Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/dda8d760add713d7038b1ea01e20af9fbf7f0d79.roa
File: dda8d760add713d7038b1ea01e20af9fbf7f0d79.roa (raw, json)
Hash identifier: RNYj6+vQUdaQNw8HikiFWDJpdLkrhIBmbljt7MoDp10=
Subject key identifier: 92:D4:31:A2:30:26:4F:CC:BE:03:C6:1E:BE:28:E8:65:BE:B6:71:9A
Certificate issuer: /CN=3f0c9202d1972a5deab032862dbcc1d9d5c5e87f
Certificate serial: 0A8456
Authority key identifier: D6:B8:B5:8E:04:3A:41:7E:2B:D9:31:F2:B7:7D:CC:06:F1:82:60:E1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/dda8d760add713d7038b1ea01e20af9fbf7f0d79.roa
Signing time: Fri 07 May 2021 01:03:32 +0000
ROA not before: Thu 06 May 2021 03:00:00 +0000
ROA not after: Sat 06 May 2023 03:00:00 +0000
asID: 27895
IP address blocks: 190.104.128.0/18 maxlen: 24
200.3.248.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689238 (0xa8456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0c9202d1972a5deab032862dbcc1d9d5c5e87f
Validity
Not Before: May 6 03:00:00 2021 GMT
Not After : May 6 03:00:00 2023 GMT
Subject: CN=dda8d760add713d7038b1ea01e20af9fbf7f0d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:35:01:fc:c3:0c:b1:f5:4c:f8:0f:f5:90:
98:7f:35:1f:08:d7:73:3f:36:79:39:49:ae:9b:56:
0f:7b:51:5e:6a:d1:6d:3a:fe:90:26:ea:ea:d2:21:
3a:4f:cf:4b:b2:da:02:a1:ea:78:e2:dd:64:01:c4:
05:3a:c3:aa:36:26:b2:08:07:8c:af:a3:66:8d:06:
7d:62:a0:b5:35:9e:f0:0d:b7:70:f2:b7:f6:9b:b3:
04:a1:f1:bc:0c:51:71:e9:d8:05:d4:97:c9:fe:d8:
da:74:a5:a0:15:c5:42:7b:9e:10:78:fb:2f:d8:f0:
66:56:60:91:3c:80:90:70:bf:b8:6d:8b:2a:dd:91:
b4:c7:3b:c0:af:17:e0:70:fc:f3:51:78:37:7f:a9:
c6:43:b5:da:d5:fa:36:29:70:e6:ad:90:db:90:7b:
2c:f3:49:f8:e0:fc:73:f3:5a:c9:d2:aa:44:15:1d:
82:e3:3e:64:b8:54:4e:3d:0f:d5:f0:8a:88:57:54:
7f:c9:1d:aa:07:09:bb:8e:db:0b:61:6e:bf:2e:de:
dd:5f:c6:73:27:c4:dc:17:23:ee:82:e9:c7:66:af:
b7:0a:a8:e7:7b:e1:a0:4a:22:a2:fa:a8:19:7d:a7:
ad:f5:8d:6d:4f:fe:d3:e9:6b:7e:df:dc:74:5a:f2:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D4:31:A2:30:26:4F:CC:BE:03:C6:1E:BE:28:E8:65:BE:B6:71:9A
X509v3 Authority Key Identifier:
keyid:D6:B8:B5:8E:04:3A:41:7E:2B:D9:31:F2:B7:7D:CC:06:F1:82:60:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/dda8d760add713d7038b1ea01e20af9fbf7f0d79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.104.128.0/18
200.3.248.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:b8:74:d7:23:b9:43:07:67:5c:19:21:11:1b:d0:a5:a6:56:
8a:7a:0d:40:56:a5:ad:6f:82:00:e9:b4:2d:bc:14:6d:b7:e4:
77:28:96:53:34:3a:f5:db:fd:c5:34:1f:61:dc:c5:84:d6:e4:
68:bd:42:f4:7b:0a:0a:8b:24:28:2d:87:83:1b:2f:fe:a0:85:
b9:6f:d5:7e:29:fe:fd:f8:ec:e9:84:3d:2a:d5:74:e6:e0:fc:
ad:0a:64:ab:5c:d1:57:e3:57:67:a6:a6:9c:ce:6c:83:79:86:
13:85:00:9e:d9:44:16:72:99:f4:b4:7c:b6:3f:a9:b9:7e:f0:
e2:54:41:0f:45:55:2f:22:5d:ee:58:ec:a5:72:b3:e0:cf:8a:
bc:2d:80:94:84:30:33:54:3f:ab:ac:da:d8:a5:4e:d1:e6:d2:
c8:81:81:36:2e:f6:b0:39:cb:b4:82:d1:bd:ff:2d:93:c3:42:
be:de:50:23:d5:03:df:2a:5e:2f:ec:f6:b2:ca:c5:6b:c5:dc:
ff:4d:f4:69:e1:c4:15:6d:e1:64:d5:28:f9:e0:7f:77:8c:bd:
68:56:b5:be:41:a7:c6:8e:22:ff:d4:05:06:86:ce:c7:01:e3:
06:6a:0b:6d:95:ff:e0:a5:66:b5:f5:27:7e:3d:d2:23:b5:d5:
42:51:8a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-ams.rpki-client.org