Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/1f08955679150fb494ee6b00abed122a74e938a6.roa
File: 1f08955679150fb494ee6b00abed122a74e938a6.roa (raw, json)
Hash identifier: kEaYP5x9Cnnr4k+ZEebSy/K6hP+ps2C3R0pHZnxxPa8=
Subject key identifier: C5:0C:95:E5:04:0A:2E:EE:9D:F8:8C:26:F5:CA:45:80:EB:5C:40:60
Certificate issuer: /CN=8cca422c9ff30980ab758c3310c2e40a2e836482
Certificate serial: 0DD53F
Authority key identifier: 2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/1f08955679150fb494ee6b00abed122a74e938a6.roa
Signing time: Wed 24 Mar 2021 14:36:29 +0000
ROA not before: Wed 24 Mar 2021 14:36:26 +0000
ROA not after: Tue 24 Mar 2026 14:36:26 +0000
asID: 52468
IP address blocks: 190.61.61.0/24 maxlen: 24
190.61.62.0/24 maxlen: 24
190.61.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906559 (0xdd53f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cca422c9ff30980ab758c3310c2e40a2e836482
Validity
Not Before: Mar 24 14:36:26 2021 GMT
Not After : Mar 24 14:36:26 2026 GMT
Subject: CN=1f08955679150fb494ee6b00abed122a74e938a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:cb:00:37:5d:59:bd:e8:42:0f:db:1a:36:
10:f9:52:e3:ca:91:bb:2d:8b:f3:22:18:69:bb:84:
81:35:4d:40:96:67:7a:b9:50:49:52:95:e1:2b:72:
3b:75:29:2e:e1:2d:e9:83:f1:93:94:48:b4:24:a4:
a9:6d:2c:d7:cd:a8:01:2c:ae:32:df:8e:9e:67:ec:
fe:d5:5a:ab:bb:e8:5c:f0:0e:b9:df:5e:46:58:fe:
98:ea:59:d9:31:fe:25:13:85:03:0a:39:5c:2b:46:
a5:6d:7a:8a:53:82:db:cd:51:31:2a:c2:4c:d2:b2:
5d:13:9a:6e:61:f1:f7:86:8c:cf:91:c3:02:43:67:
63:f9:fb:f4:b1:11:f5:e6:6f:1a:4e:00:c0:84:6c:
8e:f6:b2:92:a6:29:73:40:03:e4:05:21:9e:57:10:
fd:f6:79:df:48:1d:5c:88:38:21:5d:04:e8:33:5a:
cc:8f:06:75:24:ee:85:77:66:49:1a:6f:a8:3d:8f:
d4:8b:23:ac:20:2c:39:f5:f2:be:3c:0a:95:60:c6:
20:7b:bc:d4:8d:d4:d2:09:1b:69:50:e8:9a:b3:7c:
54:ab:59:04:2f:81:36:d6:77:54:a4:31:59:8a:f4:
24:a0:ad:56:ce:3b:9b:8a:cc:7b:06:ac:e6:87:d7:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0C:95:E5:04:0A:2E:EE:9D:F8:8C:26:F5:CA:45:80:EB:5C:40:60
X509v3 Authority Key Identifier:
keyid:2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/1f08955679150fb494ee6b00abed122a74e938a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/8cca422c9ff30980ab758c3310c2e40a2e836482.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.61.61.0-190.61.63.255
Signature Algorithm: sha256WithRSAEncryption
a3:f1:28:f8:7a:62:80:b4:89:23:72:80:74:f6:4e:c0:30:10:
05:6d:8c:3a:8b:7d:bf:16:f9:93:eb:48:d8:1a:cf:c8:6e:5c:
30:b0:4c:b3:a7:d1:63:97:18:cc:83:09:7a:36:b1:5d:af:8c:
e0:3c:c5:5f:af:ca:1a:72:22:52:d2:f1:50:50:22:06:03:b3:
88:39:f5:6d:a6:61:9e:a4:8c:10:cd:61:e6:a5:81:3c:fb:dd:
3b:ae:93:1e:24:69:0b:8b:49:09:25:26:28:78:3c:0f:02:3b:
bf:69:17:e8:20:12:b6:a4:12:77:98:69:88:21:20:48:be:02:
aa:b7:dc:ad:57:8c:7c:1f:b2:d1:89:ab:63:a1:fd:04:d9:6e:
62:fd:75:ae:68:2b:9e:1d:a3:3f:60:06:49:bd:5c:de:83:1e:
5b:3e:63:75:86:a6:81:78:7d:61:aa:61:27:5c:f5:7d:30:be:
44:74:de:82:04:21:d2:15:d2:85:a2:bc:22:e7:b6:a1:13:e0:
fa:8f:05:99:cf:c6:00:bb:5c:bc:ec:12:bc:d8:13:e1:d8:02:
bf:45:52:ee:14:81:c3:66:2b:77:bc:68:f5:1a:a7:3e:d3:46:
6e:89:ad:24:12:f7:b5:37:96:aa:37:36:e9:c3:6b:de:f7:a9:
eb:fe:88:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-fra.rpki-client.org