Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/e660f7f88d9758090555ea0b8c62405f691dc235.roa
File: e660f7f88d9758090555ea0b8c62405f691dc235.roa (raw, json)
Hash identifier: 1YAT2yVnrYbniZsk9NX3UcJzsl6bhqPKeSGUWXmEn28=
Subject key identifier: F8:0F:7A:C2:A8:EB:65:BA:AE:8B:E0:C2:59:E5:01:6B:1D:FF:43:D1
Certificate issuer: /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial: 1072C1
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/e660f7f88d9758090555ea0b8c62405f691dc235.roa
Signing time: Thu 01 Jul 2021 06:00:24 +0000
ROA not before: Thu 01 Jul 2021 03:00:00 +0000
ROA not after: Wed 01 Jul 2026 03:00:00 +0000
asID: 262172
IP address blocks: 190.143.128.0/18 maxlen: 24
190.143.192.0/19 maxlen: 24
190.143.224.0/20 maxlen: 24
200.119.128.0/20 maxlen: 24
200.119.144.0/22 maxlen: 24
200.119.148.0/23 maxlen: 24
200.119.150.0/24 maxlen: 24
200.119.154.0/23 maxlen: 24
200.119.156.0/22 maxlen: 24
200.119.160.0/20 maxlen: 24
200.119.176.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1077953 (0x1072c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Validity
Not Before: Jul 1 03:00:00 2021 GMT
Not After : Jul 1 03:00:00 2026 GMT
Subject: CN=e660f7f88d9758090555ea0b8c62405f691dc235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b9:bd:ed:db:b0:63:30:0a:d2:f3:c1:e4:53:
e1:bc:33:8f:fc:fe:94:d9:53:d5:dc:fd:51:be:7a:
5d:48:45:94:58:fb:65:50:07:55:9f:6b:c5:2f:54:
8f:9e:15:8c:30:07:f9:87:ee:ba:9c:b7:62:66:65:
27:92:5d:53:7c:20:ab:26:d6:bc:3b:4f:72:1f:04:
bd:67:8e:32:cc:72:6d:ed:fc:35:a6:f9:bd:2b:4c:
9a:9c:dc:60:ef:ad:9d:d4:6b:d6:2c:d1:3a:64:af:
aa:26:9b:ee:3f:2e:92:fb:76:2c:5d:f5:f5:6e:42:
8f:4f:f6:b6:15:78:b8:70:3e:c0:8b:13:ca:64:13:
e0:10:77:14:dc:82:67:9c:46:78:b7:d5:30:12:d1:
2f:89:5a:b4:7d:60:73:28:8a:57:f9:eb:59:83:5e:
33:d2:ed:94:46:c6:15:b3:e8:01:a4:88:ad:cd:69:
0b:6a:17:70:ce:ca:68:8e:93:54:4f:1a:f3:30:b3:
10:82:51:26:a9:e2:49:cd:c4:c6:19:e2:d1:3d:c2:
f2:51:af:ca:37:e4:7c:dc:07:c7:bd:97:96:6d:c7:
6c:0a:10:0c:b1:d6:b8:f4:dc:99:de:0c:3a:7a:bf:
f3:72:17:35:12:8c:f9:d6:87:7b:1a:22:a2:ef:5a:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0F:7A:C2:A8:EB:65:BA:AE:8B:E0:C2:59:E5:01:6B:1D:FF:43:D1
X509v3 Authority Key Identifier:
keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/e660f7f88d9758090555ea0b8c62405f691dc235.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.143.128.0-190.143.239.255
200.119.128.0-200.119.150.255
200.119.154.0-200.119.183.255
Signature Algorithm: sha256WithRSAEncryption
48:7b:82:71:60:c2:ed:65:79:0a:8a:10:be:ce:f9:79:28:51:
bc:98:72:bc:26:2a:ef:30:ee:01:16:af:46:f2:a8:35:f0:75:
d5:d8:14:79:6f:a6:9f:bb:bb:87:cc:5d:7f:73:e7:37:3b:22:
28:83:30:0f:8a:8c:86:f3:f0:94:32:1f:5c:22:b4:6a:35:fb:
ee:a4:41:53:48:3a:3a:2b:6c:61:c7:b8:a4:bf:ee:52:c6:e1:
fd:7b:80:94:c6:38:8f:07:32:d7:39:bd:6e:07:89:2b:4e:1d:
95:19:cc:bb:6a:62:22:05:f0:55:f7:ce:eb:ad:21:c2:d1:95:
0e:ed:28:a4:a5:21:c1:69:41:0a:ec:36:88:5d:ef:1d:24:8c:
87:ac:ed:62:b7:4b:f5:b4:80:13:98:a2:fe:26:dd:9a:30:ce:
b5:d1:f1:aa:01:2a:07:cd:5c:c6:34:5c:a4:b5:ba:66:17:4f:
c6:d5:1a:59:af:7f:cb:60:87:48:c4:20:50:ec:90:5b:8f:36:
27:55:fd:97:9a:eb:0a:f8:93:9d:28:b8:e7:16:25:97:a8:bd:
e9:c4:fa:b0:b1:59:93:da:bd:68:74:bb:5a:82:b8:0e:e2:62:
5a:a0:24:a2:8d:0c:e5:00:3d:fa:dd:a2:35:1e:d7:62:d3:be:
9a:41:f8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org