Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/4cf634c4942b692c60eea3f0acf755dbf774f32e.roa
File: 4cf634c4942b692c60eea3f0acf755dbf774f32e.roa (raw, json)
Hash identifier: MHyfyDLPwkxfRgblzByvM7Tq1b0mzeF3Q6XBnwV9ZJ0=
Subject key identifier: EC:F5:4E:C2:72:A5:F8:A1:62:0C:EC:B2:15:B1:52:66:8F:20:AF:FB
Certificate issuer: /CN=ea7028769533b4ca1a1bb8492dcfde9795a18ca2
Certificate serial: 0CCFE8
Authority key identifier: 83:82:FD:78:F2:44:81:2B:A0:DB:7C:4E:FE:41:D2:1E:DA:BA:17:A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/4cf634c4942b692c60eea3f0acf755dbf774f32e.roa
Signing time: Wed 24 Mar 2021 14:29:21 +0000
ROA not before: Wed 24 Mar 2021 14:29:21 +0000
ROA not after: Tue 24 Mar 2026 14:29:21 +0000
asID: 27940
IP address blocks: 131.100.100.0/22 maxlen: 24
190.122.64.0/20 maxlen: 24
200.110.192.0/21 maxlen: 24
2803:4b80::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 839656 (0xccfe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7028769533b4ca1a1bb8492dcfde9795a18ca2
Validity
Not Before: Mar 24 14:29:21 2021 GMT
Not After : Mar 24 14:29:21 2026 GMT
Subject: CN=4cf634c4942b692c60eea3f0acf755dbf774f32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:57:f0:22:6b:98:15:1e:d0:d9:b2:fd:6c:b7:
f8:ec:b7:94:88:e4:88:b2:e9:85:4e:5a:1b:32:20:
2a:6a:7b:21:3e:77:d6:14:7d:dd:de:65:ee:ab:ca:
60:30:95:be:f7:b5:e1:20:7a:d1:9b:3d:be:d8:ad:
53:db:b5:8f:ac:f8:30:9a:66:da:cc:10:de:cc:1c:
eb:2b:3e:c9:c8:79:bb:58:bb:2c:8c:00:bf:17:6d:
74:62:b2:93:9f:9c:f6:e0:93:dc:4e:61:b9:8c:cf:
7f:8a:97:bb:77:7a:f5:b9:d2:0f:1d:4c:0f:b7:82:
76:e1:2c:07:4d:ba:f2:50:23:da:d3:88:a7:d7:ea:
a1:22:fb:2b:5f:a9:8d:b0:85:03:f3:cd:29:38:e1:
78:a6:ac:70:e6:52:28:88:9a:ce:d9:02:7e:60:f9:
9f:e4:aa:76:fd:0f:7b:cc:3a:f0:09:df:34:5e:69:
8a:6d:18:aa:ea:cc:ca:76:90:d9:1a:7e:1b:03:3b:
a4:39:05:ac:81:c6:c1:eb:a1:72:0e:06:db:a8:6e:
f8:43:de:8e:1b:7f:a1:d9:0d:d0:18:98:05:3e:fe:
de:d3:98:4d:1a:ce:82:ac:8a:3a:75:95:7a:c8:85:
3f:ae:6e:5c:9c:94:c4:7e:5c:f9:cb:99:64:5c:a5:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F5:4E:C2:72:A5:F8:A1:62:0C:EC:B2:15:B1:52:66:8F:20:AF:FB
X509v3 Authority Key Identifier:
keyid:83:82:FD:78:F2:44:81:2B:A0:DB:7C:4E:FE:41:D2:1E:DA:BA:17:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/4cf634c4942b692c60eea3f0acf755dbf774f32e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.100.0/22
190.122.64.0/20
200.110.192.0/21
IPv6:
2803:4b80::/32
Signature Algorithm: sha256WithRSAEncryption
7c:f7:86:86:82:00:af:b9:4e:f1:98:00:5c:81:1f:df:7b:f1:
76:23:32:e0:d2:2e:66:e5:94:1a:cc:a6:2e:25:9b:e1:bd:ca:
2c:8b:57:ec:9e:11:dc:49:3e:e4:47:e7:78:90:bb:48:82:98:
d4:ec:dd:64:c0:34:bd:04:ef:9d:7a:10:17:3b:b9:3e:6b:02:
d2:22:1a:cb:e2:03:99:98:e5:bd:2f:5d:62:21:5d:da:b7:b2:
74:9e:56:86:ea:aa:a1:de:c9:45:39:f2:d4:2a:24:ec:9d:2b:
4b:b7:b6:2e:f2:d5:10:68:94:60:68:a3:ce:a4:37:29:60:38:
9a:c4:97:12:06:1d:d6:ad:08:69:78:bf:c0:57:69:ee:2d:74:
a2:29:43:6d:61:ba:d7:85:e2:3b:0b:47:90:4d:05:49:0d:63:
24:d0:89:ec:8e:2f:8f:fa:a0:5e:62:d1:ac:58:75:4b:05:6f:
cb:60:a4:90:8c:5d:92:c4:d7:38:e6:d8:96:4e:08:91:82:10:
47:bb:09:6c:e6:3e:96:c7:93:2c:4b:48:ef:58:c3:d0:c1:89:
e9:fb:f4:2b:22:bb:7b:ae:3c:88:08:57:d5:64:0a:82:6a:18:
70:2f:7a:40:59:7d:a0:cf:3a:1f:7e:4b:89:2f:e2:09:76:12:
88:21:52:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org