Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/cc006fa67369baa8d5133adcbc359b29e990c37a.roa
File: cc006fa67369baa8d5133adcbc359b29e990c37a.roa (raw, json)
Hash identifier: Kko/rfBftkxmiC7ahV05BvOdJT5Onop9cNAdSvxy3aY=
Subject key identifier: C7:D0:0F:29:F1:65:26:AF:8B:AE:41:FA:26:A2:97:4E:A1:DC:AD:83
Certificate issuer: /CN=de4267281632ed5870c17320b110df8594425b92
Certificate serial: 0D74D2
Authority key identifier: 27:9D:AC:70:6E:FC:C5:18:94:86:8D:62:51:D8:59:B1:F4:42:DE:9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de4267281632ed5870c17320b110df8594425b92.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/cc006fa67369baa8d5133adcbc359b29e990c37a.roa
Signing time: Wed 24 Mar 2021 14:29:12 +0000
ROA not before: Wed 24 Mar 2021 14:29:11 +0000
ROA not after: Tue 24 Mar 2026 14:29:11 +0000
asID: 27833
IP address blocks: 181.197.192.0/18 maxlen: 24
190.1.0.0/19 maxlen: 24
190.1.32.0/19 maxlen: 24
190.97.0.0/19 maxlen: 24
190.97.32.0/19 maxlen: 24
190.211.192.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 881874 (0xd74d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4267281632ed5870c17320b110df8594425b92
Validity
Not Before: Mar 24 14:29:11 2021 GMT
Not After : Mar 24 14:29:11 2026 GMT
Subject: CN=cc006fa67369baa8d5133adcbc359b29e990c37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:50:09:be:0c:f2:25:b7:3e:ea:92:75:c3:
fb:dc:a9:6a:3c:12:3e:38:1e:4c:36:ee:68:a4:14:
6b:bc:d1:be:0b:7e:5a:2b:06:db:03:87:34:4d:4b:
b7:07:41:f9:dd:05:83:5a:4d:2d:5a:78:c0:43:11:
f2:2e:a7:33:35:80:40:6a:81:db:33:7b:f7:94:07:
7b:35:8c:ac:43:da:2c:34:e7:04:91:c0:85:c3:4d:
e7:6d:0e:10:37:e1:fa:f2:eb:68:d3:f8:d8:f7:99:
95:c2:6f:ab:66:80:45:94:eb:20:32:bf:c9:93:c2:
6e:0e:50:51:d6:33:2e:cc:dd:28:cf:dc:bd:10:49:
ac:fc:41:ec:3a:87:1e:f9:60:9b:27:63:0c:3a:e3:
71:97:a8:e5:b6:83:32:f2:9f:d7:d7:e7:d4:39:97:
a8:e2:02:0b:ad:90:70:17:74:df:66:3d:9e:19:f5:
63:7d:86:a1:55:c3:f0:bb:6e:cc:7c:1c:57:d4:72:
75:42:fa:58:c5:7a:a3:29:97:f9:bc:a4:87:d9:82:
71:95:b7:a1:d8:48:e6:84:b8:f4:c7:23:02:f2:9d:
70:98:39:93:78:b4:7a:98:4f:23:9d:85:e6:ed:a3:
c8:ca:cd:41:9c:97:fc:a8:95:97:4a:0c:4a:8a:ac:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D0:0F:29:F1:65:26:AF:8B:AE:41:FA:26:A2:97:4E:A1:DC:AD:83
X509v3 Authority Key Identifier:
keyid:27:9D:AC:70:6E:FC:C5:18:94:86:8D:62:51:D8:59:B1:F4:42:DE:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de4267281632ed5870c17320b110df8594425b92.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/cc006fa67369baa8d5133adcbc359b29e990c37a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/955be988-0766-42bc-b84f-ef4aa9f6625e/de4267281632ed5870c17320b110df8594425b92.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.197.192.0/18
190.1.0.0/18
190.97.0.0/18
190.211.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:63:9f:cb:0e:da:b7:b3:11:38:98:f8:b3:db:0c:cf:68:7d:
c8:9f:85:2e:ac:8f:31:1e:e1:3e:ca:9a:d5:7b:5f:b8:05:1d:
79:7f:70:4f:8e:98:9a:eb:19:d0:7b:da:18:1c:f8:1a:94:7e:
22:a4:d0:02:9e:d9:94:b8:f0:13:79:5b:93:d8:bc:c7:35:12:
31:80:af:17:f8:6e:06:19:84:39:b6:93:06:5d:2c:29:a3:ac:
ac:bc:6f:6c:2f:69:ac:8c:76:03:51:f4:78:40:40:37:44:bd:
35:a6:c1:04:81:91:e3:74:58:1f:7a:e4:64:8d:4f:df:33:41:
97:a3:62:00:1f:36:77:59:36:9d:7e:03:46:44:37:89:c2:0e:
f4:c7:09:d7:8f:fe:8a:b5:ac:fc:8a:5f:c4:3b:c3:de:bf:08:
27:09:7a:b7:fd:ce:74:af:9c:89:3c:02:ff:88:f7:63:79:21:
26:04:f6:09:4c:07:d5:af:48:e9:1d:24:c0:2f:49:15:38:88:
3d:11:25:cb:95:1c:0e:32:6b:80:c7:7e:66:d1:23:c9:be:84:
ff:95:8f:db:0f:98:8d:0a:f5:37:f4:9b:df:21:16:6d:7b:b2:
41:94:50:37:cf:92:4d:2e:59:05:15:af:58:2e:e6:9d:09:67:
f0:ed:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 20:54:40 2023 by rpki-client on console-fra.rpki-client.org