Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/76179540dfbe17749ddaaaa44a3bcbd76c79ff54.roa
File: 76179540dfbe17749ddaaaa44a3bcbd76c79ff54.roa (raw, json)
Hash identifier: DaA0V8pf0KosS23xPFajPD0cDWi0LRW0Z2GZR9pWN1A=
Subject key identifier: DA:35:3A:42:A9:58:81:AA:F2:70:8E:C5:52:59:2E:22:73:78:D3:D1
Certificate issuer: /CN=1b429c72865e191f13438ce54026b95b47e06113
Certificate serial: 082C0B
Authority key identifier: 62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/76179540dfbe17749ddaaaa44a3bcbd76c79ff54.roa
Signing time: Tue 05 Sep 2023 21:17:58 +0000
ROA not before: Mon 04 Sep 2023 21:17:56 +0000
ROA not after: Fri 05 Sep 2025 21:17:56 +0000
asID: 28415
IP address blocks: 189.201.227.0/24 maxlen: 24
189.201.231.0/24 maxlen: 24
189.201.224.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535563 (0x82c0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b429c72865e191f13438ce54026b95b47e06113
Validity
Not Before: Sep 4 21:17:56 2023 GMT
Not After : Sep 5 21:17:56 2025 GMT
Subject: CN=76179540dfbe17749ddaaaa44a3bcbd76c79ff54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:e7:2a:63:a3:72:7b:e5:59:6b:e9:13:50:
d3:5f:58:36:ee:00:24:d9:f9:08:2b:0f:64:34:f7:
59:3f:98:27:56:79:e0:7b:63:22:c3:17:c9:f7:f7:
03:1b:76:94:ad:d5:91:15:07:d3:dd:58:65:11:41:
20:c6:f4:18:62:fd:83:9a:f5:65:a2:1e:58:a4:45:
b6:ff:0c:d9:a4:8e:25:a6:48:b0:4c:5f:b1:46:32:
d6:1b:c1:fb:32:14:2d:aa:66:8e:6e:79:81:a6:07:
9e:f2:10:d6:30:d6:d8:d2:c1:8c:0a:1d:50:03:34:
94:29:c7:a1:82:50:dc:51:d3:07:84:26:f4:1d:fa:
bd:b9:d4:50:ae:e7:e6:84:90:15:db:4e:90:4f:d9:
71:77:ad:ea:92:a3:47:46:3e:dd:b0:ac:b1:f9:6d:
36:c2:29:dd:7f:20:d1:0c:f7:00:cd:16:ff:b6:e2:
68:39:30:ad:ae:dc:b5:4c:a8:4d:d4:a8:26:11:f1:
3d:ad:a8:e1:83:1a:88:0a:87:e0:1b:0e:ae:22:aa:
e9:54:fe:07:db:56:4e:16:32:6b:02:37:b9:dd:5c:
27:9a:26:ba:af:41:00:c3:ca:f0:6c:61:99:b4:0a:
03:d6:8a:c3:27:39:9e:42:33:e3:9e:78:44:90:77:
2d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:35:3A:42:A9:58:81:AA:F2:70:8E:C5:52:59:2E:22:73:78:D3:D1
X509v3 Authority Key Identifier:
keyid:62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/76179540dfbe17749ddaaaa44a3bcbd76c79ff54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/1b429c72865e191f13438ce54026b95b47e06113.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.224.0/23
189.201.227.0/24
189.201.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c2:9a:9d:db:4b:17:6f:62:4f:3c:35:e2:ec:87:ee:e1:3e:
2f:a6:4b:83:76:12:89:86:5c:63:26:2d:1f:44:80:04:88:d0:
6d:53:46:71:7d:f8:80:40:61:64:e4:48:71:3b:97:5f:37:b0:
ea:a0:4c:e8:7c:18:93:ca:26:d3:9b:c4:f0:74:95:1f:6a:5d:
ec:8b:14:f7:58:38:65:08:81:73:12:5f:0e:12:15:14:9b:74:
fa:1d:06:16:01:d7:9d:42:0e:96:77:99:89:f5:c2:ac:3f:11:
d9:4e:89:ec:ed:40:e5:bc:a2:65:52:f8:15:86:b7:27:57:0a:
a4:0e:88:aa:57:81:c8:c2:82:8c:9c:99:20:7b:5e:8f:5b:ff:
ac:a2:56:6b:2c:b2:e6:76:28:1d:fc:45:9a:33:87:55:8d:ac:
05:f7:3a:d2:cf:26:ba:10:eb:0e:a9:1c:03:ef:09:d7:d3:f4:
93:28:1a:f0:92:4a:80:a9:63:29:8f:52:98:c0:89:5d:f3:9b:
9c:d3:82:91:a0:36:19:40:da:16:00:12:52:9f:7d:91:5f:53:
2b:9b:c7:47:72:24:b2:c8:a7:ef:be:02:70:e6:46:a4:6e:03:
be:53:bc:7c:39:18:1d:b4:1d:9d:88:2a:92:ea:97:03:8c:86:
c9:7e:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 23:03:28 2023 by rpki-client on console-ams.rpki-client.org