Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/fb688feb42696cca18808552e11e2da4dc04e3c1.roa
File: fb688feb42696cca18808552e11e2da4dc04e3c1.roa (raw, json)
Hash identifier: aDB/nvDJbzJJ5C7djyFokNmOmZ6gxYCevqUrl32pi5Y=
Subject key identifier: 80:5E:80:5D:C8:57:38:AD:46:5C:7A:89:17:42:BE:F4:3A:CF:E2:C0
Certificate issuer: /CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Certificate serial: 1F9398
Authority key identifier: 0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/fb688feb42696cca18808552e11e2da4dc04e3c1.roa
Signing time: Fri 24 Mar 2023 18:36:27 +0000
ROA not before: Mon 22 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 262589
IP address blocks: 190.211.160.0/24 maxlen: 24
190.211.161.0/24 maxlen: 24
190.211.162.0/24 maxlen: 24
190.211.163.0/24 maxlen: 24
190.211.164.0/24 maxlen: 24
190.211.165.0/24 maxlen: 24
190.211.166.0/24 maxlen: 24
190.211.167.0/24 maxlen: 24
190.211.168.0/24 maxlen: 24
190.211.169.0/24 maxlen: 24
190.211.172.0/24 maxlen: 24
190.211.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2069400 (0x1f9398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Validity
Not Before: Mar 22 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=fb688feb42696cca18808552e11e2da4dc04e3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8f:ed:c4:77:2f:a5:0d:59:97:53:32:3d:1b:
c6:91:95:52:bc:ce:66:6d:4c:b1:c7:df:71:8e:85:
78:55:f7:9a:b7:54:58:c5:9c:58:d8:bf:15:db:cf:
1a:b5:0a:ab:eb:4d:1a:1d:01:72:35:38:34:9f:63:
fd:06:04:f7:b1:a3:a0:08:07:3d:fc:36:3e:88:56:
83:37:6e:7a:55:63:9a:6c:27:e0:aa:db:62:41:79:
06:0e:0c:28:c0:0a:20:20:5c:3f:6d:1c:6f:89:4a:
7a:87:e9:b5:07:44:6d:f7:b1:53:65:1d:e9:48:c6:
7d:5e:38:8a:c6:ca:e0:84:79:93:fe:74:af:70:ee:
f2:a9:62:9f:8b:fc:fd:69:46:6b:ea:4c:b4:e3:7d:
71:42:8c:28:4d:3c:49:a6:ee:be:c9:db:e7:37:04:
0b:49:d9:a7:20:d1:c7:41:a7:af:97:bb:c4:3b:2f:
3c:98:a8:b5:95:76:67:80:28:f1:20:3f:00:a8:01:
fe:fc:8d:83:e4:d1:5d:d2:88:be:25:dd:1c:12:c1:
91:3c:71:cb:1a:22:92:44:95:1e:6f:89:da:7e:1b:
b7:7f:88:b2:a1:a7:a6:6f:7c:2e:4d:d0:a7:2e:14:
b0:15:97:e4:cc:ee:29:b3:10:41:86:89:4e:75:cb:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5E:80:5D:C8:57:38:AD:46:5C:7A:89:17:42:BE:F4:3A:CF:E2:C0
X509v3 Authority Key Identifier:
keyid:0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/fb688feb42696cca18808552e11e2da4dc04e3c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/44abde35adbcf04fb85f8b032b43e458648b74b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.211.160.0-190.211.169.255
190.211.172.0/24
190.211.175.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b7:1b:be:b8:1e:80:fb:ed:9a:08:49:b3:03:fe:32:38:fb:
92:66:2b:06:d6:ce:66:8f:66:2b:fc:e7:fa:bf:19:1e:80:52:
0f:6c:cc:88:39:d8:f9:0c:24:91:d3:e8:f3:d0:89:e4:7d:55:
e0:5f:5a:f5:86:91:4b:c7:a3:14:fd:af:64:37:31:61:06:a7:
3a:09:c8:75:64:49:df:5d:b4:66:88:9d:8a:d5:7f:be:f4:30:
41:95:29:7a:83:d0:ea:fa:99:9d:94:5a:88:73:72:2d:37:7a:
21:d7:c5:e5:78:20:2c:a5:95:96:57:5e:2d:8e:f2:a6:52:26:
ae:81:9a:4a:92:8d:c3:99:4b:23:ed:f4:c2:73:d1:ba:e3:af:
fb:e5:43:e3:f4:c6:1e:b7:70:6b:07:d5:9f:2e:62:98:63:ca:
46:00:ba:9a:35:78:cd:52:87:c1:59:7e:d0:78:bb:46:74:e8:
44:de:4b:62:0a:89:94:3d:07:6c:8a:0b:60:1a:d6:f7:4f:b6:
44:b7:e3:b3:d3:7b:d7:58:59:d8:8a:e7:d8:0f:4c:3c:68:08:
5b:7b:e9:21:e1:8b:57:bb:72:8b:e0:04:d8:ad:a9:01:cf:8a:
6e:82:ee:00:2b:2e:7b:fe:9c:97:f2:b7:b2:2f:4a:94:be:a4:
49:43:44:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 19:41:09 2023 by rpki-client on console-ams.rpki-client.org