Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/baacf0a620e4b7acff7e1190d21725159fc0b56c.roa
File: baacf0a620e4b7acff7e1190d21725159fc0b56c.roa (raw, json)
Hash identifier: v+1af5Uy+NJcoNFN5MHMU665AMg+IlKRRlzTonW3+yA=
Subject key identifier: E0:28:91:7B:41:71:D1:84:B2:C6:F8:10:B0:A7:66:41:1B:31:20:E6
Certificate issuer: /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial: 0DAB4C
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/baacf0a620e4b7acff7e1190d21725159fc0b56c.roa
Signing time: Wed 24 Mar 2021 14:37:07 +0000
ROA not before: Wed 24 Mar 2021 14:37:05 +0000
ROA not after: Tue 24 Mar 2026 14:37:05 +0000
asID: 52423
IP address blocks: 190.112.220.0/23 maxlen: 23
190.112.222.0/24 maxlen: 24
190.112.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895820 (0xdab4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Validity
Not Before: Mar 24 14:37:05 2021 GMT
Not After : Mar 24 14:37:05 2026 GMT
Subject: CN=baacf0a620e4b7acff7e1190d21725159fc0b56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:b9:2d:96:e8:e2:f5:c5:a2:31:fd:38:c3:
e5:5d:e1:b9:82:34:86:5a:91:5f:d0:ed:d8:4e:25:
f1:db:3a:14:22:8c:29:b9:9d:6b:e4:08:f5:51:5a:
97:02:41:4a:e5:21:3e:0b:36:67:76:2c:b4:cb:be:
10:8a:e4:af:82:1f:6a:83:78:64:14:a8:af:8b:15:
02:ed:fe:82:bb:e9:27:c2:09:bf:34:ab:8b:2a:de:
32:6f:7b:35:02:fc:3a:84:fe:f4:ff:a7:97:95:39:
90:51:95:29:9c:f2:2f:7c:b2:9a:e0:6f:58:cb:09:
e4:b7:0e:3c:c6:fb:67:2d:26:a5:ac:a4:71:b0:12:
87:52:7d:7d:d6:c6:5c:6b:a7:f9:54:c9:23:70:8d:
b9:e7:c9:79:df:dd:22:2a:ae:9e:a6:a3:28:75:31:
39:da:21:c2:3c:26:80:52:91:1c:e8:c2:c6:39:1f:
15:a9:7c:0e:20:7a:a5:16:c2:47:5d:b3:f3:de:76:
a2:74:dc:5c:2d:b9:fe:59:68:ac:a7:8b:c8:ef:81:
59:fe:13:4e:9a:4d:51:8a:21:83:cc:1e:50:73:d6:
9f:1c:89:d1:e9:45:b0:d4:6d:14:f7:a0:66:d1:0b:
b5:0d:0c:54:ce:52:1a:0f:13:47:c7:b0:90:21:e4:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:28:91:7B:41:71:D1:84:B2:C6:F8:10:B0:A7:66:41:1B:31:20:E6
X509v3 Authority Key Identifier:
keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/baacf0a620e4b7acff7e1190d21725159fc0b56c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:0d:25:33:62:1c:20:77:c5:65:d9:df:93:dd:e0:a2:09:95:
13:82:80:31:9f:c6:90:42:9a:38:fb:af:6f:aa:52:f5:4a:34:
5f:0b:f2:ba:a5:cd:55:04:46:95:17:d2:1f:3f:ba:89:ba:c2:
49:92:61:72:d8:78:01:c4:7d:06:8a:1a:7d:00:c4:72:0d:fc:
9c:45:0f:78:bd:e0:c0:b7:17:da:36:b9:a5:16:a8:af:e3:b1:
f1:d9:4d:4b:cb:85:cd:a7:2d:e3:1d:9a:3d:53:71:ff:c2:1e:
f2:a2:77:10:c7:31:6b:c4:0d:9f:df:b8:a6:22:f2:ef:16:45:
44:f4:6a:f0:1a:fc:aa:62:11:b1:e0:c2:d0:a0:2d:02:76:5e:
da:23:8b:01:48:a3:cc:cd:b3:86:7f:ad:d6:88:8b:8a:83:37:
7c:48:6d:7b:24:86:0a:78:98:16:e1:a0:df:da:d6:df:b0:aa:
2f:6a:f5:de:98:b3:f0:4b:ab:0c:7f:d5:5d:30:cd:43:02:85:
f7:ac:e0:c7:a7:63:e6:f9:6e:da:4b:52:c7:3b:b9:3c:6c:ff:
9a:39:ca:a9:48:00:7d:c7:41:fb:ae:51:dd:c5:42:22:2a:15:
a6:69:6c:0c:cc:cf:a9:61:87:e8:b5:da:13:d9:7d:34:c2:92:
2a:1a:62:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 20:18:15 2023 by rpki-client on console-fra.rpki-client.org