Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/14ca987f1b869480939a13425595ae8adfd27311.roa
File: 14ca987f1b869480939a13425595ae8adfd27311.roa (raw, json)
Hash identifier: 3nw6ISEGcFm3P3nXbk9Gbmvwm3t6ShhVt84R8rMlzus=
Subject key identifier: 5F:B8:DF:A5:E9:AF:42:69:D8:3A:69:F9:CD:A3:69:98:44:76:3F:5E
Certificate issuer: /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial: 1C9F28
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/14ca987f1b869480939a13425595ae8adfd27311.roa
Signing time: Fri 25 Nov 2022 16:11:11 +0000
ROA not before: Tue 20 Sep 2022 20:17:05 +0000
ROA not after: Sun 22 Sep 2024 20:17:05 +0000
asID: 265705
IP address blocks: 186.31.128.0/22 maxlen: 24
186.28.176.0/22 maxlen: 24
186.28.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1875752 (0x1c9f28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Validity
Not Before: Sep 20 20:17:05 2022 GMT
Not After : Sep 22 20:17:05 2024 GMT
Subject: CN=14ca987f1b869480939a13425595ae8adfd27311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ce:e0:7b:1a:7e:81:f1:44:62:af:ed:9f:61:
a0:e0:3c:10:15:51:90:50:ca:ba:ab:75:cd:d8:42:
d2:72:d6:0b:f2:36:ea:56:d1:91:8a:6f:f7:34:96:
ff:39:84:93:ed:43:cf:64:2b:ae:db:c5:1f:0e:bb:
04:6b:54:e4:94:a4:9c:84:ba:cb:a9:6b:4c:13:77:
57:7f:aa:56:17:2f:f7:42:a5:c1:7c:09:65:21:f8:
ea:ff:b5:43:28:88:06:3a:60:8e:21:cd:6c:96:8b:
4e:5c:49:75:d6:41:3a:ae:30:be:de:be:5b:df:fe:
d6:bd:f7:fc:fe:c0:9b:1f:02:f6:b4:0a:60:7a:7d:
81:6c:19:74:53:8a:d6:f3:89:59:0c:88:33:59:f1:
5b:48:a2:90:10:f7:d5:11:f9:c9:ef:70:c9:75:a5:
f6:bd:02:5c:64:97:9a:1e:39:dd:29:3c:10:fd:b5:
ab:be:aa:32:89:18:f8:c6:ac:99:a9:57:c3:09:44:
c5:55:77:7e:b6:89:e0:ff:ba:05:14:67:90:c1:16:
16:c0:92:e6:6c:db:16:c9:b6:8e:e4:0e:e5:7f:e4:
3d:71:64:f6:3d:5a:dd:7e:4b:23:c3:ab:9f:8d:32:
f8:92:73:13:36:59:e8:8c:c8:72:cc:5b:18:d4:eb:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B8:DF:A5:E9:AF:42:69:D8:3A:69:F9:CD:A3:69:98:44:76:3F:5E
X509v3 Authority Key Identifier:
keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/14ca987f1b869480939a13425595ae8adfd27311.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.28.176.0/22
186.28.184.0/22
186.31.128.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:d2:f7:65:71:e3:5e:1b:54:1b:40:bd:0d:12:b6:8d:1c:ae:
e8:d8:2e:ac:31:48:4c:71:2a:8f:0b:3d:38:48:ad:5a:cd:80:
bb:5d:32:7c:04:02:79:f1:2a:50:14:cd:ad:e2:21:13:0c:cc:
b0:f3:9a:1c:c7:7f:61:41:60:ea:e8:64:b1:bc:3e:cb:54:30:
c8:a3:80:12:4d:04:e8:03:a9:1a:9d:27:39:59:b4:fc:5e:16:
ff:a5:ac:63:15:d6:23:c2:12:84:96:4b:c4:f8:c6:33:3d:55:
ee:50:7d:c8:8f:db:33:5b:ee:1d:07:88:e0:eb:f6:67:6f:0a:
9f:f8:f7:a5:e0:80:55:48:f8:50:99:ef:9e:90:8b:77:42:38:
09:f6:06:94:3f:38:64:36:55:d9:f4:81:47:12:24:c5:9f:68:
cc:ca:bc:ee:07:05:dc:51:0b:97:64:d3:46:8a:38:9f:23:78:
6a:5c:f1:22:5b:28:bb:df:7f:4e:09:4b:61:b9:2c:23:2d:a2:
3a:7c:1a:95:a7:db:7c:5e:11:a5:8a:ed:37:13:99:fa:a9:c3:
46:38:7b:16:44:80:a8:07:a4:43:31:f7:7a:e8:b9:af:64:2e:
2a:49:1c:d6:5b:03:5b:6a:b0:0a:ca:b4:64:95:83:97:b9:4b:
89:bb:8f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:49 2023 by rpki-client on console-ams.rpki-client.org