Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/87c3f710b586114c5ce840e5084360b3eb49a2de.roa
File: 87c3f710b586114c5ce840e5084360b3eb49a2de.roa (raw, json)
Hash identifier: qbXsmvrOKD2HZ2v/4IsLKsaQZbWimoQI9BWlTSwWNNo=
Subject key identifier: 20:F1:F7:6A:B1:E3:1F:71:9E:CD:95:61:56:58:5B:DA:CA:F3:1D:AF
Certificate issuer: /CN=2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1
Certificate serial: 06D067
Authority key identifier: 5A:F6:CE:2E:D4:EA:86:8F:D1:B2:92:F2:7F:F4:EF:FF:F8:59:F1:F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/87c3f710b586114c5ce840e5084360b3eb49a2de.roa
Signing time: Wed 24 Mar 2021 14:34:16 +0000
ROA not before: Wed 24 Mar 2021 14:34:16 +0000
ROA not after: Tue 24 Mar 2026 14:34:16 +0000
asID: 22860
IP address blocks: 190.113.0.0/19 maxlen: 24
200.24.224.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446567 (0x6d067)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1
Validity
Not Before: Mar 24 14:34:16 2021 GMT
Not After : Mar 24 14:34:16 2026 GMT
Subject: CN=87c3f710b586114c5ce840e5084360b3eb49a2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:cb:04:9e:d9:62:3d:61:8d:eb:dc:85:2d:
04:33:61:2e:ed:92:a2:57:57:c3:88:e7:9d:5d:8a:
06:95:f6:90:5b:dc:ea:24:eb:33:25:38:2b:c7:bc:
ee:1f:b3:7c:24:7d:9f:89:c7:2b:00:19:c2:21:76:
25:14:bb:04:8b:97:25:be:76:bc:0c:8e:4c:a7:36:
c5:05:6d:a4:73:f6:86:b6:04:49:c1:73:32:e3:5d:
07:92:e2:81:71:c9:e8:f9:bc:4d:6c:ed:d0:79:60:
36:bc:fd:08:43:24:70:67:c6:34:71:f0:bd:f0:b6:
65:6f:ea:a5:93:62:91:7e:1e:5c:5d:e0:cb:27:93:
a9:4f:d6:b5:58:3f:c5:a6:2e:b6:02:91:0b:38:e2:
af:9c:c0:19:3d:eb:18:82:61:b2:7f:30:db:c0:77:
31:a3:38:88:62:3c:61:2a:98:71:0f:22:4e:9f:c2:
17:b7:aa:a6:6c:3e:94:5c:53:cc:f5:b0:c2:58:b9:
be:a3:ec:88:da:83:22:d1:43:7a:98:c6:32:09:82:
c2:61:cf:fb:f2:37:f2:c8:c2:d6:5c:8c:b7:b1:84:
90:80:f1:25:83:e9:95:4f:f4:f4:26:b8:da:81:cc:
ba:21:60:44:26:6e:e4:6a:24:b5:a0:54:24:0f:b4:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F1:F7:6A:B1:E3:1F:71:9E:CD:95:61:56:58:5B:DA:CA:F3:1D:AF
X509v3 Authority Key Identifier:
keyid:5A:F6:CE:2E:D4:EA:86:8F:D1:B2:92:F2:7F:F4:EF:FF:F8:59:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/87c3f710b586114c5ce840e5084360b3eb49a2de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/610d97ec-dcab-4da3-9609-05b048067152/2de13bd5c05c1bebbd68e57001aa1c5d9f7c03a1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.113.0.0/19
200.24.224.0/20
Signature Algorithm: sha256WithRSAEncryption
91:de:bc:b9:9c:63:6a:d3:5d:e1:ac:37:7f:8b:79:98:ac:b7:
8d:59:8f:7b:07:f6:4a:da:9f:87:5e:a0:fe:46:40:a3:55:fa:
91:0c:a7:4a:61:03:73:7e:81:86:79:ee:ac:d5:e5:3a:86:a8:
02:38:9c:fc:d0:15:6e:d4:c5:6a:e5:9d:a7:86:d7:d7:e5:78:
90:45:30:6c:ef:3d:50:7b:20:4b:11:60:6a:18:3f:36:e2:01:
38:06:8c:5f:83:d0:3a:61:2b:55:2a:d9:58:ab:e0:d6:ad:ef:
01:73:1b:1b:48:f7:44:4b:22:b1:2f:02:5f:6a:4b:28:e6:4a:
67:da:6e:01:2b:0e:b3:cb:67:36:29:51:90:aa:f1:cc:3c:a9:
b2:a2:69:6f:2f:1b:7b:41:f1:a9:ac:c3:97:6e:ac:af:9d:61:
ad:38:bf:2d:b6:17:34:a3:fd:cd:43:31:42:3b:bf:4c:69:c1:
d2:da:d4:e3:90:92:1b:ad:dc:4a:b1:ce:67:cb:b1:9d:76:fb:
62:c6:13:2f:fb:e9:ce:49:4d:c6:22:ce:be:00:d6:cb:a8:85:
74:41:6d:db:e3:4e:96:f1:a6:4c:e3:b2:de:09:38:e1:4c:4f:
c0:71:48:60:b3:e5:ff:7c:44:f7:4a:90:98:ae:b5:13:5b:50:
bb:b4:e3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 16:58:57 2023 by rpki-client on console-fra.rpki-client.org