Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e5562c0-2858-459f-992d-0d5201218600/22d3cadf485ccb75e5d914e27e784fb44b7ed0dd.roa
File: 22d3cadf485ccb75e5d914e27e784fb44b7ed0dd.roa (raw, json)
Hash identifier: fsJy9b2osH9bZwVBtpFKFBdQMiXLfLxFQPcGUHw39wU=
Subject key identifier: 62:6C:7A:F4:D9:F0:63:47:16:A6:B8:AA:95:3A:3B:04:B4:50:0D:10
Certificate issuer: /CN=cbad518d599bf9b6a5667130c010c70d326a5f9d
Certificate serial: 0BF056
Authority key identifier: 52:52:3D:FA:87:CA:58:5F:FA:87:B3:2C:E2:6B:5E:08:E8:05:78:64
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbad518d599bf9b6a5667130c010c70d326a5f9d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9e5562c0-2858-459f-992d-0d5201218600/22d3cadf485ccb75e5d914e27e784fb44b7ed0dd.roa
Signing time: Tue 30 Mar 2021 01:55:30 +0000
ROA not before: Mon 29 Mar 2021 03:00:00 +0000
ROA not after: Wed 29 Mar 2023 03:00:00 +0000
asID: 27930
IP address blocks: 131.221.24.0/22 maxlen: 24
190.14.216.0/21 maxlen: 24
2803:b80::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782422 (0xbf056)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbad518d599bf9b6a5667130c010c70d326a5f9d
Validity
Not Before: Mar 29 03:00:00 2021 GMT
Not After : Mar 29 03:00:00 2023 GMT
Subject: CN=22d3cadf485ccb75e5d914e27e784fb44b7ed0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8c:ad:b7:35:79:28:15:bf:ee:6e:14:32:0b:
a2:b4:8a:96:39:1e:f0:46:39:36:aa:44:b9:45:eb:
4a:d6:82:26:1b:9c:fd:69:03:7d:07:93:f3:04:e8:
f5:49:8c:ac:87:26:bd:7b:8b:7d:8c:9e:2e:59:3e:
b3:f0:93:fb:11:4c:25:14:15:4d:32:13:1f:a9:e8:
ea:b2:43:fc:72:7e:3a:a7:20:6a:84:09:92:47:9a:
62:42:17:46:38:95:f5:f7:cf:92:f8:a4:8b:b6:aa:
a9:11:ca:9b:d9:2f:8b:bf:a9:9c:cc:b6:83:0e:a7:
3c:2f:4c:f0:13:56:b0:84:61:43:81:e0:b5:ad:c8:
b2:0f:a6:8a:0d:b8:71:f0:2a:00:5f:42:1b:f4:9e:
7d:f9:10:e9:c3:10:74:a4:a0:8d:a0:5b:98:2b:1f:
20:bd:f0:8f:80:d6:4a:94:f0:f9:cd:f3:56:c8:b6:
ec:e2:d0:e9:d1:34:01:f0:63:9e:e9:11:1f:a6:ab:
6e:f0:65:95:e7:9d:4c:82:ca:91:9d:5a:cf:06:42:
7d:f8:70:e7:5d:ab:a6:ba:fb:e0:fa:6d:53:23:b4:
88:a4:a5:a3:b6:42:cc:b6:f5:5c:3b:ef:2a:17:39:
03:1b:fb:f1:17:f8:df:ba:f0:19:f6:cd:a2:67:e9:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6C:7A:F4:D9:F0:63:47:16:A6:B8:AA:95:3A:3B:04:B4:50:0D:10
X509v3 Authority Key Identifier:
keyid:52:52:3D:FA:87:CA:58:5F:FA:87:B3:2C:E2:6B:5E:08:E8:05:78:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbad518d599bf9b6a5667130c010c70d326a5f9d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e5562c0-2858-459f-992d-0d5201218600/22d3cadf485ccb75e5d914e27e784fb44b7ed0dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9e5562c0-2858-459f-992d-0d5201218600/cbad518d599bf9b6a5667130c010c70d326a5f9d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.24.0/22
190.14.216.0/21
IPv6:
2803:b80::/32
Signature Algorithm: sha256WithRSAEncryption
16:50:13:22:2d:e9:d7:45:3e:6e:41:7f:62:5d:55:d4:75:76:
33:94:34:4f:dc:b4:fe:8f:be:54:1a:00:cf:6c:5d:56:37:8f:
a6:37:d4:4d:90:e5:f3:ea:35:5c:ba:27:4e:32:8b:7b:15:aa:
e8:76:89:f5:fc:1c:7c:10:3e:68:95:29:54:ee:59:7a:2a:86:
0b:6c:92:71:fc:dc:c5:91:4f:a9:92:b9:b5:2a:41:d2:c8:04:
a9:53:7c:f6:52:4b:38:81:49:7d:15:a4:6a:c3:58:0a:86:95:
fd:0f:42:ec:11:ce:87:b3:3e:55:fb:27:70:b8:1d:99:aa:d5:
10:9c:cb:87:71:bc:32:3d:2b:95:f5:6e:8a:17:5d:00:f2:9c:
ef:fc:58:07:1e:16:de:fc:77:9d:e4:28:89:19:ed:2c:56:63:
03:d2:2b:54:98:d4:5e:e8:f2:f0:28:b6:98:c8:f7:a9:46:33:
24:eb:c8:95:56:b1:56:3c:8d:e2:59:b9:ee:be:3d:cb:a6:fa:
76:c2:63:10:c7:00:3c:2d:e9:35:fb:e5:85:7a:de:90:dc:f0:
e1:c8:7c:00:11:3d:12:6a:ca:c9:ad:35:ef:c5:1c:ec:62:9e:
8d:f2:72:f5:1d:4f:ba:f4:1a:e8:1e:75:c6:30:51:22:b7:9c:
f4:42:72:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org