Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/3af524f7d7affd6a8a58862ebb77b7b9f0b61f4d.roa
File: 3af524f7d7affd6a8a58862ebb77b7b9f0b61f4d.roa (raw, json)
Hash identifier: ki+zpfkwblpdqDfrwtPMBDCk45t2XndSgpXxIQ/a9Xc=
Subject key identifier: 65:0D:FA:20:89:E7:51:77:2A:C7:D0:24:4E:7D:DB:B8:0A:84:46:B2
Certificate issuer: /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial: 1CB98C
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/3af524f7d7affd6a8a58862ebb77b7b9f0b61f4d.roa
Signing time: Wed 12 Oct 2022 20:33:26 +0000
ROA not before: Tue 23 Mar 2021 14:47:14 +0000
ROA not after: Tue 24 Mar 2026 14:47:14 +0000
asID: 28002
IP address blocks: 190.112.52.0/22 maxlen: 22
200.0.86.0/23 maxlen: 23
2001:13c7:7003::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882508 (0x1cb98c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Validity
Not Before: Mar 23 14:47:14 2021 GMT
Not After : Mar 24 14:47:14 2026 GMT
Subject: CN=3af524f7d7affd6a8a58862ebb77b7b9f0b61f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:e6:ce:8f:f8:54:06:52:ab:a3:8a:9d:9e:
c2:36:03:0f:05:e4:7f:70:a5:2b:6a:88:90:86:83:
bc:2f:64:66:65:71:14:63:ce:9b:35:a6:4e:4c:76:
5e:27:f3:54:2d:0a:3d:ea:38:59:5b:38:f5:60:c5:
26:e8:be:e3:b3:28:95:7e:ca:0a:89:29:81:f2:4a:
07:11:c3:25:4f:cf:0a:a1:e5:90:80:51:24:8e:c5:
5c:b6:f7:f0:7e:9c:e8:bc:cd:06:50:1e:63:f3:f0:
11:12:00:05:36:a7:d2:07:b4:be:88:c7:36:9a:40:
ea:50:44:e7:df:42:52:4c:7d:f7:3b:a3:a5:c3:5d:
90:d4:5a:4c:56:3f:aa:14:59:92:df:48:02:a1:a0:
3d:b1:9b:04:50:f0:96:59:ca:40:18:92:f5:84:4c:
6b:22:0d:1b:68:f5:ea:bb:f8:b8:ea:e1:cf:a1:8f:
a8:86:24:92:29:a4:55:37:bd:26:15:8b:01:83:62:
df:8a:6c:ff:82:15:d7:07:5c:44:b0:5d:3f:17:b2:
ff:c0:28:61:9f:30:e7:6a:cd:97:57:3b:e9:7d:ae:
be:96:bf:84:06:05:65:df:75:a6:0e:36:09:6f:72:
8c:3c:91:19:e2:6d:85:f8:01:42:0c:03:1c:18:45:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0D:FA:20:89:E7:51:77:2A:C7:D0:24:4E:7D:DB:B8:0A:84:46:B2
X509v3 Authority Key Identifier:
keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/3af524f7d7affd6a8a58862ebb77b7b9f0b61f4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.52.0/22
200.0.86.0/23
IPv6:
2001:13c7:7003::/48
Signature Algorithm: sha256WithRSAEncryption
60:14:bd:5d:f5:c4:7a:e4:4e:c8:93:ad:f7:61:b4:8d:6a:fa:
21:59:88:1b:71:25:42:c5:b6:fd:03:e1:31:7c:f1:f0:d2:be:
3a:4c:5a:38:24:dc:52:12:59:88:15:7c:94:2c:00:0f:c9:49:
a9:69:5c:f9:37:0c:d9:7e:94:c0:d8:ef:70:b9:20:0d:a7:15:
97:1a:87:2d:67:0a:0e:4b:33:ba:b5:9b:44:25:59:03:df:55:
53:bb:ba:d0:e0:b4:d2:5b:d9:6f:bd:4b:50:f4:16:0e:91:37:
cf:72:d3:9f:88:15:fb:3f:22:26:11:8b:c4:4d:1c:8f:45:ac:
e7:6b:07:15:6d:4e:89:0a:8e:df:56:57:ef:60:c2:57:b8:7a:
11:66:3d:22:2e:6f:bb:a2:fe:4f:ea:0f:cf:9d:ba:5d:53:c7:
6f:09:a3:3d:52:5c:19:20:c5:97:2a:dd:f2:cb:ea:e0:57:05:
b8:2b:a0:23:41:df:57:c2:4d:5f:18:ec:8a:2c:92:67:6d:4a:
b2:ff:2c:7f:85:87:32:5b:69:8a:8f:a2:b0:55:35:c7:44:60:
ff:45:bd:0d:1b:51:ac:29:a2:c6:0b:93:82:aa:23:13:cd:cd:
1f:dc:de:e4:26:fc:dd:80:58:da:1b:9c:d3:3e:1a:12:75:7f:
ba:ef:f7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org