Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/21ffeb419977ffefbf01ac4f39098b20256e3040.roa
File: 21ffeb419977ffefbf01ac4f39098b20256e3040.roa (raw, json)
Hash identifier: XUmttOGGap5tKGpIhv2PC70lVZkz/xyQQLciz/efiQc=
Subject key identifier: 38:FA:35:A3:9E:43:E1:D3:8B:71:87:FD:F4:40:74:8C:8D:8D:40:20
Certificate issuer: /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial: 1E852A
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/21ffeb419977ffefbf01ac4f39098b20256e3040.roa
Signing time: Fri 27 Jan 2023 13:07:33 +0000
ROA not before: Thu 26 Jan 2023 13:06:55 +0000
ROA not after: Thu 27 Jan 2028 13:06:55 +0000
asID: 27730
IP address blocks: 190.210.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000170 (0x1e852a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Validity
Not Before: Jan 26 13:06:55 2023 GMT
Not After : Jan 27 13:06:55 2028 GMT
Subject: CN=21ffeb419977ffefbf01ac4f39098b20256e3040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:09:ff:dc:ee:4c:01:bc:e2:8f:d8:39:61:
b3:82:40:04:42:d4:33:35:b9:6c:c2:36:4d:14:a2:
63:56:b4:3f:8a:ab:13:58:e3:7f:5c:fb:b1:68:82:
ce:33:48:07:70:bf:ed:61:9e:9a:e5:2b:25:a8:3c:
5c:95:e8:97:fa:be:95:10:26:da:8d:20:1f:01:26:
8e:5f:2c:ea:94:f4:cb:5f:ca:55:cb:3f:1f:fc:74:
b9:fd:b1:e4:2f:2d:08:c7:74:3d:eb:63:ff:47:58:
5e:c8:98:2a:97:f4:f5:6d:7e:c1:90:b8:00:f2:b5:
32:ba:e5:45:ae:03:f0:74:f6:04:f0:65:b9:8f:7d:
74:d1:4f:fd:2a:53:e9:5d:43:74:ea:95:71:0e:a3:
88:6a:9b:7f:85:d2:9c:45:cf:52:8c:a4:8c:b6:6e:
c7:51:05:13:50:fa:4f:d8:db:18:e1:af:03:65:1a:
df:92:c8:ae:29:f7:20:68:f2:eb:e3:17:bd:a9:16:
ac:49:76:8c:f1:d3:9c:3b:e5:ee:cd:2c:33:48:7d:
37:d9:9a:99:8a:7d:b6:0d:4d:82:dc:46:dc:0c:05:
0f:d7:71:00:35:f3:e8:22:d4:3e:ad:54:0a:11:b1:
29:65:89:27:bd:e5:77:4a:ec:74:c0:f6:9e:81:fa:
ab:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FA:35:A3:9E:43:E1:D3:8B:71:87:FD:F4:40:74:8C:8D:8D:40:20
X509v3 Authority Key Identifier:
keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/21ffeb419977ffefbf01ac4f39098b20256e3040.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.210.220.0/24
Signature Algorithm: sha256WithRSAEncryption
10:2f:72:8b:a0:92:67:a3:45:c2:c8:51:59:fe:dc:53:4c:ff:
c1:45:4f:c1:6e:63:77:32:f5:45:55:08:05:24:ac:8b:62:77:
80:c1:55:c3:33:b6:27:f2:57:8f:52:55:59:67:a0:b9:74:c4:
6f:b0:00:78:d3:07:6d:12:58:26:04:d5:6c:02:93:02:b9:0c:
4c:f2:df:61:3a:14:0c:1b:15:f2:09:e1:1e:6a:99:8f:16:d6:
91:10:6a:24:80:2c:6c:f8:78:ae:8a:9b:22:ea:35:b4:2a:96:
2e:65:52:2a:68:68:77:67:67:32:2c:bc:c7:b0:a2:15:02:e9:
28:54:25:ad:a5:3f:98:ea:70:66:80:4d:5c:a3:8c:98:5e:a3:
d0:45:c8:b7:54:11:7b:a0:db:ff:0f:0f:94:37:88:e2:63:c4:
97:42:14:a2:75:e7:6b:ef:c9:4d:a6:49:3b:17:66:4f:93:ec:
ca:25:20:f6:03:c2:fd:56:28:da:e9:db:6a:7e:b4:ff:02:d3:
e7:99:73:d5:08:c3:9d:91:68:a3:39:aa:f8:ca:9e:7e:e7:de:
6f:40:f7:7d:bb:30:05:3c:3c:c9:23:9f:1a:8f:a2:bd:96:73:
ba:8c:ae:cf:c2:ed:a7:1c:a3:2a:42:a7:f2:b2:3e:59:69:13:
8c:97:66:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org