Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/7f5e2e08407aeee661577dd3eabf5e7e8443ed9f.roa
File: 7f5e2e08407aeee661577dd3eabf5e7e8443ed9f.roa (raw, json)
Hash identifier: QCMF7MUYPRzRNEgq3HXdYarpUZ0vwRTOZCI/pzYy47I=
Subject key identifier: 39:34:19:C2:1F:A6:51:DA:E2:00:C6:F8:FC:DA:ED:C6:76:8B:9E:D0
Certificate issuer: /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial: 1A682E
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/7f5e2e08407aeee661577dd3eabf5e7e8443ed9f.roa
Signing time: Thu 04 Aug 2022 01:44:17 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 06 Apr 2032 03:00:00 +0000
asID: 52347
IP address blocks: 186.177.228.0/22 maxlen: 22
186.177.232.0/21 maxlen: 21
186.177.240.0/24 maxlen: 24
190.93.40.0/24 maxlen: 24
190.93.41.0/24 maxlen: 24
190.93.42.0/24 maxlen: 24
190.93.43.0/24 maxlen: 24
190.111.56.0/24 maxlen: 24
190.111.60.0/24 maxlen: 24
190.111.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1730606 (0x1a682e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Apr 6 03:00:00 2032 GMT
Subject: CN=7f5e2e08407aeee661577dd3eabf5e7e8443ed9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:71:1e:49:c9:42:1c:8e:f3:aa:bf:ba:2a:
c5:34:60:bc:5b:58:3b:e2:d9:a6:6a:e4:68:a3:22:
98:a5:12:92:cd:3c:bb:97:6b:52:aa:d8:09:c3:21:
55:22:c9:7b:20:83:13:13:4b:64:44:c9:0d:2b:5e:
17:51:34:53:8f:d1:8b:23:e2:23:5b:d2:ae:96:be:
ff:7a:34:31:db:f0:30:b6:5c:75:49:88:18:09:ad:
26:5b:80:c9:91:82:0c:b7:0d:4a:2b:c4:c7:55:bf:
7f:77:6e:96:3e:ab:7e:dd:0b:0d:97:b0:24:2e:52:
d8:1d:55:1c:3d:0f:03:8c:67:40:e9:07:44:23:65:
9a:21:8c:1e:19:c6:90:0b:85:aa:07:26:1f:0f:87:
3f:06:65:b9:03:c9:18:d4:e8:fa:2e:d1:5f:a7:60:
4c:f4:7b:6a:4f:49:d6:f1:7c:1e:61:c7:07:07:8a:
fc:3f:3a:cb:30:9e:b2:49:55:82:c4:72:ba:e5:7b:
0a:2b:33:e3:49:5a:cc:f1:d9:c7:da:ad:95:cb:d9:
53:ad:32:a0:87:88:81:29:a4:77:c0:03:63:64:54:
96:a8:cb:6b:91:ed:cb:85:e5:58:53:91:40:fe:ad:
93:cd:ac:fe:5d:47:92:bd:12:e8:a8:3f:8b:2e:c9:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:34:19:C2:1F:A6:51:DA:E2:00:C6:F8:FC:DA:ED:C6:76:8B:9E:D0
X509v3 Authority Key Identifier:
keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/7f5e2e08407aeee661577dd3eabf5e7e8443ed9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.177.228.0-186.177.240.255
190.93.40.0/22
190.111.56.0/24
190.111.60.0/24
190.111.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:19:37:16:d6:9d:06:8e:3b:b7:74:a5:4d:a8:84:08:d1:74:
d1:9c:96:6c:5f:54:d7:a5:46:b1:41:75:55:80:b8:28:0d:48:
92:38:a1:1c:c4:be:97:91:c6:66:3d:dd:b9:d7:10:38:34:7e:
2a:d4:dd:19:61:3f:cd:78:e3:ed:7d:b6:a9:c2:55:35:a7:53:
b3:d1:c5:77:6b:ae:f3:e1:aa:ab:24:a2:a9:3e:4a:b8:0e:2e:
d4:60:08:2f:6c:88:69:a4:bb:7e:ec:2e:32:86:86:d5:fa:6f:
c3:8e:0e:6e:37:3e:3b:9a:24:dd:33:7e:df:59:7f:66:47:a2:
a3:a8:43:e7:f5:72:fe:07:2f:5c:6e:31:5a:f2:b1:d8:7a:59:
d8:7e:66:76:ec:5a:6d:68:3d:d3:b5:17:32:0a:ff:af:a6:58:
d4:a3:d3:59:b2:8e:b9:8c:94:06:4d:47:fd:10:07:81:aa:ff:
4d:88:da:8b:5b:af:85:34:a1:7c:23:cb:38:9e:70:05:b5:8f:
8f:39:46:75:40:f3:d0:52:94:e8:f8:38:cc:a4:5b:a6:84:42:
8f:fd:92:50:ea:2a:50:83:a2:85:8c:79:83:d4:08:41:4e:2c:
59:02:9e:d3:6e:48:83:b2:18:32:92:a9:b6:e4:03:e4:d6:bb:
fe:e3:68:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-ams.rpki-client.org