Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/f444d6d66fdad6693a493a9e33c466135033fb5e.roa
File: f444d6d66fdad6693a493a9e33c466135033fb5e.roa (raw, json)
Hash identifier: 1bBxIA72D+Qf0TLDEDSwz5TzlgiVpUk9l3YUMWJuw7Q=
Subject key identifier: F3:10:07:67:25:AA:71:51:C7:98:04:DF:BE:8F:AA:0F:23:95:E7:99
Certificate issuer: /CN=63046ffca1186784d420944b2f52a6525f2a9b8d
Certificate serial: 2175AE
Authority key identifier: 8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/f444d6d66fdad6693a493a9e33c466135033fb5e.roa
Signing time: Sat 10 Jun 2023 01:39:22 +0000
ROA not before: Fri 09 Jun 2023 01:39:21 +0000
ROA not after: Tue 10 Jun 2025 01:39:21 +0000
asID: 22541
IP address blocks: 200.75.160.0/20 maxlen: 24
190.14.64.0/18 maxlen: 24
2803:7680::/32 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2192814 (0x2175ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63046ffca1186784d420944b2f52a6525f2a9b8d
Validity
Not Before: Jun 9 01:39:21 2023 GMT
Not After : Jun 10 01:39:21 2025 GMT
Subject: CN=f444d6d66fdad6693a493a9e33c466135033fb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:d8:93:53:f7:5c:06:35:36:69:22:66:7c:
98:25:c7:68:31:7c:83:e9:14:9c:49:92:28:f1:dc:
26:0a:08:17:73:51:3f:4b:2e:d1:b5:d8:28:c8:66:
ef:67:92:e7:f8:78:ec:7d:d4:dd:8a:e7:ab:3c:18:
d8:da:8f:6b:84:9b:b1:ce:84:10:04:20:10:d7:29:
aa:4c:17:e8:a8:68:0e:67:17:c8:c7:b8:d5:d5:8a:
0d:4a:45:c4:f6:42:a9:bd:a6:55:7b:85:f8:88:3a:
e6:44:da:77:0d:44:73:ce:4d:ed:0b:63:89:f8:d6:
83:3f:92:08:6c:c9:42:c5:95:39:d9:37:54:f9:e7:
6d:40:0b:c7:b0:ba:8b:62:4e:0e:45:a9:83:5a:85:
40:af:a7:20:8c:45:a4:a0:a3:e6:00:d1:fa:51:12:
5f:3f:1a:b5:c1:6b:dc:f9:30:60:aa:eb:41:a9:22:
7d:f1:fa:e2:71:bb:80:22:22:3e:f6:48:84:e2:0a:
32:1f:5a:1d:54:d3:64:35:cb:15:9b:a1:46:b9:3b:
c5:b1:f2:5b:3c:45:e2:5e:ed:59:ec:25:85:6e:23:
ba:63:29:a0:82:89:56:31:8f:55:5b:34:95:53:88:
9e:a4:fa:9e:ff:7f:b5:f1:90:1b:18:ce:70:e6:dc:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:10:07:67:25:AA:71:51:C7:98:04:DF:BE:8F:AA:0F:23:95:E7:99
X509v3 Authority Key Identifier:
keyid:8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/f444d6d66fdad6693a493a9e33c466135033fb5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/63046ffca1186784d420944b2f52a6525f2a9b8d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.14.64.0/18
200.75.160.0/20
IPv6:
2803:7680::/32
Signature Algorithm: sha256WithRSAEncryption
7d:c3:d2:0c:3b:02:93:10:89:24:56:31:57:7c:8c:44:13:62:
ae:26:8b:16:44:46:b2:75:c6:67:1e:8b:96:3e:d7:39:a3:4a:
80:a7:f0:73:32:76:6c:58:06:b9:e2:7d:f3:85:1f:31:8d:ae:
54:a3:42:1b:0b:72:2f:f7:25:37:40:e1:57:99:41:54:97:72:
21:6c:f5:ae:87:db:0f:4e:93:03:58:03:95:bf:80:df:63:42:
f7:70:cf:43:f7:49:7b:a9:23:e8:5a:44:3d:e6:b6:0a:77:ca:
53:d8:81:cb:ef:a1:e3:28:51:99:29:ab:87:c4:21:e1:5b:17:
e4:91:73:e1:94:3e:32:6e:2d:2c:bf:e9:64:0d:da:84:8a:ff:
15:c4:31:ec:41:5e:4e:9e:9d:b0:49:0b:4a:7b:5e:1f:7a:34:
50:2a:5a:90:bb:f6:59:35:c6:60:02:fe:34:3b:83:ba:0f:20:
9b:1f:98:ca:5b:0b:68:2c:d5:36:56:3b:b7:d5:21:12:6f:b3:
df:98:e8:51:ac:70:71:5b:a7:8c:48:0f:a8:08:46:68:01:8c:
45:3a:75:dc:8a:e1:3e:c5:ff:23:0f:72:71:ad:fb:80:19:e5:
e3:64:e2:e9:b5:fc:53:f8:4b:6b:38:95:a9:77:db:80:ef:6f:
af:96:37:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 23:22:52 2023 by rpki-client on console-ams.rpki-client.org