Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/fa673150bed30b35a14741861fd0b574039c12af.roa
File: fa673150bed30b35a14741861fd0b574039c12af.roa (raw, json)
Hash identifier: 8eOOuDsxxagXVF7I5jv0EWwMMEGrmKesANMAjdfRpIQ=
Subject key identifier: 0B:F7:6D:2C:75:85:AB:9F:9A:E2:52:E1:CE:A9:B6:6F:20:07:7D:60
Certificate issuer: /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial: 1D3C3A
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/fa673150bed30b35a14741861fd0b574039c12af.roa
Signing time: Fri 18 Nov 2022 01:11:33 +0000
ROA not before: Mon 04 Apr 2022 03:00:00 +0000
ROA not after: Tue 06 Apr 2032 03:00:00 +0000
asID: 52347
IP address blocks: 186.177.241.0/24 maxlen: 24
186.177.242.0/24 maxlen: 24
190.111.32.0/21 maxlen: 21
190.111.57.0/24 maxlen: 24
190.111.58.0/24 maxlen: 24
190.111.59.0/24 maxlen: 24
190.111.61.0/24 maxlen: 24
190.111.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915962 (0x1d3c3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
Validity
Not Before: Apr 4 03:00:00 2022 GMT
Not After : Apr 6 03:00:00 2032 GMT
Subject: CN=fa673150bed30b35a14741861fd0b574039c12af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:73:62:ea:2b:e4:c7:63:7a:a7:ff:2f:f8:
b4:8a:58:24:0d:4b:70:ad:bf:cb:8e:84:67:31:e1:
31:1e:bd:c4:18:9c:15:db:d9:bd:bf:58:db:5e:20:
e6:9e:b7:34:2b:6e:d4:40:bc:2a:bc:cc:c0:79:4e:
9d:fd:46:41:4a:93:c7:d7:af:d6:11:00:d3:a7:2a:
ae:3c:ff:c7:aa:d3:51:24:a4:1c:28:dd:0d:a1:d0:
4a:da:34:78:af:78:b2:0b:c4:41:96:af:75:bd:b0:
80:06:cc:aa:e7:d2:38:91:0f:90:6c:d1:f6:ed:dc:
77:95:9b:a6:79:6f:d8:0e:8c:3b:69:b7:98:50:4b:
09:1f:2a:d4:ef:de:b5:3a:4c:c6:d5:40:b3:92:72:
75:80:1d:64:67:47:77:66:21:a3:9a:f9:f6:62:6d:
97:3f:db:84:57:a8:27:13:46:e1:0d:34:c8:2e:3f:
79:ae:13:9e:0c:c0:3b:26:10:fe:31:3b:ae:42:08:
86:f9:d9:d8:7a:34:c9:0e:a3:e6:42:7b:50:8b:92:
29:4a:8d:35:72:6f:90:bb:dd:ac:75:72:31:f2:1f:
97:05:c5:e0:2c:0b:24:ac:63:23:8a:f8:28:8c:45:
a3:63:2f:a5:26:51:8b:e2:e4:e2:91:1b:8b:75:e3:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F7:6D:2C:75:85:AB:9F:9A:E2:52:E1:CE:A9:B6:6F:20:07:7D:60
X509v3 Authority Key Identifier:
keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/fa673150bed30b35a14741861fd0b574039c12af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.177.241.0-186.177.242.255
190.111.32.0/21
190.111.57.0-190.111.59.255
190.111.61.0-190.111.62.255
Signature Algorithm: sha256WithRSAEncryption
7e:ca:15:20:f4:ab:a3:78:c6:ba:cd:65:8c:26:67:28:74:16:
81:2f:9d:d5:63:78:25:97:2e:8e:4c:ed:85:61:6c:1a:42:af:
d9:50:a2:a3:bb:4f:11:91:3f:f8:24:16:15:bf:15:50:ce:85:
e5:15:f4:90:19:50:d8:5b:81:eb:95:1a:b2:04:da:10:76:dc:
88:42:d0:29:ce:b1:85:57:65:3c:28:f7:11:3e:1e:09:cb:93:
55:41:e3:9e:86:0e:cb:4c:c7:0e:82:91:d8:f2:cd:3a:f7:56:
bd:8b:d2:18:24:30:ff:97:ff:2b:41:41:bf:74:83:42:24:c4:
16:d8:0f:6f:ae:2a:06:e5:32:88:ef:9a:7c:73:70:44:b6:7c:
f4:f1:c9:ed:12:39:af:93:35:ba:be:59:ae:99:4f:8e:9f:c5:
ed:e5:9c:5a:ec:98:ba:fe:1c:c2:47:21:ab:57:df:26:e5:dc:
ce:fe:a3:d9:b3:3c:91:2e:43:ff:70:55:3a:86:a4:df:96:39:
c3:10:58:00:f2:39:7a:cc:ce:e0:ea:45:52:c4:18:bf:75:d9:
4f:0d:4b:37:e1:ff:74:25:c7:7f:8d:5e:b0:a3:62:f6:5c:26:
4a:45:17:c4:24:fe:02:a5:99:a9:db:52:9b:b1:40:71:7e:6a:
86:fa:9c:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 4 18:14:30 2023 by rpki-client on console-ams.rpki-client.org