Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/e21cd1ed5238e8607606f6efb93bff6c66ed3dfb.roa
File: e21cd1ed5238e8607606f6efb93bff6c66ed3dfb.roa (raw, json)
Hash identifier: mpUFjnF+jA93lTJXt59gjLZchsMG/CPDE6Vp4axObzw=
Subject key identifier: 98:04:A7:48:CF:3D:CA:E8:25:BD:75:2D:1F:2C:35:C7:1F:2A:C1:F5
Certificate issuer: /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial: 10874A
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/e21cd1ed5238e8607606f6efb93bff6c66ed3dfb.roa
Signing time: Thu 01 Jul 2021 06:11:41 +0000
ROA not before: Thu 01 Jul 2021 03:00:00 +0000
ROA not after: Wed 01 Jul 2026 03:00:00 +0000
asID: 14754
IP address blocks: 190.143.128.0/18 maxlen: 24
190.143.192.0/19 maxlen: 24
190.143.224.0/20 maxlen: 24
200.119.128.0/20 maxlen: 24
200.119.144.0/22 maxlen: 24
200.119.148.0/23 maxlen: 24
200.119.150.0/24 maxlen: 24
200.119.154.0/23 maxlen: 24
200.119.156.0/22 maxlen: 24
200.119.160.0/20 maxlen: 24
200.119.176.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083210 (0x10874a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Validity
Not Before: Jul 1 03:00:00 2021 GMT
Not After : Jul 1 03:00:00 2026 GMT
Subject: CN=e21cd1ed5238e8607606f6efb93bff6c66ed3dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a8:f8:37:f1:cb:2d:0a:56:0d:ae:72:68:a7:
f2:99:cc:2c:3b:71:f4:c0:68:5f:82:b1:83:a2:0f:
9b:93:75:ea:9b:fc:ec:4b:08:2d:b5:b6:9b:67:aa:
d7:ea:be:10:7c:53:26:38:09:11:59:10:e4:2a:8d:
17:ea:72:50:3e:3b:8b:ee:69:5c:6d:74:3f:2a:34:
1b:b5:84:8a:55:16:8d:b5:c4:3f:49:5f:8a:c2:85:
0a:b4:b1:c5:00:4d:28:5a:6d:05:bc:2e:c3:b9:b2:
f6:ef:73:77:ff:3c:0f:5e:fa:ee:01:17:0d:78:05:
0d:31:ad:90:31:26:6e:29:a3:6a:56:1e:5a:e0:b4:
e9:ac:02:c3:7b:42:5a:d3:a8:9d:77:46:d4:08:ec:
d0:25:12:76:19:6d:89:2c:42:c6:ce:e0:9e:32:ab:
c6:42:37:56:7e:a8:3c:89:3c:cb:8e:37:96:cb:d3:
81:81:be:e9:41:2c:24:1c:08:d8:a7:60:0d:3c:67:
15:ca:1f:99:db:4d:75:7a:52:39:2c:fa:48:ea:c9:
ac:7b:1f:93:70:6c:e3:1d:8c:16:e5:09:bc:03:ac:
87:17:a8:cd:60:fe:f5:4f:1e:f3:22:24:66:b0:83:
6a:bf:95:85:58:be:b9:18:2f:59:1b:50:a3:d2:4b:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:04:A7:48:CF:3D:CA:E8:25:BD:75:2D:1F:2C:35:C7:1F:2A:C1:F5
X509v3 Authority Key Identifier:
keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/e21cd1ed5238e8607606f6efb93bff6c66ed3dfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.143.128.0-190.143.239.255
200.119.128.0-200.119.150.255
200.119.154.0-200.119.183.255
Signature Algorithm: sha256WithRSAEncryption
1a:e9:20:e5:ff:98:18:eb:86:8d:95:2f:5f:85:30:fb:12:38:
5d:89:61:0f:06:cb:ad:73:03:c8:5b:1c:c7:5d:44:95:1e:b0:
f9:7c:5f:a9:c2:01:5a:d8:60:28:36:a5:50:83:5b:5c:68:27:
bf:63:2e:15:01:71:17:01:2f:e3:3a:94:4d:33:6f:cc:a7:ac:
fb:57:3a:68:10:6d:67:6c:8a:2b:7c:ff:1b:ee:45:3e:e2:88:
51:bc:ce:80:99:7d:2f:11:7b:d8:78:7a:ee:80:62:64:f8:7f:
8c:6d:bd:10:0c:9e:0c:d4:d4:54:d8:30:e5:b2:45:d2:50:c5:
86:8f:69:b4:47:b8:a3:b0:2b:58:2f:f0:e7:55:ea:38:36:64:
1a:99:ef:69:42:bd:91:39:80:16:d9:76:bd:72:b0:7c:b7:ca:
44:65:62:b4:70:77:35:ca:12:90:21:6c:ff:75:78:28:c1:5d:
be:49:66:43:b0:8d:35:81:99:0c:16:3b:29:59:4f:f7:6e:88:
93:6c:85:46:d9:8e:c8:54:37:0f:db:f9:ca:ce:de:ac:d5:97:
c8:30:a4:38:1c:2a:6c:9c:4c:a7:85:ee:b6:7a:96:86:bc:68:
fa:bb:5f:03:cd:cf:82:f7:43:4b:c9:9e:96:8a:5d:bf:b0:68:
e4:34:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org