Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ca12913-0731-47a3-bfdf-d4650095c0f2/5b870f4c2b96bc38365387c82b8462675c6cc261.roa
File: 5b870f4c2b96bc38365387c82b8462675c6cc261.roa (raw, json)
Hash identifier: qafunIgJ0W/8EUgCp2sf3bAP+LpoZl5TmggG1Qw/jgs=
Subject key identifier: 12:10:A9:43:FB:C7:18:77:2B:9F:30:64:58:8E:75:C4:0A:52:4C:3B
Certificate issuer: /CN=8332a0a627ec1dcde6573f34c68eed389e98bfa1
Certificate serial: 13495D
Authority key identifier: 4F:49:33:C1:DC:0E:2F:AC:42:D7:EA:C1:E7:24:9B:5B:15:F0:BF:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8332a0a627ec1dcde6573f34c68eed389e98bfa1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ca12913-0731-47a3-bfdf-d4650095c0f2/5b870f4c2b96bc38365387c82b8462675c6cc261.roa
Signing time: Fri 12 Nov 2021 15:34:20 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 27751
IP address blocks: 190.108.224.0/20 maxlen: 24
190.108.240.0/20 maxlen: 24
190.121.176.0/20 maxlen: 24
200.59.224.0/20 maxlen: 24
200.59.240.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263965 (0x13495d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8332a0a627ec1dcde6573f34c68eed389e98bfa1
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=5b870f4c2b96bc38365387c82b8462675c6cc261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:0e:b5:d5:4c:a1:84:be:4e:0b:9a:c3:7a:
a5:55:99:3e:e6:44:03:54:ae:d4:8e:85:d3:ca:d7:
bf:0c:bf:2c:fb:d2:7a:43:bc:b1:e2:52:98:33:ea:
7a:78:6e:8b:0b:7f:9e:e2:a9:7c:51:72:e2:9c:ad:
9e:e4:ad:fa:28:51:79:3a:bd:6d:d7:a6:f1:d6:29:
9c:2c:67:f8:a6:d8:b3:9f:a1:9b:3d:e5:4c:02:49:
ef:1d:31:04:2d:26:e0:7d:17:f1:d0:94:9b:75:88:
a0:b2:8f:b0:db:d1:84:9a:30:b9:fe:0b:11:a2:76:
7e:84:75:84:44:c8:33:20:fb:a2:28:96:bb:08:7a:
ad:97:a2:3d:a7:6e:45:fd:62:92:71:08:f1:4d:6b:
b1:64:75:7e:0c:33:36:2f:78:61:60:28:92:69:77:
d9:c2:13:c2:13:6c:06:1b:a0:64:c1:f5:97:ef:ac:
46:84:63:1f:87:f7:a6:b9:0c:45:b3:d7:ad:53:3c:
e4:5b:00:34:73:b9:bb:4a:f2:f0:ce:99:ed:53:f6:
e0:54:c4:68:54:13:f8:03:fb:4f:8b:23:e8:82:bd:
ea:3f:36:59:58:5b:70:a2:e2:91:de:fc:7f:2b:8f:
62:a9:0c:4a:2b:02:96:95:57:8b:19:82:eb:61:31:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:10:A9:43:FB:C7:18:77:2B:9F:30:64:58:8E:75:C4:0A:52:4C:3B
X509v3 Authority Key Identifier:
keyid:4F:49:33:C1:DC:0E:2F:AC:42:D7:EA:C1:E7:24:9B:5B:15:F0:BF:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8332a0a627ec1dcde6573f34c68eed389e98bfa1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ca12913-0731-47a3-bfdf-d4650095c0f2/5b870f4c2b96bc38365387c82b8462675c6cc261.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ca12913-0731-47a3-bfdf-d4650095c0f2/8332a0a627ec1dcde6573f34c68eed389e98bfa1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.108.224.0/19
190.121.176.0/20
200.59.224.0/19
Signature Algorithm: sha256WithRSAEncryption
64:8b:92:1c:84:04:28:95:ae:08:d0:28:bb:57:ec:cd:9e:84:
e1:13:4c:87:83:08:72:b4:7e:41:25:24:e5:1f:37:84:7b:33:
f2:c6:27:52:16:0e:a1:86:21:6e:ac:05:2d:d6:97:2e:23:cd:
a5:50:a2:8a:03:f0:4f:b9:35:c4:ad:34:61:3d:3c:d9:7d:2a:
b1:d1:ea:f9:13:30:ac:8e:4e:37:6c:80:b2:5c:ef:a0:a6:57:
34:76:73:8f:82:d5:a7:ab:8a:ac:36:86:3f:56:a8:4c:6a:1f:
13:9f:2e:78:8b:e4:2e:64:5a:8b:14:4a:31:a8:a1:ee:4f:79:
4e:fb:19:8d:34:d9:f5:f0:39:26:e9:0c:7e:ab:a7:d9:d3:2f:
e7:75:47:af:33:f9:4f:13:8d:65:95:df:57:16:69:b2:1b:44:
de:ed:da:9a:9b:66:b5:b5:36:86:25:1d:85:d6:13:c2:6c:d5:
3d:5e:ff:95:21:46:05:b0:69:b2:4e:11:95:d9:fb:cf:f2:7f:
47:bc:9e:c8:51:cc:95:0f:15:bb:38:76:f3:6b:d6:55:55:14:
e6:1f:ae:03:ab:ba:84:1a:0b:03:7c:6c:84:1d:23:28:e7:84:
f2:61:34:52:64:e3:f6:a2:2d:f5:a8:ca:1e:14:e1:99:f5:d8:
e6:af:18:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:20 2023 by rpki-client on console-fra.rpki-client.org