Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/36c2511188fcf205dc711007a1aac7ee510857c9.roa
File: 36c2511188fcf205dc711007a1aac7ee510857c9.roa (raw, json)
Hash identifier: yuUD8+wfypQpDwIXzlxjUg5aQ8JWqFqo9fx2V1+Fs1Y=
Subject key identifier: 07:53:03:DC:6B:FF:85:96:30:3B:DC:E5:49:BD:BA:BD:14:D6:15:FE
Certificate issuer: /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial: 21FB00
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/36c2511188fcf205dc711007a1aac7ee510857c9.roa
Signing time: Mon 17 Apr 2023 20:11:04 +0000
ROA not before: Sun 16 Apr 2023 20:11:04 +0000
ROA not after: Thu 17 Apr 2025 20:11:04 +0000
asID: 28002
IP address blocks: 190.112.52.0/22 maxlen: 22
200.0.86.0/23 maxlen: 23
2001:13c7:7003::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2226944 (0x21fb00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Validity
Not Before: Apr 16 20:11:04 2023 GMT
Not After : Apr 17 20:11:04 2025 GMT
Subject: CN=36c2511188fcf205dc711007a1aac7ee510857c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:4d:11:3f:3b:1e:20:60:ab:74:d3:54:ca:
c9:2c:1a:80:aa:ed:43:ec:48:90:d3:73:de:fe:68:
74:31:f2:6d:41:71:e4:a7:8d:e3:3f:11:04:63:1d:
a9:02:a2:b8:bd:ea:b1:e5:99:58:d3:b2:aa:ff:fe:
fd:73:a4:45:4a:5b:bf:d4:71:c4:5a:f3:96:9d:8e:
c1:dd:08:e9:50:a3:fe:aa:02:fb:f6:dd:52:d0:90:
f4:22:e1:eb:c5:ec:e5:8b:68:eb:5e:24:7f:0c:6e:
84:27:79:1b:e0:0b:a1:f7:39:f1:d3:f8:f1:39:a5:
ef:fe:5b:af:82:ca:38:21:05:c1:0c:0f:cb:f9:bb:
4b:95:f0:9f:60:e0:38:45:49:e6:e9:ca:98:b7:2b:
3d:23:90:df:92:bd:05:41:be:70:4b:68:87:6c:29:
a3:10:70:25:86:55:3f:34:df:0f:24:73:25:5a:fc:
32:af:ed:95:d2:6e:88:00:3b:8c:48:c2:5d:26:06:
6a:97:89:17:78:b8:9a:1e:22:56:e5:0b:4d:a8:8b:
15:91:53:f2:43:e3:7b:72:05:63:3d:b9:c0:e0:46:
1c:50:ea:9c:67:a2:7d:54:6a:dc:74:77:e4:99:bd:
bd:1f:51:85:7a:69:c0:d0:07:e6:50:c0:94:d7:c9:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:53:03:DC:6B:FF:85:96:30:3B:DC:E5:49:BD:BA:BD:14:D6:15:FE
X509v3 Authority Key Identifier:
keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/36c2511188fcf205dc711007a1aac7ee510857c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.52.0/22
200.0.86.0/23
IPv6:
2001:13c7:7003::/48
Signature Algorithm: sha256WithRSAEncryption
40:c4:71:fb:df:2d:9b:e2:4a:5d:40:a6:2b:ae:b4:3f:89:ae:
1c:3c:80:16:2e:03:3a:61:51:e6:e3:ff:ae:8d:5b:af:58:5b:
03:c3:18:27:38:e7:04:59:9e:7a:94:8a:0f:65:8e:57:62:bd:
7a:dd:76:e5:3d:9c:68:e7:7c:13:4a:38:c9:49:ba:2a:a3:22:
41:81:4a:c0:70:4f:2d:4c:2d:89:2f:34:c7:19:fe:5d:94:06:
3f:c3:ba:ad:94:19:47:14:3b:92:b6:a0:ea:8c:60:a7:3f:ab:
79:6f:c3:47:6f:f1:5f:43:0c:ee:91:8b:63:28:c0:da:ff:7d:
9b:49:c7:6d:16:4a:77:a0:74:df:ad:ad:4e:62:cc:cd:ef:27:
c0:55:46:3a:6e:de:05:96:dc:5b:06:a6:df:2a:35:5e:9b:2d:
9e:43:cf:5d:e6:30:ff:21:d5:4d:e6:10:1d:c7:58:87:5f:3b:
9a:1e:7a:87:48:90:e6:5c:0f:98:4a:91:05:db:0c:93:10:47:
c6:18:38:f2:8e:1b:6d:cd:8b:fc:02:a5:da:1f:8b:4f:81:fc:
10:7e:ae:2d:2d:fb:bf:01:ba:c8:46:a7:d1:29:39:09:e6:2d:
a6:b7:16:ee:2b:17:d0:d6:cb:33:2a:6d:14:8d:75:27:8a:72:
7b:11:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org