Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/cbca17ccc8d8037676279360e690d5c9a0a642e9.roa
File: cbca17ccc8d8037676279360e690d5c9a0a642e9.roa (raw, json)
Hash identifier: vWqY7uBdzad2mQRXa4X9hTQVkd+gt8Ix6gsqOnBTp/0=
Subject key identifier: EB:05:61:CE:B0:A1:EF:EC:74:8F:FA:97:2D:10:A3:8D:67:D8:A1:34
Certificate issuer: /CN=73c0dcfd4c271be5c9e543e84783482d9b25ef39
Certificate serial: 0BF47B
Authority key identifier: 0C:37:6A:01:9E:9A:1D:40:8B:5E:7C:B3:C4:7B:0D:17:45:FB:09:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c0dcfd4c271be5c9e543e84783482d9b25ef39.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/cbca17ccc8d8037676279360e690d5c9a0a642e9.roa
Signing time: Wed 24 Mar 2021 14:33:11 +0000
ROA not before: Wed 24 Mar 2021 14:33:11 +0000
ROA not after: Tue 24 Mar 2026 14:33:11 +0000
asID: 52439
IP address blocks: 160.19.200.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783483 (0xbf47b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c0dcfd4c271be5c9e543e84783482d9b25ef39
Validity
Not Before: Mar 24 14:33:11 2021 GMT
Not After : Mar 24 14:33:11 2026 GMT
Subject: CN=cbca17ccc8d8037676279360e690d5c9a0a642e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:89:67:b1:f6:ac:27:76:23:d5:ea:ca:b1:
4a:f8:ab:7a:05:36:62:47:39:bf:7a:d9:9f:5d:99:
7f:57:e3:f4:9a:20:9d:01:e4:37:c9:84:2e:25:c1:
d4:5d:70:50:b2:f0:e9:60:fa:b1:a6:e5:87:18:4e:
6d:4f:ce:43:6e:cf:24:47:49:59:b2:7c:d2:7e:69:
f2:66:08:1f:b5:e3:49:36:85:1f:68:58:60:5d:ae:
9a:97:c0:b5:70:cc:3d:5d:23:d1:59:14:51:01:83:
3f:54:e4:f0:c9:3b:ef:bd:d8:85:a2:9c:2f:3d:d4:
ee:07:99:be:b8:c6:1c:a5:68:71:a3:36:d8:a8:ba:
53:0a:d0:31:c2:cc:d7:db:d6:e9:65:c2:73:4b:a3:
c5:f2:94:9e:d2:57:18:5e:7f:a5:32:16:bf:82:98:
57:dc:56:9b:27:7c:36:b4:1b:4d:77:88:9b:be:dc:
c8:cd:57:e5:42:69:de:a3:2f:19:6c:b9:b3:cb:6d:
b0:4d:c7:08:ea:1d:61:9f:29:11:81:de:31:d2:a9:
a7:15:e5:fa:89:e3:9d:12:41:d4:bf:19:3c:b7:0b:
e5:aa:2b:f6:01:09:77:3d:99:f7:9e:fa:66:41:d0:
2b:fb:a5:a6:e1:24:13:62:64:86:c0:36:6b:ed:f8:
e0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:05:61:CE:B0:A1:EF:EC:74:8F:FA:97:2D:10:A3:8D:67:D8:A1:34
X509v3 Authority Key Identifier:
keyid:0C:37:6A:01:9E:9A:1D:40:8B:5E:7C:B3:C4:7B:0D:17:45:FB:09:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73c0dcfd4c271be5c9e543e84783482d9b25ef39.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/cbca17ccc8d8037676279360e690d5c9a0a642e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8af81bad-5ee0-4a9e-83f5-6bb68384867f/73c0dcfd4c271be5c9e543e84783482d9b25ef39.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.200.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:39:bd:b8:3c:ef:a0:38:ff:6c:60:85:cb:c4:f9:ab:df:90:
17:64:1d:c8:4c:ae:8a:dd:b5:73:aa:37:ec:d8:00:45:9e:63:
c6:84:34:1b:cf:d0:d2:91:0a:48:d0:95:49:72:4e:5d:d7:f2:
a6:90:43:0f:8f:e1:a8:df:3d:1f:9a:2b:e5:d2:75:18:ae:bf:
17:a5:e4:28:44:12:d7:c4:0e:4d:93:99:ee:bc:9d:93:ac:02:
dd:9d:ff:35:e2:17:d4:97:be:43:47:86:19:31:22:10:c5:65:
18:e6:80:d9:38:d3:89:c9:09:dd:2b:f2:d7:34:b0:a4:c8:dc:
d9:f6:7c:da:0e:9d:2b:dc:15:2a:ae:26:d1:de:c1:04:5c:1a:
bd:62:ec:35:a9:c1:fd:e1:cf:4b:74:b1:a9:de:e3:87:81:51:
ed:48:97:b1:e7:23:73:f0:db:f7:31:7a:7c:ef:ac:09:af:17:
88:02:34:6b:12:b8:df:9b:a4:c6:6d:c3:f5:2a:d0:03:99:08:
c3:8a:4e:a5:3b:4a:b4:ba:bf:ec:9d:51:38:24:69:68:01:26:
ce:d8:5f:cc:bb:84:59:2a:5e:a3:99:09:a8:8d:f9:99:59:30:
cf:55:1b:2f:9f:ba:d1:51:34:e8:6f:9c:0a:4d:73:e0:f7:1f:
f2:36:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org