Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/4e26208f428ddc0a1a6721cd2a296f56df237d92.roa
File: 4e26208f428ddc0a1a6721cd2a296f56df237d92.roa (raw, json)
Hash identifier: Jrul7ttOWEQEX6C4R9XAZzSKVmNr9C21KY4yST02vUM=
Subject key identifier: A9:42:D5:CE:1E:56:42:1B:8F:0E:9C:97:C0:6B:EF:22:2A:40:CC:81
Certificate issuer: /CN=a23199cb189fb1502d1df2754deb1df76afcb5ba
Certificate serial: 0D3BFA
Authority key identifier: 44:AB:5C:70:33:1F:8E:21:11:28:C2:50:CE:04:FC:95:27:BC:E2:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a23199cb189fb1502d1df2754deb1df76afcb5ba.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/4e26208f428ddc0a1a6721cd2a296f56df237d92.roa
Signing time: Wed 24 Mar 2021 14:40:56 +0000
ROA not before: Wed 24 Mar 2021 14:40:56 +0000
ROA not after: Tue 24 Mar 2026 14:40:56 +0000
asID: 52238
IP address blocks: 190.99.72.0/24 maxlen: 24
190.99.73.0/24 maxlen: 24
190.99.74.0/24 maxlen: 24
190.99.75.0/24 maxlen: 24
190.99.76.0/24 maxlen: 24
190.99.77.0/24 maxlen: 24
190.99.78.0/24 maxlen: 24
190.99.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867322 (0xd3bfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23199cb189fb1502d1df2754deb1df76afcb5ba
Validity
Not Before: Mar 24 14:40:56 2021 GMT
Not After : Mar 24 14:40:56 2026 GMT
Subject: CN=4e26208f428ddc0a1a6721cd2a296f56df237d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:eb:d9:b6:d1:34:59:fb:b1:c7:8c:fb:2e:
ef:f8:56:c5:b0:07:c1:5b:e7:97:92:a5:f1:fa:19:
6e:56:6d:d1:db:73:c6:5a:43:c1:3e:3a:96:f8:9d:
f9:f6:b7:e1:ff:85:ad:9b:37:6b:a2:73:56:ea:4e:
5f:d0:ba:2c:65:ed:74:3f:44:8d:64:87:43:1a:fb:
20:fe:c0:86:f4:8e:e1:9a:af:8b:98:80:c4:d7:fc:
40:3c:f8:6b:d3:0d:b1:e4:be:c6:e4:c1:2b:59:01:
9c:55:7b:63:f5:a8:16:a5:b0:0b:6c:1b:76:34:d3:
f4:db:70:da:44:56:ab:41:33:e7:01:37:59:be:9d:
fc:1e:bf:55:f0:1e:72:00:1d:ac:88:71:35:e5:d4:
1f:3f:ca:87:bc:35:1c:c3:a9:e9:e7:9f:a9:2c:1e:
a7:b4:20:e8:fd:b0:8e:3e:36:40:6b:cb:ce:7b:5e:
02:9e:6d:2b:d3:68:fb:4c:b2:eb:b1:ff:cb:00:2c:
ea:88:21:d2:1e:6a:30:6c:4a:4a:4e:9c:e8:43:04:
4e:7c:15:bf:82:80:cd:6e:9f:d0:84:39:e0:1d:76:
7a:56:5c:f0:78:ed:cc:24:2b:38:77:b8:c4:cf:c3:
1d:29:44:a8:e5:35:d5:85:be:a6:98:c4:65:fa:6e:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:42:D5:CE:1E:56:42:1B:8F:0E:9C:97:C0:6B:EF:22:2A:40:CC:81
X509v3 Authority Key Identifier:
keyid:44:AB:5C:70:33:1F:8E:21:11:28:C2:50:CE:04:FC:95:27:BC:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a23199cb189fb1502d1df2754deb1df76afcb5ba.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/4e26208f428ddc0a1a6721cd2a296f56df237d92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/a23199cb189fb1502d1df2754deb1df76afcb5ba.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.99.72.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:f4:83:e2:18:82:04:c2:88:0f:5e:37:38:27:da:e3:9e:db:
86:a5:41:6c:46:3b:06:e5:73:95:93:fc:9d:6b:50:5e:02:25:
ab:93:88:80:5e:69:a1:ed:29:4f:0f:f9:8d:54:64:83:5e:c8:
98:55:22:4f:24:c2:a1:e0:8d:80:d5:bc:8a:06:03:98:e2:32:
2f:8d:fe:dc:14:ef:2b:35:ee:a2:65:9e:b4:3f:e3:a6:0a:d5:
5e:fe:94:02:a0:e1:a6:79:8d:d0:14:3f:17:16:a8:e0:98:69:
82:b2:55:c8:c3:9e:f4:fe:12:22:9e:19:1d:f3:d6:53:27:56:
ff:51:5b:dd:91:8d:b0:2f:f2:81:36:c0:7f:25:41:06:a7:65:
e4:d5:cd:24:66:25:dd:ca:f7:3f:25:f3:89:46:ec:59:df:af:
c5:18:92:07:44:19:09:b5:6c:99:b0:e6:64:97:64:fa:fb:c7:
ba:3b:b9:98:06:62:79:42:c6:c5:a9:1b:c8:bc:4d:80:71:c8:
b3:f1:7e:e5:07:8b:79:b0:b8:30:83:53:cc:29:d8:d2:a3:b5:
d6:c9:96:8e:d1:e6:06:1a:ed:6f:65:11:bd:be:c7:04:ec:f3:
da:a1:af:fa:d0:c8:38:48:dc:bd:c9:5f:e2:80:a6:fa:d8:25:
08:41:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 01:11:31 2023 by rpki-client on console-fra.rpki-client.org