Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/5768c2c87568207ca7af8330875f4858d474192e.roa
File: 5768c2c87568207ca7af8330875f4858d474192e.roa (raw, json)
Hash identifier: 35fJoE/LUFzJh3Syje76SY6rAGjsHUqzdrhoRRXWfcs=
Subject key identifier: F3:F9:4B:03:97:EC:3F:7D:6E:09:08:1F:1B:50:1F:65:DC:99:A0:FC
Certificate issuer: /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial: 199E70
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/5768c2c87568207ca7af8330875f4858d474192e.roa
Signing time: Wed 03 Aug 2022 21:41:27 +0000
ROA not before: Mon 18 Jul 2022 03:00:00 +0000
ROA not after: Thu 18 Jul 2024 03:00:00 +0000
asID: 265705
IP address blocks: 186.31.155.0/24 maxlen: 24
190.26.30.0/23 maxlen: 24
186.28.108.0/22 maxlen: 22
186.30.120.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1678960 (0x199e70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Validity
Not Before: Jul 18 03:00:00 2022 GMT
Not After : Jul 18 03:00:00 2024 GMT
Subject: CN=5768c2c87568207ca7af8330875f4858d474192e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:e8:f9:c4:e6:10:58:80:cb:03:9f:71:9a:
be:cb:9a:02:66:62:ab:38:f4:ee:0c:bd:6c:6d:c7:
4d:43:75:5c:18:ec:8f:a2:96:fb:d1:86:67:8e:f9:
9f:53:d9:d8:bd:40:6a:3d:e9:ab:d6:c9:7c:be:f2:
f0:d4:f1:16:5f:dd:11:2a:68:90:df:34:c9:6a:34:
7e:e6:46:ec:fc:d6:5c:c3:e9:02:5a:9f:99:1b:38:
f6:d0:0b:92:6b:c7:dd:40:8c:9e:af:52:06:57:08:
f2:59:41:cf:12:b2:af:80:47:f9:20:e8:8b:da:34:
fc:be:cf:3f:04:73:96:2e:a8:24:e5:32:c5:2e:e5:
06:6b:7b:6e:e4:a8:3c:16:33:73:ca:f8:3c:04:55:
b6:20:5f:c4:09:17:c9:10:a5:66:c9:f0:42:fb:9a:
64:dd:97:07:6c:d9:82:8e:1b:3f:e9:e4:c2:95:d5:
2e:92:b2:31:bd:1e:9d:66:0d:b3:73:14:15:91:05:
94:23:96:55:47:6e:92:f4:87:81:bd:ea:89:5e:6f:
fc:32:ec:86:5b:db:21:f9:f8:f4:93:da:4c:29:c9:
69:5c:bf:13:9f:ca:3c:0b:f5:75:fe:18:7b:68:05:
d5:8f:6f:73:92:43:31:e4:a7:19:12:49:b1:50:21:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F9:4B:03:97:EC:3F:7D:6E:09:08:1F:1B:50:1F:65:DC:99:A0:FC
X509v3 Authority Key Identifier:
keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/5768c2c87568207ca7af8330875f4858d474192e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.28.108.0/22
186.30.120.0/22
186.31.155.0/24
190.26.30.0/23
Signature Algorithm: sha256WithRSAEncryption
50:a1:10:32:ad:95:43:09:7d:a8:55:e2:2d:a7:fd:d4:1c:09:
a4:6d:50:12:e3:b8:0b:2d:53:e3:c4:cc:3f:f7:17:2b:87:c5:
39:9b:42:cc:55:18:68:0b:1b:85:63:ae:13:92:d9:bb:0e:63:
b7:eb:86:54:7d:d7:98:2a:66:fa:15:54:01:c2:2d:1d:d6:03:
35:19:cc:4f:94:2d:97:8a:da:d8:d9:4a:49:84:45:95:ac:c4:
4a:58:ca:5d:c5:61:9c:45:b9:80:cf:0d:2b:8f:6e:67:3f:b0:
c9:6f:44:b9:47:08:76:17:c6:43:97:b6:b4:aa:25:47:c8:5a:
08:39:77:84:21:34:1b:8c:89:56:3e:07:12:4c:cf:cf:e2:70:
21:45:82:36:26:59:22:8b:cc:d3:e8:5d:56:26:d1:08:b3:79:
0f:e1:0f:27:fb:83:a3:3a:71:a0:ea:0a:4f:5f:f3:8e:d4:be:
f4:47:d5:a8:46:e2:84:16:fc:fe:10:d0:dc:7c:71:00:06:f1:
99:a3:8c:6d:79:73:12:19:6b:87:1b:34:67:fb:3f:0e:ce:8a:
57:ce:88:25:c9:57:e5:19:f3:6d:97:e4:17:0c:88:46:6a:31:
da:92:4f:e5:9d:b5:e6:b8:63:b3:7c:d8:80:41:4b:8f:ee:42:
b2:7c:af:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org