Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a5ec771-114b-465b-bb92-def8ced631ef/7b944d146f86e190afb3858b8878d5a38f38ab1e.roa
File: 7b944d146f86e190afb3858b8878d5a38f38ab1e.roa (raw, json)
Hash identifier: j2MufTNdq8jYfmcWWX0NR8T6KaNLO0ksdEIzHcYvBB8=
Subject key identifier: 22:06:74:52:8F:4C:81:94:53:E4:9D:9F:2F:ED:04:81:84:4A:8E:6E
Certificate issuer: /CN=1c9b973317eb80280ae3912672e94609f196869d
Certificate serial: 1C6B5C
Authority key identifier: 50:A0:2E:42:62:3B:B0:F4:70:CB:60:81:93:84:E8:22:6E:34:CA:65
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c9b973317eb80280ae3912672e94609f196869d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8a5ec771-114b-465b-bb92-def8ced631ef/7b944d146f86e190afb3858b8878d5a38f38ab1e.roa
Signing time: Tue 17 Oct 2023 19:53:21 +0000
ROA not before: Mon 16 Oct 2023 19:53:21 +0000
ROA not after: Fri 17 Oct 2025 19:53:21 +0000
asID: 52348
IP address blocks: 190.14.40.0/21 maxlen: 24
190.52.208.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 15:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1862492 (0x1c6b5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c9b973317eb80280ae3912672e94609f196869d
Validity
Not Before: Oct 16 19:53:21 2023 GMT
Not After : Oct 17 19:53:21 2025 GMT
Subject: CN=7b944d146f86e190afb3858b8878d5a38f38ab1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e0:35:10:49:46:10:83:05:e5:29:07:93:50:
ce:8c:b8:0f:16:3d:69:0a:36:a6:40:91:ab:ba:2a:
4f:c5:d5:7a:98:3c:70:95:aa:68:5f:50:ba:2d:dd:
83:af:32:08:d4:67:cc:9c:29:de:0f:03:26:ed:59:
16:42:cc:ed:d3:3e:48:0d:69:a2:e1:a1:65:f9:2d:
64:76:50:c7:bd:c1:59:64:11:e0:d3:57:29:a0:7d:
80:cd:20:1c:5d:71:d5:2c:78:a6:19:38:7b:c2:75:
f8:ae:b2:be:7e:ab:26:e1:75:fa:91:ad:6e:82:ed:
fb:e0:94:f3:46:7b:1e:38:93:83:2c:29:24:3d:fc:
7b:62:20:d4:8f:a2:5b:5c:0e:c7:a5:c9:02:fd:3a:
6a:55:c5:a2:69:ce:e8:85:ee:90:43:9b:8b:6d:b6:
cd:62:d8:ef:f8:a0:dc:4d:94:2d:b6:0d:89:13:42:
ed:37:4f:99:ca:f4:7b:eb:35:66:88:b4:62:fe:60:
83:75:26:ce:3b:41:a2:49:f9:66:36:2c:10:cd:a8:
a1:55:ef:54:b9:6a:aa:7e:e5:bb:49:e6:5c:3a:41:
bc:1e:0c:32:45:2c:00:08:98:18:b8:ff:77:fe:22:
18:fe:61:31:3f:49:44:30:6d:75:6a:18:6b:4f:46:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:06:74:52:8F:4C:81:94:53:E4:9D:9F:2F:ED:04:81:84:4A:8E:6E
X509v3 Authority Key Identifier:
keyid:50:A0:2E:42:62:3B:B0:F4:70:CB:60:81:93:84:E8:22:6E:34:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c9b973317eb80280ae3912672e94609f196869d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a5ec771-114b-465b-bb92-def8ced631ef/7b944d146f86e190afb3858b8878d5a38f38ab1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8a5ec771-114b-465b-bb92-def8ced631ef/1c9b973317eb80280ae3912672e94609f196869d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.14.40.0/21
190.52.208.0/20
Signature Algorithm: sha256WithRSAEncryption
53:d3:59:51:79:3d:be:9f:ea:e0:e0:ab:7b:e2:2d:7b:55:c3:
f6:7e:94:57:85:37:fd:91:f5:1f:21:05:47:64:82:cc:a3:28:
22:45:12:6d:b7:16:96:45:b3:a8:de:1e:78:d8:c1:22:09:24:
58:c4:2d:34:6c:93:95:e4:1e:4b:ab:d6:e3:ab:ce:11:21:4b:
9e:48:9f:03:5f:b9:62:53:a9:93:df:d2:4f:0c:85:d6:59:65:
6c:4b:b9:ef:6b:4d:69:08:77:43:1d:88:10:2b:a7:93:bc:1d:
08:20:c3:fc:01:4c:75:3d:e9:48:0d:1a:9d:2d:9e:2b:7b:3a:
21:67:b3:d4:e6:fb:19:04:5d:61:c8:f6:97:11:d0:12:94:a1:
c7:f2:79:0b:1c:0f:59:e8:ba:ce:5a:99:53:68:b0:03:93:2f:
5f:92:1f:28:51:e6:db:de:04:fe:6d:15:b4:e1:b8:64:8d:89:
22:06:d0:22:09:76:71:1a:91:50:a8:79:43:fc:02:b7:a7:41:
2f:11:4c:79:47:2f:d3:fb:6f:49:c3:1d:e7:69:28:4e:ee:4e:
76:3d:9c:ef:cd:18:77:14:f0:61:66:07:d7:6b:59:9b:de:5b:
06:a1:37:5c:b9:ec:4b:b5:bb:1c:e6:46:37:df:4c:d5:a3:e8:
b4:ec:aa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 17:49:54 2024 by rpki-client on console-ams.rpki-client.org