Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/1161e611ebf003b4d34d3b22d6da59013a871ee5.roa
File: 1161e611ebf003b4d34d3b22d6da59013a871ee5.roa (raw, json)
Hash identifier: H14nhweop4fHJCICaPdb2Guc1K5VvrqN58HJtMGqZlQ=
Subject key identifier: E7:74:A0:70:86:32:43:35:8A:B8:AB:98:E9:45:1A:94:C0:BF:C7:16
Certificate issuer: /CN=09a203b64348f1b177ff9d7141f0356733b30843
Certificate serial: 248F11
Authority key identifier: C8:23:D6:7D:AD:B0:7E:45:58:BD:2F:96:39:0F:1D:91:87:F9:B9:70
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a203b64348f1b177ff9d7141f0356733b30843.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/1161e611ebf003b4d34d3b22d6da59013a871ee5.roa
Signing time: Wed 25 Oct 2023 19:18:56 +0000
ROA not before: Wed 25 Oct 2023 19:18:56 +0000
ROA not after: Sat 25 Oct 2025 19:18:56 +0000
asID: 27979
IP address blocks: 190.93.224.0/20 maxlen: 20
200.73.208.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2395921 (0x248f11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a203b64348f1b177ff9d7141f0356733b30843
Validity
Not Before: Oct 25 19:18:56 2023 GMT
Not After : Oct 25 19:18:56 2025 GMT
Subject: CN=1161e611ebf003b4d34d3b22d6da59013a871ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fd:68:92:45:41:39:ae:cd:0c:fd:97:44:96:
5e:ef:5d:69:e3:57:3a:3e:5c:ab:9c:5f:65:21:ce:
7c:ef:bf:39:9a:03:64:fd:a6:44:de:80:5c:6a:24:
44:89:85:11:95:2a:bf:c0:91:8e:a4:77:34:3c:01:
16:91:00:ce:6f:6f:8e:9e:b6:34:02:10:e2:24:a0:
f4:0b:6f:71:09:4b:e6:61:38:0d:7c:00:9e:23:f8:
27:02:24:85:59:ab:49:8c:8a:d0:7b:4e:10:68:63:
29:e8:36:2b:93:75:c3:17:9a:50:95:2d:5e:71:50:
99:d8:3f:67:21:ca:2d:43:dd:98:8c:0c:ee:6e:b1:
bc:31:da:bf:fa:12:98:93:42:cd:7f:c7:0f:fa:f4:
39:aa:25:ed:d5:84:f7:b3:81:8a:cd:17:f6:31:0d:
2d:51:d1:3c:0a:bb:de:61:f0:c8:9f:98:9d:24:2d:
9c:14:26:56:5b:ec:bb:04:d3:f8:56:c1:5e:13:dc:
45:f1:0b:6c:84:dd:52:6c:10:25:c1:9c:ba:9e:36:
4c:3b:95:98:6c:f7:7a:6e:de:30:d3:1d:23:71:ff:
ae:e1:69:a0:03:3c:74:51:15:73:1a:86:aa:94:a0:
ac:54:e3:29:35:b2:79:fb:f9:87:6d:58:19:99:cf:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:74:A0:70:86:32:43:35:8A:B8:AB:98:E9:45:1A:94:C0:BF:C7:16
X509v3 Authority Key Identifier:
keyid:C8:23:D6:7D:AD:B0:7E:45:58:BD:2F:96:39:0F:1D:91:87:F9:B9:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a203b64348f1b177ff9d7141f0356733b30843.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/1161e611ebf003b4d34d3b22d6da59013a871ee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/09a203b64348f1b177ff9d7141f0356733b30843.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.224.0/20
200.73.208.0/21
Signature Algorithm: sha256WithRSAEncryption
90:01:bb:f3:bb:52:fe:1f:e4:45:1a:a0:28:ee:31:53:3c:0a:
3f:a7:82:d0:6d:c4:1b:2a:be:f4:d9:71:ce:64:31:de:5e:17:
ac:b1:55:19:12:4c:eb:29:f9:82:47:33:c3:3f:db:c6:6c:b8:
d6:3c:8a:46:7c:0a:6d:7b:b2:a7:4f:0b:3e:c9:05:54:4c:a2:
41:cd:2f:8a:d8:45:b7:2c:60:52:ca:fb:83:62:81:84:d2:83:
87:54:86:b9:c7:28:22:b3:77:dd:5e:bc:5a:b9:ab:b5:8a:0c:
3c:7d:95:5f:a2:1a:8d:41:3f:7e:67:48:20:d0:63:06:38:ec:
39:30:04:d8:0c:34:ab:eb:a4:73:68:1a:27:9a:b9:e0:b5:eb:
63:b6:13:cf:47:fe:27:a1:b8:ee:06:f6:28:80:6d:5f:b7:8f:
c2:e3:bd:be:61:7a:ba:84:e7:20:3c:b6:0e:dd:30:0b:7c:20:
93:d8:ec:8a:75:d7:4a:17:b9:0a:21:05:93:a3:76:ea:76:94:
b4:e8:eb:80:65:4e:53:09:b3:c0:17:26:7f:b4:94:7f:45:49:
4f:b0:56:20:68:2f:2b:bd:27:03:63:c8:1f:49:d5:57:cf:96:
a0:e1:e4:21:c9:98:40:b1:37:d6:5a:f2:8c:7c:f4:ee:3d:8f:
12:be:7f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 06:24:56 2023 by rpki-client on console-fra.rpki-client.org