7a:e6:bc:82:6e:6a:58:ee:f0:
7a:0e:0d:00:88:c3:e7:ea:1a:4d:56:2a:f9:1b:29:
48:d8:70:56:60:a0:3b:85:00:59:e0:36:d9:8d:6e:
25:6a:a7:d9:4d:c7:86:c4:28:88:8e:b4:c9:58:f1:
83:ce:68:b1:78:32:0c:26:f4:b6:a4:a6:ce:0f:83:
de:ce:e6:0a:96:97:78:a6:24:09:86:cb:11:b8:2f:
43:14:3d:a9:13:7c:f7:69:4c:a2:b8:cd:af:48:45:
b1:7e:96:8a:3c:ae:59:7f:8a:72:b8:92:ab:69:5f:
bb:18:2a:e7:24:48:d7:9b:b9:26:23:b9:cd:d4:14:
38:e2:09:5d:e9:a8:19:53:f1:51:22:e5:6c:94:eb:
3f:51:34:10:9e:29:8e:56:12:c5:67:fe:f4:dc:cf:
12:68:bc:93:80:54:5e:b6:5b:bd:de:e6:c7:06:fe:
ca:5b:cf:9b:82:36:65:4e:de:73:47:1d:b5:07:7e:
cb:2b:02:b3:e6:63:46:e4:6f:78:cd:1e:ff:ad:35:
99:d0:f4:4f:31:e1:52:da:59:10:48:9b:2c:94:d4:
a5:d3:76:9e:4e:a0:e8:1a:93:87:41:f2:66:49:21:
79:49:c5:56:33:7c:b4:dc:e4:11:98:0b:c8:87:2f:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B4:05:30:17:31:78:79:88:9B:71:94:15:FD:9A:2F:C7:CB:F9:1B
X509v3 Authority Key Identifier:
keyid:44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/d736c20ea6ae017b683fdb4da658aacf8dbc7d3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/fcc25171c7921fdcd117ca7096ecea5ba6358873.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.121.241.0/24
190.121.244.0/24
190.121.246.0-190.121.255.255
IPv6:
2803:1100::/32
Signature Algorithm: sha256WithRSAEncryption
50:da:c2:f1:4e:d1:6e:e8:d3:b9:ff:a6:30:fb:50:97:1f:5b:
b2:ef:02:04:74:75:cc:e3:be:3c:b4:14:52:f0:8a:2c:cb:7b:
29:a6:89:ef:6f:ad:76:1d:40:14:92:fd:59:f7:44:d8:39:ee:
14:ec:87:07:6e:b2:8d:82:a5:ca:c6:88:e7:a1:f0:f8:f1:e1:
9b:87:89:4b:0d:7d:6b:29:ca:13:51:20:30:3c:24:d5:00:0b:
b2:54:a3:32:dd:11:f8:d3:43:57:db:5a:d6:02:93:4c:b3:4a:
eb:6e:ed:78:d1:38:44:11:e6:4b:04:a1:0c:2f:f4:b1:84:d5:
e2:b0:6e:75:1d:56:19:f5:bf:7e:1d:26:59:be:23:c3:be:63:
2f:38:65:db:18:a4:b4:1b:6c:48:e1:13:b2:a8:f4:46:d1:ba:
89:e9:8f:be:ee:73:5e:99:7e:e0:8c:e9:e6:85:2f:1b:16:8d:
bf:a7:e7:37:ec:8e:56:54:a9:d1:ea:3b:12:06:53:00:98:4a:
9e:17:94:43:b3:92:03:3c:56:cb:57:88:4c:03:5a:f4:b9:51:
51:87:7a:e3:12:1a:2f:a8:67:ef:b4:a9:0d:15:e6:3b:74:37:
06:8e:66:14:e2:74:8d:5a:b6:cf:84:5e:a3:7f:7d:b4:eb:b1:
56:07:c2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-ams.rpki-client.org