Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/cbba61b62e2b1863eefc0ace636c98dadcb69f73.roa
File: cbba61b62e2b1863eefc0ace636c98dadcb69f73.roa (raw, json)
Hash identifier: wrC6mE+71ww6Opn3f1i4OQ1L0PaQnTK76bZ1tqnwBgs=
Subject key identifier: 2A:43:FB:2E:A5:59:E8:A5:9D:D2:EE:F7:9B:A6:A3:2B:96:F5:72:E2
Certificate issuer: /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial: 0E1AC1
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/cbba61b62e2b1863eefc0ace636c98dadcb69f73.roa
Signing time: Wed 24 Mar 2021 14:31:36 +0000
ROA not before: Wed 24 Mar 2021 14:31:34 +0000
ROA not after: Tue 24 Mar 2026 14:31:34 +0000
asID: 23456
IP address blocks: 190.2.17.0/24 maxlen: 24
190.210.206.0/24 maxlen: 24
200.68.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924353 (0xe1ac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Validity
Not Before: Mar 24 14:31:34 2021 GMT
Not After : Mar 24 14:31:34 2026 GMT
Subject: CN=cbba61b62e2b1863eefc0ace636c98dadcb69f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:d5:40:3d:96:0d:23:5a:b1:9f:61:37:aa:
77:36:70:a1:97:8c:2c:2e:30:e3:45:cd:a2:d9:1b:
3a:41:6c:bb:57:11:bf:e9:eb:cb:21:0b:85:70:39:
f1:5d:e8:0e:cf:7b:81:41:c0:c6:33:76:2f:5f:55:
ba:06:c2:db:87:fb:7f:e3:72:6d:9c:2f:1a:1c:f3:
d8:37:83:a7:e4:f0:8e:a5:31:16:6f:26:a9:13:39:
ac:ca:6e:c8:21:26:50:d8:b4:77:bb:13:89:85:2f:
7b:2a:e8:57:70:fd:df:31:fd:e9:3a:fa:26:a4:33:
19:70:6e:9d:a1:c6:e0:5d:63:35:8e:37:f1:65:7d:
b6:e2:21:d9:34:5a:5a:e6:37:f5:5b:76:97:ff:6d:
26:11:be:02:af:52:54:90:a7:9a:c8:d7:48:9f:10:
b3:12:dc:55:d4:a4:62:8c:94:4b:b1:19:ce:87:23:
63:6e:34:e2:83:fc:a1:85:da:6e:07:4d:81:dd:38:
b7:49:2f:01:0c:6e:5f:87:bf:fc:4c:4d:a1:a8:72:
cc:ef:25:c1:c4:a7:f1:3d:fb:65:94:e8:db:68:2a:
79:0c:c2:e7:c7:2d:6f:19:58:69:46:67:54:3b:0c:
f1:19:b3:c5:68:d5:3f:29:37:30:c6:71:66:6c:0a:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:43:FB:2E:A5:59:E8:A5:9D:D2:EE:F7:9B:A6:A3:2B:96:F5:72:E2
X509v3 Authority Key Identifier:
keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/cbba61b62e2b1863eefc0ace636c98dadcb69f73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.2.17.0/24
190.210.206.0/24
200.68.114.0/24
Signature Algorithm: sha256WithRSAEncryption
68:2e:27:5a:a3:f4:03:ae:89:5a:48:7f:04:51:3f:6d:ba:35:
ad:6c:d6:21:50:2f:7e:9e:05:a1:13:f0:17:bc:48:15:fa:a5:
22:26:0f:f4:d1:40:5e:ee:53:a1:b5:16:a1:4c:99:d8:d1:28:
5e:b0:fc:3d:76:0d:72:99:8f:95:1d:11:e4:e2:2a:8f:ee:da:
9a:56:7d:5d:9d:e5:45:cf:94:60:40:af:c8:79:24:39:88:a3:
b4:db:d5:88:fe:ae:69:1e:34:12:41:36:fb:11:68:7a:00:b3:
48:d0:69:32:31:29:b1:88:e8:98:2d:f1:f7:38:8e:8a:08:9b:
08:12:a2:71:af:67:bc:fb:99:5d:82:79:87:61:a6:6c:db:c1:
2a:fe:3a:56:ad:c9:d6:94:ee:aa:b7:29:de:3b:0a:36:f9:8e:
97:58:1a:f2:e1:1b:d1:ef:6a:f5:98:fa:fe:48:da:7c:03:ec:
f5:de:47:b5:83:52:7c:4a:3d:9d:9b:b7:46:77:37:b4:17:f9:
2f:ec:40:01:00:61:29:9b:72:6a:80:0b:04:75:b7:89:80:71:
32:21:67:89:c2:0a:77:70:53:06:6f:31:65:eb:16:e6:42:1b:
54:c2:ee:a7:0e:d1:e1:b1:56:54:b1:be:3b:b8:fb:8f:54:90:
0e:31:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org