Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74ff42ae-66b9-4626-861f-7be7373ed857/91f3bbfde0a4f011b74514c7055a66e6e2d7da39.roa
File: 91f3bbfde0a4f011b74514c7055a66e6e2d7da39.roa (raw, json)
Hash identifier: E/XvsM9WQCiHKWmMiWmIVbspVi3pOEILM4gwFJknBfA=
Subject key identifier: 0C:B3:0B:04:73:91:5F:F0:7D:C1:90:B2:D8:9E:61:D2:D8:53:71:79
Certificate issuer: /CN=feee3e454749ca0f5cea578d7d1753869e8123c1
Certificate serial: 5A5D
Authority key identifier: D9:DA:B0:56:77:76:D3:CF:CE:1B:3C:6C:D3:D8:91:A8:C2:59:BE:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/feee3e454749ca0f5cea578d7d1753869e8123c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/74ff42ae-66b9-4626-861f-7be7373ed857/91f3bbfde0a4f011b74514c7055a66e6e2d7da39.roa
Signing time: Fri 19 Nov 2021 19:03:05 +0000
ROA not before: Fri 19 Nov 2021 02:00:00 +0000
ROA not after: Sun 19 Nov 2023 02:00:00 +0000
asID: 16531
IP address blocks: 131.0.236.0/22 maxlen: 24
200.52.128.0/20 maxlen: 24
200.76.96.0/20 maxlen: 24
200.76.112.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23133 (0x5a5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feee3e454749ca0f5cea578d7d1753869e8123c1
Validity
Not Before: Nov 19 02:00:00 2021 GMT
Not After : Nov 19 02:00:00 2023 GMT
Subject: CN=91f3bbfde0a4f011b74514c7055a66e6e2d7da39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:56:c6:5e:c6:9e:0a:ce:ee:eb:2c:91:74:4f:
7c:9e:58:31:76:af:c7:62:97:03:14:2b:0a:61:b5:
1b:01:e0:1f:a2:4c:22:d6:1a:25:32:e1:a6:f9:ba:
d4:7e:2a:b2:c9:79:76:e3:de:9d:9c:5d:5e:7c:2c:
02:3b:00:12:5e:c2:0b:50:60:e4:76:c3:a7:3c:3a:
ff:fd:f5:07:ab:7c:66:f0:ce:71:17:dd:62:14:a8:
99:9d:cd:9e:73:d0:df:14:e4:e3:1a:3f:7c:0b:de:
3c:78:3d:b1:5b:08:8c:92:73:c1:ad:d5:46:ab:e6:
e7:b2:c5:03:65:f2:2d:96:91:01:08:2b:e3:d6:44:
38:4e:5e:98:ee:42:06:cf:0f:c8:5b:6d:b7:a0:4c:
fc:4f:58:a3:d2:60:7b:e8:5a:61:80:02:ac:fb:ff:
2c:f1:91:5f:bb:f9:0d:4c:62:db:2c:4e:04:2b:90:
30:08:39:94:22:73:2b:c1:96:b6:b6:b2:04:47:3a:
f7:6c:48:d9:a3:67:19:2c:db:7c:41:07:a6:76:b0:
c9:0b:e8:0d:bd:ae:e2:e6:39:71:cc:34:f0:d6:39:
bf:0c:16:e0:e9:20:55:5b:50:51:67:7c:03:ab:b8:
ec:d5:32:80:c2:b7:15:cb:ba:93:52:fd:5c:13:dc:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B3:0B:04:73:91:5F:F0:7D:C1:90:B2:D8:9E:61:D2:D8:53:71:79
X509v3 Authority Key Identifier:
keyid:D9:DA:B0:56:77:76:D3:CF:CE:1B:3C:6C:D3:D8:91:A8:C2:59:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/feee3e454749ca0f5cea578d7d1753869e8123c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74ff42ae-66b9-4626-861f-7be7373ed857/91f3bbfde0a4f011b74514c7055a66e6e2d7da39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/74ff42ae-66b9-4626-861f-7be7373ed857/feee3e454749ca0f5cea578d7d1753869e8123c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.236.0/22
200.52.128.0/20
200.76.96.0/19
Signature Algorithm: sha256WithRSAEncryption
63:e3:e7:eb:f3:ac:b1:b3:0c:13:17:93:53:3e:ec:0d:30:e9:
07:0e:f1:d9:57:77:ab:8c:e8:7f:62:37:46:4a:39:1c:b9:23:
a7:09:0c:c5:6e:32:88:de:b5:9e:2e:67:89:90:02:e5:cf:38:
9b:ef:eb:3e:2b:7a:82:9b:f8:ea:04:06:4e:66:69:05:72:2f:
a6:63:5e:0e:fc:8d:40:fc:1e:da:87:3f:32:25:ff:2b:5d:48:
a9:57:a7:ff:58:5b:79:f7:0c:52:d2:89:f6:37:9c:d6:c9:3a:
50:43:a2:a2:22:c8:f9:c7:c1:70:42:f0:9f:d6:c3:e7:1e:53:
c8:d7:29:55:08:d5:fc:60:4b:37:f7:f9:a2:f0:78:d2:22:1e:
53:f6:cf:9a:03:15:ba:6a:bb:e8:ad:08:4a:f4:87:03:4d:e0:
04:24:0c:27:2f:24:18:94:0e:a4:be:38:a3:d8:2f:76:9a:d0:
57:ab:9d:27:13:04:32:e0:6d:db:7a:e3:93:65:5b:d2:fd:51:
9c:79:05:ab:e6:28:e8:46:18:86:26:1d:42:a2:b3:0b:a7:d0:
d5:2f:f6:24:9f:2d:4e:46:7f:a1:bc:c5:17:a5:02:50:59:0a:
8d:dd:24:1b:48:40:79:c1:3d:b8:89:ff:1a:c8:89:5e:ac:9f:
a2:fa:64:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 18 08:13:45 2023 by rpki-client on console-fra.rpki-client.org