Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/997697e250393fd85266cca6acb614a30ee5e3e9.roa
File: 997697e250393fd85266cca6acb614a30ee5e3e9.roa (raw, json)
Hash identifier: W2Bn2kExKHDrcINgNjbvATPtcx5NSFj4sUBjkmQkV1o=
Subject key identifier: 23:DE:18:98:6D:7D:52:CA:7D:AA:47:11:CA:B5:39:2B:BD:23:07:8E
Certificate issuer: /CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Certificate serial: 0CD869
Authority key identifier: 9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/997697e250393fd85266cca6acb614a30ee5e3e9.roa
Signing time: Wed 24 Mar 2021 14:45:56 +0000
ROA not before: Wed 24 Mar 2021 14:45:54 +0000
ROA not after: Tue 24 Mar 2026 14:45:54 +0000
asID: 28032
IP address blocks: 190.108.80.0/21 maxlen: 24
190.108.88.0/21 maxlen: 24
191.97.48.0/20 maxlen: 24
2800:650::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841833 (0xcd869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Validity
Not Before: Mar 24 14:45:54 2021 GMT
Not After : Mar 24 14:45:54 2026 GMT
Subject: CN=997697e250393fd85266cca6acb614a30ee5e3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5a:7e:1a:bc:85:42:85:88:0b:eb:4a:f3:47:
69:56:bb:d0:d1:ae:fe:be:3f:09:86:36:39:a3:ff:
b1:0b:2e:a8:ed:43:13:57:63:09:4d:7c:35:ee:58:
29:0b:e1:72:0e:17:b4:c0:ac:f9:70:40:de:8f:f6:
5c:4d:ab:a9:bd:e8:f6:00:62:2d:37:91:7a:c6:c1:
d4:16:fd:b1:aa:27:e3:1c:6c:7a:44:01:48:be:ec:
65:ee:b1:29:be:a4:0a:f5:d4:1f:23:3a:f6:4f:02:
58:10:48:80:55:9b:aa:08:6a:61:6e:5a:65:91:19:
fd:1f:4b:18:ac:f9:4f:1b:f8:02:e9:3a:75:2a:37:
d2:6b:29:0c:41:e3:de:ee:91:14:3c:d7:bd:55:08:
bc:09:9a:11:33:af:9d:0d:85:13:3e:8c:8e:11:65:
70:98:6f:22:e5:63:7c:7b:51:92:61:3a:50:aa:62:
7e:fe:f7:e2:58:4e:d5:df:4f:5b:6d:e0:06:f6:c1:
71:0f:ac:54:48:ed:f1:d0:f5:a9:9d:65:d2:a5:96:
b5:82:a0:35:71:45:9e:a1:77:fd:74:76:be:0c:ad:
a1:9d:d6:02:cf:a7:05:45:ee:9d:17:4b:49:36:d9:
9b:03:8c:e9:cc:a1:f8:c7:d5:90:8d:6e:75:e4:d3:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DE:18:98:6D:7D:52:CA:7D:AA:47:11:CA:B5:39:2B:BD:23:07:8E
X509v3 Authority Key Identifier:
keyid:9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/997697e250393fd85266cca6acb614a30ee5e3e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a9b9d9319d2010f9907e00e3e1940885c59db093.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.108.80.0/20
191.97.48.0/20
IPv6:
2800:650::/32
Signature Algorithm: sha256WithRSAEncryption
72:8e:06:2a:5d:91:83:2f:1a:58:16:41:fe:7b:ea:59:7c:bd:
b5:1d:a8:4a:cb:3f:58:eb:ca:cb:a2:3e:72:cc:17:e7:aa:70:
25:83:7a:fb:df:e9:15:83:ae:66:99:c3:20:65:04:6a:5a:3b:
2f:c4:cc:4a:af:5e:b4:1e:c6:de:5c:0a:41:ae:94:f5:a7:a3:
a6:4d:f4:77:08:25:41:99:ef:cf:b0:03:9d:7b:02:b8:3c:7e:
e4:51:12:d5:47:a1:bf:fd:d0:3b:9f:8e:57:8f:a8:a0:65:5e:
96:be:5e:d9:7a:c5:be:90:ea:ba:d6:dd:a1:9a:1d:b3:27:5c:
7a:46:26:04:81:09:34:d4:ee:28:f0:f1:c2:38:0e:b5:b5:5d:
f3:70:60:a2:5f:52:b4:58:d0:26:52:a6:db:b5:c6:46:6f:af:
78:82:80:56:1c:3c:03:80:70:b6:e2:d0:bc:d6:b0:a2:cd:2a:
4b:74:37:f3:b6:68:f9:dd:b4:8a:ea:90:94:ce:2f:7c:a0:53:
f7:20:b2:4b:54:41:91:a2:16:9a:79:e5:6b:1d:18:bd:ef:d2:
d1:c2:24:94:3d:99:37:2a:09:ad:5d:f5:73:a6:a7:4c:16:c3:
39:b8:b6:86:f4:10:89:f6:ae:21:aa:a4:e5:36:32:1f:75:e1:
b1:c4:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org