Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/015663a7289d9c7fdd4286fe2ec4fa0583568302.roa
File: 015663a7289d9c7fdd4286fe2ec4fa0583568302.roa (raw, json)
Hash identifier: g4y7v2Mnl4Pz348qlCYuVeWnPYFQ7DhKWeeiFRcrGOo=
Subject key identifier: 67:B7:5F:1D:1B:DE:54:D7:87:55:69:17:8D:46:85:28:99:D6:BA:D0
Certificate issuer: /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial: 0E211D
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/015663a7289d9c7fdd4286fe2ec4fa0583568302.roa
Signing time: Wed 24 Mar 2021 14:31:36 +0000
ROA not before: Wed 24 Mar 2021 14:31:34 +0000
ROA not after: Tue 24 Mar 2026 14:31:34 +0000
asID: 264638
IP address blocks: 190.2.17.0/24 maxlen: 24
190.210.206.0/24 maxlen: 24
200.68.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925981 (0xe211d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Validity
Not Before: Mar 24 14:31:34 2021 GMT
Not After : Mar 24 14:31:34 2026 GMT
Subject: CN=015663a7289d9c7fdd4286fe2ec4fa0583568302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:63:10:bd:3d:bb:d8:b9:e1:36:af:c1:66:2d:
3b:07:7a:fe:ed:bc:0a:b7:e0:07:75:39:f4:97:93:
8b:77:54:13:6a:9f:c9:d2:8b:98:6b:60:8e:f7:8b:
9f:5e:a8:a7:c4:2d:3c:b6:e4:b9:62:f5:79:2e:86:
c6:ca:f1:6e:dc:72:1c:a1:7c:8c:fc:3d:e4:45:4c:
42:dc:19:c9:be:1c:59:ad:c4:b6:12:42:6f:ed:e8:
1b:a1:24:a2:53:23:0c:d5:82:c5:89:b2:09:d1:78:
a4:55:f1:37:ec:7f:a4:ff:03:47:48:4e:39:0f:ed:
8d:94:14:49:f9:92:73:d1:71:8d:84:3d:20:50:8b:
40:5b:d6:44:5e:f3:14:68:42:a0:55:7f:36:c0:d8:
2d:87:21:98:2d:e4:05:fd:0a:8d:d8:71:4f:a7:e3:
4b:76:dc:64:3d:c6:6b:89:27:27:6c:23:e7:34:f3:
af:52:22:b7:4c:20:77:dc:1c:09:7d:37:4b:13:de:
11:0c:2a:7c:a4:23:04:e1:73:8a:3f:fb:ce:35:d7:
b6:f9:a1:c6:4b:64:9f:6e:00:18:8e:c9:98:9c:23:
51:af:42:3e:6d:a7:95:e7:06:94:b6:3a:93:74:e4:
d5:0a:1d:69:c6:d9:39:ea:3a:2f:99:2f:f8:7a:f9:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B7:5F:1D:1B:DE:54:D7:87:55:69:17:8D:46:85:28:99:D6:BA:D0
X509v3 Authority Key Identifier:
keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/015663a7289d9c7fdd4286fe2ec4fa0583568302.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.2.17.0/24
190.210.206.0/24
200.68.114.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c0:e4:c2:a6:74:bb:c3:7d:3a:74:6f:90:3f:e7:dd:72:03:
2f:df:2a:72:8f:4a:15:5f:48:82:ba:f8:4a:52:c3:be:e3:b8:
04:7d:af:b5:af:8e:83:87:5b:2c:ff:ac:25:cf:c7:82:b1:03:
13:95:53:30:ba:d8:bf:65:9e:0a:e9:2a:56:9e:38:d3:2c:4b:
02:24:b8:aa:ef:c8:92:1e:6e:a8:c4:7f:2e:0e:c0:d3:96:4b:
f9:50:83:e0:63:50:11:aa:73:b0:b6:85:85:40:48:58:29:70:
41:84:5c:79:09:a7:39:bc:eb:e4:43:e0:57:91:1b:c2:ff:85:
1b:e7:ec:65:c8:0f:6c:a5:a5:46:6f:5a:6c:3f:a3:b4:a8:b1:
ba:db:e1:b3:b9:e0:83:c2:06:a0:50:1f:e5:cc:3c:27:56:e6:
15:77:f7:39:d3:0a:bc:3e:dc:bd:16:fe:05:5e:6b:ce:b7:58:
08:1d:05:03:29:26:70:2f:a3:a6:8f:92:d9:14:be:5e:41:3d:
34:a8:e8:04:41:62:53:6d:de:fc:49:0c:0f:6d:e3:97:ca:60:
55:d9:ba:4c:80:70:86:cc:9e:b9:ff:12:89:0d:f0:b6:5d:df:
3d:9c:d0:b6:45:e4:6d:c4:a3:af:c4:a2:c8:c8:47:16:07:10:
1b:98:c0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org