Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/493c7121f7073ca3c549fb9af350b1c8c21c3cc2.roa
File: 493c7121f7073ca3c549fb9af350b1c8c21c3cc2.roa (raw, json)
Hash identifier: SLXaWA72Ka9z2qoKdq7gERsq9jnw1ncAs/PEqiZLPXU=
Subject key identifier: CA:BB:50:CD:26:CE:15:43:47:1D:25:CF:CE:A5:F9:CE:28:48:D0:A6
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 11B587
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/493c7121f7073ca3c549fb9af350b1c8c21c3cc2.roa
Signing time: Fri 16 Apr 2021 00:02:04 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 52371
IP address blocks: 190.226.32.0/24 maxlen: 24
201.252.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1160583 (0x11b587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=493c7121f7073ca3c549fb9af350b1c8c21c3cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:2a:f8:c9:d8:42:84:cd:0d:44:3a:25:e0:
52:c9:2a:9e:8e:12:56:37:d6:b0:20:4c:e7:14:ea:
08:0d:a8:ba:ea:73:5b:72:72:93:5e:f1:2b:0e:85:
cf:c8:c8:35:0e:77:6c:d9:ad:35:94:da:0e:0e:29:
6e:91:75:bc:6c:bb:d8:e2:58:9a:44:b2:69:29:28:
2b:fe:46:72:0a:8e:e8:52:67:a2:b8:f5:6b:63:dc:
94:ea:b7:53:9b:d6:65:b5:8f:9e:b0:15:8d:81:ec:
be:f0:74:51:c5:dd:ef:cc:dd:b6:06:b0:a4:e1:34:
d7:02:93:46:4b:60:2f:31:04:4d:f5:ec:10:c7:4c:
2a:ac:d8:76:b0:bd:b3:7a:8f:b0:57:ef:8a:5b:99:
43:cf:3f:b3:34:d6:0a:bf:75:1e:47:f7:d3:70:51:
72:cc:ce:a2:0d:f4:70:2a:0a:10:ef:5e:94:c6:75:
7f:73:90:ca:1d:3b:d4:41:bb:aa:5c:71:bc:af:d5:
7f:45:d7:16:a9:0e:fd:ba:16:c0:de:b5:9a:3a:63:
90:24:c7:47:45:61:e3:a2:64:a1:e7:78:7f:67:18:
64:9d:19:8d:5d:6a:67:1c:c6:06:3c:44:d8:ac:d6:
49:96:4b:ca:c2:f8:31:d3:0a:30:2f:30:ef:5d:38:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BB:50:CD:26:CE:15:43:47:1D:25:CF:CE:A5:F9:CE:28:48:D0:A6
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/493c7121f7073ca3c549fb9af350b1c8c21c3cc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.226.32.0/24
201.252.229.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f5:0f:88:01:3c:7b:5a:29:9a:5b:eb:e6:cd:5b:12:9b:74:
b8:f2:51:97:a6:fb:de:67:53:c6:38:28:f9:af:d8:7a:e7:9a:
a9:f3:29:83:86:b2:44:5e:ba:0d:97:e5:82:9f:ae:53:eb:00:
fd:6e:ed:e2:66:7d:b3:75:68:20:64:59:83:e6:eb:a1:30:4b:
c8:d6:1d:75:25:d1:51:2c:b7:4c:6a:41:45:8a:bc:7f:1d:2c:
98:71:8e:5e:6f:d6:b9:69:aa:31:d5:57:ef:b3:49:54:e8:6d:
8c:6b:b0:69:d3:8e:ea:75:aa:37:7b:8e:8c:ee:90:ac:65:75:
ef:96:61:b6:03:f7:d8:c1:62:a9:9a:d2:8a:24:81:bd:96:72:
2d:d8:9f:c7:d3:2c:46:64:b2:45:63:39:5f:d1:b1:c7:80:be:
1d:ed:93:45:35:9e:de:99:70:cd:7c:ab:19:dd:fc:5e:35:10:
87:ea:13:7e:cc:fd:0e:ca:28:9e:7a:b0:ab:17:61:2a:75:3e:
78:d7:5e:fa:f4:7d:8f:d1:38:db:33:d7:d1:bd:7d:50:41:23:
06:0e:79:81:30:d0:94:13:f0:9f:ce:f6:06:22:f9:72:d1:40:
c2:3d:64:74:28:56:d9:1d:d2:eb:25:a9:c7:85:30:78:8c:7b:
d1:ca:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org