Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/aa8cacb66718e573f2908f7fea688bbd1c4a2114.roa
File: aa8cacb66718e573f2908f7fea688bbd1c4a2114.roa (raw, json)
Hash identifier: /zXz3z8OJ7xyDVLSXWfvmR/aUOpwRPxZuQVZpCQSeN4=
Subject key identifier: EB:F7:BB:3D:8A:C1:C7:4A:EB:E4:67:4A:1C:4E:48:FA:0E:D1:C0:D1
Certificate issuer: /CN=ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61
Certificate serial: 200566
Authority key identifier: 05:61:57:E5:97:A2:CA:FD:23:C5:CC:DE:4A:3A:9F:B9:13:4F:B9:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/aa8cacb66718e573f2908f7fea688bbd1c4a2114.roa
Signing time: Tue 18 Apr 2023 16:54:17 +0000
ROA not before: Mon 17 Apr 2023 16:54:17 +0000
ROA not after: Fri 18 Apr 2025 16:54:17 +0000
asID: 52495
IP address blocks: 190.103.64.0/20 maxlen: 24
190.109.224.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2098534 (0x200566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61
Validity
Not Before: Apr 17 16:54:17 2023 GMT
Not After : Apr 18 16:54:17 2025 GMT
Subject: CN=aa8cacb66718e573f2908f7fea688bbd1c4a2114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:27:bd:fd:a8:e0:e7:8e:ad:e7:2d:66:8d:
e4:04:36:d1:2e:d0:bd:0e:9d:37:96:2a:60:44:03:
aa:67:32:43:2a:43:af:03:69:26:d5:c8:8f:8d:4d:
8e:46:b8:e3:63:f6:e5:bc:16:e5:43:c8:e6:ec:20:
2b:45:62:b3:dc:75:f1:0a:f6:1d:f2:59:cb:fb:c5:
5e:95:0c:0d:4e:9a:c5:ad:b3:1e:84:04:fd:06:34:
af:a6:b0:51:1c:4a:28:0d:6c:40:54:0d:b5:fc:1b:
59:72:1a:b2:1c:2a:1e:43:15:07:41:16:8b:e2:71:
d2:e5:47:54:42:fe:7e:3c:4b:74:2b:43:34:43:fa:
f4:ca:d4:14:29:24:e8:2b:90:86:31:dc:04:da:cf:
65:90:1f:a6:82:54:cd:53:5f:c4:45:dd:5d:d9:0c:
02:9a:95:d2:65:4c:04:34:ed:38:15:b7:c0:8f:2a:
7b:0d:c2:ec:be:fd:7f:52:fb:01:bc:d0:45:1f:d3:
6a:6f:fd:1e:29:8c:16:ac:e4:4f:fe:d8:71:94:43:
19:0d:91:e0:43:83:84:cf:23:d8:02:5d:bd:6c:ea:
a0:04:99:7e:d2:b2:e8:f6:1d:40:b9:f6:d9:81:f3:
c1:0e:8a:e1:76:f3:c8:91:c5:17:eb:80:ad:f6:2b:
8f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F7:BB:3D:8A:C1:C7:4A:EB:E4:67:4A:1C:4E:48:FA:0E:D1:C0:D1
X509v3 Authority Key Identifier:
keyid:05:61:57:E5:97:A2:CA:FD:23:C5:CC:DE:4A:3A:9F:B9:13:4F:B9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/aa8cacb66718e573f2908f7fea688bbd1c4a2114.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.103.64.0/20
190.109.224.0/19
Signature Algorithm: sha256WithRSAEncryption
58:1b:2d:2e:61:53:6c:c3:95:5e:d9:e7:8f:88:77:a7:d1:7f:
7f:8b:0f:72:f5:e3:b8:69:5f:e7:01:73:39:c2:ec:1c:99:36:
ae:68:4c:56:d1:13:97:7b:70:4a:6f:4e:90:d3:4a:5a:d2:6a:
fc:83:68:3e:6e:80:4a:4a:f9:19:bc:5a:0c:5a:12:a6:ab:81:
a1:c5:72:f2:5a:81:a5:cb:a0:3c:38:9c:34:c7:c9:9f:70:a1:
4b:36:cf:47:ed:d3:12:48:b2:a9:57:ae:6b:f7:69:5b:cc:58:
ae:e9:72:d1:1a:59:05:48:b6:01:1c:11:98:04:a3:e3:a7:7f:
37:30:ba:3f:24:ac:9b:71:43:7b:56:6c:05:b2:49:f9:0c:8c:
ae:a9:7d:b0:78:57:4e:13:e3:34:74:aa:bf:63:20:fc:8c:fd:
7e:dd:fb:2d:b4:2b:8b:cf:15:2c:71:82:ad:a5:3f:b6:dd:c4:
48:a6:c5:7a:28:f1:35:d2:c6:6b:38:c1:82:2f:bc:2f:fc:fe:
1b:11:f2:db:db:9f:4a:8f:1e:30:52:e6:34:57:8c:54:15:01:
3e:c3:db:49:36:b5:c4:d1:b1:5a:c1:ea:0b:e9:fe:57:b8:db:
d4:60:fd:77:46:35:3e:5b:c4:bc:86:74:43:ab:5d:7a:ca:03:
65:02:17:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org