Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/562ae8457fffcdb5b388a2d5125812e75ade7e20.roa
File: 562ae8457fffcdb5b388a2d5125812e75ade7e20.roa (raw, json)
Hash identifier: RvUBrbyI+HVLew8+tlNf0+eoncJqKynG7JpJg6k2ZIU=
Subject key identifier: DA:C7:B7:BF:CD:AE:E2:83:90:FC:FC:19:D5:BF:FA:62:79:7E:DF:0B
Certificate issuer: /CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Certificate serial: 05ABA2
Authority key identifier: E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/562ae8457fffcdb5b388a2d5125812e75ade7e20.roa
Signing time: Wed 24 Mar 2021 14:46:32 +0000
ROA not before: Wed 24 Mar 2021 14:46:32 +0000
ROA not after: Tue 24 Mar 2026 14:46:32 +0000
asID: 52398
IP address blocks: 168.121.84.0/22 maxlen: 23
200.7.148.0/22 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371618 (0x5aba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Validity
Not Before: Mar 24 14:46:32 2021 GMT
Not After : Mar 24 14:46:32 2026 GMT
Subject: CN=562ae8457fffcdb5b388a2d5125812e75ade7e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:e7:88:5a:4f:42:d8:32:41:d3:0e:6d:ab:
36:90:d8:e0:7c:a8:98:b4:bb:91:0e:35:a8:6c:21:
48:a4:f8:93:46:95:3d:1c:41:51:dd:f5:4c:20:8f:
d7:f4:52:b2:85:1f:a3:95:14:c3:52:5e:da:4f:dc:
36:a2:cf:5a:2b:82:7a:c8:83:7e:bd:0c:e2:44:3f:
6c:15:8e:a8:8d:f2:c5:e0:3a:af:66:cf:dc:3d:23:
8d:91:e2:15:8c:f1:47:10:cd:d2:10:17:24:9f:00:
b9:83:34:4e:84:08:c6:c7:74:3d:35:3c:24:74:e9:
20:7d:5b:6c:89:05:ac:98:73:fc:8e:bf:4a:18:5b:
ce:5c:8c:ba:70:48:cf:06:a0:05:72:7d:82:8a:15:
50:77:b1:e9:fc:7f:96:ce:9e:d1:9c:77:90:bb:84:
6c:3e:41:da:4b:7d:c8:21:5f:73:1a:3f:c2:66:f4:
de:6f:a2:46:fe:e5:1d:5e:d9:98:48:9e:47:d3:04:
3b:0e:3a:4d:e1:ef:51:84:c3:92:03:4b:23:d8:bb:
20:1d:d3:84:1f:af:52:59:f6:57:89:ff:85:08:6c:
17:1f:28:5a:29:42:cf:8c:71:03:35:c6:7a:5d:08:
e2:c2:cd:20:6e:1b:de:7d:76:b5:d1:48:9d:00:b8:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C7:B7:BF:CD:AE:E2:83:90:FC:FC:19:D5:BF:FA:62:79:7E:DF:0B
X509v3 Authority Key Identifier:
keyid:E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/562ae8457fffcdb5b388a2d5125812e75ade7e20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.84.0/22
200.7.148.0/22
Signature Algorithm: sha256WithRSAEncryption
72:09:5e:25:77:96:28:b9:ba:2b:b6:e0:1c:00:c1:ce:06:60:
ee:1d:73:7f:65:b4:66:d2:46:fa:98:03:20:54:9e:05:f4:94:
61:ec:0c:46:71:9d:e4:13:30:e4:63:f8:87:e4:b6:b0:85:9a:
02:ef:e4:e3:4d:71:1e:c6:44:6f:1e:85:dc:eb:0a:42:62:d5:
59:00:89:7c:49:16:6c:1a:8b:f2:fa:b1:e3:04:93:a0:19:4c:
ba:82:d1:92:38:cd:4d:97:03:a8:28:08:59:6d:53:5f:dc:20:
00:4b:8d:56:c8:22:50:f4:40:ea:8b:c9:23:71:81:5b:19:e3:
d1:1c:62:7a:df:32:cb:2a:b4:26:72:e8:18:a1:37:96:d4:78:
0b:b4:12:23:54:38:55:3f:f3:fa:33:e0:85:6b:b8:3e:70:ab:
25:db:2e:6f:f4:87:cf:c9:04:ff:0c:ce:26:f1:5d:a8:3c:0a:
55:13:da:ac:b7:d2:91:98:17:36:7f:90:52:e0:50:6a:d4:16:
a4:2c:dc:ac:a6:9c:ae:c0:14:fc:b7:04:b6:c8:1b:a0:62:fa:
1b:f0:f2:1a:4e:c4:59:0c:98:0a:4f:bf:e1:a0:df:c5:0d:38:
5f:bc:a5:e9:3e:32:7e:db:9d:e3:09:bb:2a:ec:8e:ed:9e:ee:
04:29:4b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 13:11:08 2023 by rpki-client on console-fra.rpki-client.org