Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/1cb8b65cf4284e7b7036acfe3883e14bf0f66792.roa
File: 1cb8b65cf4284e7b7036acfe3883e14bf0f66792.roa (raw, json)
Hash identifier: lJSz08dupSYeI6bxAm7vCFvPKdd3tGpvDM+H6lNu66s=
Subject key identifier: CD:1D:5F:DF:EB:4C:55:95:4E:A0:A3:35:55:12:85:3D:79:93:33:B0
Certificate issuer: /CN=7e02bc3ca022a8018c29af8772e06cbe046b81de
Certificate serial: 1F67D2
Authority key identifier: 3B:C2:AA:A6:50:CD:02:92:37:43:C7:A0:27:A5:87:8C:61:BB:CF:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e02bc3ca022a8018c29af8772e06cbe046b81de.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/1cb8b65cf4284e7b7036acfe3883e14bf0f66792.roa
Signing time: Fri 24 Mar 2023 08:31:55 +0000
ROA not before: Thu 23 Mar 2023 08:31:55 +0000
ROA not after: Sat 22 Mar 2025 08:31:55 +0000
asID: 22047
IP address blocks: 190.160.0.0/22 maxlen: 22
200.104.248.0/21 maxlen: 24
200.74.121.0/24 maxlen: 24
200.83.0.0/23 maxlen: 23
200.83.0.0/24 maxlen: 24
200.83.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058194 (0x1f67d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02bc3ca022a8018c29af8772e06cbe046b81de
Validity
Not Before: Mar 23 08:31:55 2023 GMT
Not After : Mar 22 08:31:55 2025 GMT
Subject: CN=1cb8b65cf4284e7b7036acfe3883e14bf0f66792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:14:a3:5e:98:bc:13:5d:d7:19:f4:8f:93:
e8:c1:fd:c5:34:dd:28:02:d3:02:44:04:5e:40:91:
2a:df:b6:33:1e:d0:17:6d:09:55:74:1d:be:de:43:
21:04:fb:51:8c:75:51:f8:1d:c7:3c:d5:65:4c:e8:
39:bd:7e:86:a2:78:28:02:e1:89:b4:17:77:3d:69:
a4:aa:6c:ad:61:60:0f:be:2e:32:16:4c:e3:ab:a4:
2e:c9:e8:57:2b:08:41:8e:d3:a3:6f:90:d5:1a:47:
8f:42:76:6f:3e:c4:ff:ff:c9:8a:ee:b1:a9:c0:2e:
2f:be:86:b0:cf:cf:53:a0:fd:3a:0c:cc:e6:b5:6c:
79:68:a8:98:fa:8a:2b:0a:33:83:a9:9e:2d:6c:36:
03:f9:70:bd:67:40:83:ed:29:1a:7d:7a:aa:09:5b:
54:89:aa:ed:a0:65:f3:cb:3b:3e:41:7b:e4:a7:7a:
06:a6:00:0b:5a:45:03:61:88:a1:da:79:a7:8f:c7:
71:70:3f:2e:2e:e8:21:3a:79:c0:6f:0d:b4:39:9b:
60:2a:e6:ae:8d:db:70:d7:ac:b7:b3:ca:35:d8:96:
8a:64:35:f4:77:36:47:55:4d:00:13:98:07:f3:aa:
6b:43:58:6a:65:6a:34:e7:dd:78:71:0a:5a:ae:1d:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1D:5F:DF:EB:4C:55:95:4E:A0:A3:35:55:12:85:3D:79:93:33:B0
X509v3 Authority Key Identifier:
keyid:3B:C2:AA:A6:50:CD:02:92:37:43:C7:A0:27:A5:87:8C:61:BB:CF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e02bc3ca022a8018c29af8772e06cbe046b81de.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/1cb8b65cf4284e7b7036acfe3883e14bf0f66792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/7e02bc3ca022a8018c29af8772e06cbe046b81de.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.160.0.0/22
200.74.121.0/24
200.83.0.0-200.83.2.255
200.104.248.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:76:cf:37:95:9d:3c:cf:78:56:28:5d:0f:05:c8:0e:25:81:
ee:32:33:80:da:06:9d:b6:09:7e:18:e4:a0:a3:0b:ee:ab:2b:
94:c4:a0:2a:8c:29:5a:19:c2:90:8e:7f:bc:ed:51:a7:ad:e5:
7b:db:59:04:db:69:ca:e5:1e:97:6d:56:38:5e:eb:01:84:49:
6f:4e:26:87:db:82:49:4d:2f:73:24:eb:ad:88:c5:9b:ea:d7:
af:a3:f5:9b:31:45:ad:5f:7d:7f:39:dc:0f:a4:a1:69:95:b7:
d4:e9:74:9f:da:da:b9:26:73:ff:c6:f5:48:30:aa:9d:de:bc:
49:62:17:03:af:6d:d7:23:94:61:f0:77:f5:81:e5:f3:e8:52:
54:68:ac:bb:0c:62:48:37:0e:43:13:cf:a6:25:8d:8d:1a:b2:
d5:66:52:7c:a1:43:f2:0f:b5:c7:4d:c5:81:36:3c:b5:25:dd:
35:b3:77:97:74:ed:91:75:2c:66:9d:bf:ba:21:f4:1c:a6:da:
48:06:7d:45:44:65:7e:29:6c:4f:bb:d4:af:e1:54:e6:44:40:
80:6e:28:d7:10:16:00:fd:e2:48:3e:fb:a8:18:ef:41:c7:02:
eb:79:82:bd:06:de:df:75:3f:bb:94:33:ea:f1:88:df:84:a0:
7f:a8:4d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org