Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/de099b3a3d6c3ba30dfe9fd75f274e5addc6e31e.roa
File: de099b3a3d6c3ba30dfe9fd75f274e5addc6e31e.roa (raw, json)
Hash identifier: txwK4E6L0+M/8U4kYCgMQviiuIv4YLEj/upgPgapMjw=
Subject key identifier: BB:C2:67:78:5F:9B:F2:99:00:27:2D:CB:3C:FA:06:2D:18:5E:1F:88
Certificate issuer: /CN=790cd68fd041d01c15b1368a3b5f2d42f13ca563
Certificate serial: 0DB510
Authority key identifier: 0C:CD:A9:0A:43:B3:74:BC:62:CC:95:26:B5:66:D3:06:D7:48:C6:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/790cd68fd041d01c15b1368a3b5f2d42f13ca563.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/de099b3a3d6c3ba30dfe9fd75f274e5addc6e31e.roa
Signing time: Wed 24 Mar 2021 14:32:22 +0000
ROA not before: Wed 24 Mar 2021 14:32:22 +0000
ROA not after: Tue 24 Mar 2026 14:32:22 +0000
asID: 27813
IP address blocks: 181.199.144.0/20 maxlen: 24
190.2.96.0/19 maxlen: 24
190.151.160.0/20 maxlen: 24
200.3.216.0/21 maxlen: 24
200.81.120.0/21 maxlen: 24
2803:9f00:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898320 (0xdb510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790cd68fd041d01c15b1368a3b5f2d42f13ca563
Validity
Not Before: Mar 24 14:32:22 2021 GMT
Not After : Mar 24 14:32:22 2026 GMT
Subject: CN=de099b3a3d6c3ba30dfe9fd75f274e5addc6e31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1e:7b:41:8d:a3:f8:ce:70:bb:77:68:9d:31:
96:7b:72:88:8a:af:bb:60:2d:76:bf:02:98:0e:b8:
6c:5e:42:61:55:b6:97:32:4e:65:eb:07:0f:7e:18:
86:f8:6e:36:51:e0:30:25:93:6e:63:f0:83:27:e1:
72:9f:4e:09:04:11:2f:94:b2:40:ab:1f:61:85:ae:
a0:55:9d:e1:1b:25:bf:14:07:02:b9:c4:99:04:c9:
7b:0c:95:f3:2d:4e:a0:d2:51:89:e0:de:76:de:bd:
01:6f:51:b3:29:da:34:6c:e6:dc:d7:73:77:37:b5:
53:e3:bf:00:16:4d:d8:57:10:89:d0:08:bd:40:5a:
85:89:44:95:47:10:a6:0d:e9:14:01:a1:d3:75:1d:
b7:6f:c1:1d:b3:d0:b6:6a:e4:61:3b:9e:43:4c:09:
fd:ec:48:d5:55:3c:5f:43:c3:47:b9:d2:c0:55:bd:
46:a8:1d:5f:f2:0d:7c:d0:71:56:a0:e9:b1:6a:b7:
51:9c:72:4b:ce:4f:d3:2c:de:e0:9b:53:66:d5:11:
57:f6:44:c4:7a:95:b6:d3:73:c3:76:72:be:ee:d8:
8a:3c:7a:b7:f4:b1:ad:61:92:a6:2b:5c:13:a1:ec:
f4:45:37:59:5b:a0:9b:62:e7:69:1b:d8:09:20:1e:
65:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C2:67:78:5F:9B:F2:99:00:27:2D:CB:3C:FA:06:2D:18:5E:1F:88
X509v3 Authority Key Identifier:
keyid:0C:CD:A9:0A:43:B3:74:BC:62:CC:95:26:B5:66:D3:06:D7:48:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/790cd68fd041d01c15b1368a3b5f2d42f13ca563.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/de099b3a3d6c3ba30dfe9fd75f274e5addc6e31e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/790cd68fd041d01c15b1368a3b5f2d42f13ca563.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.199.144.0/20
190.2.96.0/19
190.151.160.0/20
200.3.216.0/21
200.81.120.0/21
IPv6:
2803:9f00:1::/48
Signature Algorithm: sha256WithRSAEncryption
12:2d:63:3a:15:94:66:95:dd:a1:fd:4b:9d:22:26:48:99:a9:
0d:6f:13:3b:44:78:e8:5a:3e:9c:ae:7c:db:ec:e7:87:b4:49:
9a:75:07:bf:f2:be:56:d3:a8:16:57:74:b8:b6:4e:c5:18:b4:
75:5c:ba:97:a2:d9:98:cf:a7:2a:46:9b:dd:c4:22:e7:5e:40:
1f:42:96:55:5d:b9:49:f2:2e:c2:06:c0:28:a4:46:c3:a7:89:
2a:f7:86:bb:ce:48:d0:5f:fe:56:3c:7d:2c:b2:b2:34:4a:c1:
ad:02:e8:b6:ad:f8:ae:67:24:45:e6:8a:c2:0a:52:00:74:cd:
d5:2f:90:d7:fd:f3:56:58:17:57:8a:60:23:eb:47:c5:38:1e:
5a:6c:af:fe:25:2e:9f:a0:04:b2:5a:4a:a3:10:df:7b:61:23:
42:38:bb:bf:c9:8e:46:e7:13:09:ac:63:90:56:f3:31:ae:f6:
a5:61:2d:85:17:1f:ee:8a:de:b0:fb:11:ec:38:78:e3:6a:66:
ff:55:55:ce:c3:59:4f:43:bd:c6:b0:4c:8e:54:d1:dd:4b:ff:
7b:84:18:92:69:9a:3d:8c:b1:8b:a0:a5:dd:0a:ce:a3:c9:cf:
41:83:9f:e5:e6:0a:9e:1e:fb:35:51:68:2b:43:85:38:51:8b:
7a:4c:b5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 15:39:12 2023 by rpki-client on console-fra.rpki-client.org