Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/153bfb3ac34c11ffaae6f8fa8c19eb2c28e406c1.roa
File: 153bfb3ac34c11ffaae6f8fa8c19eb2c28e406c1.roa (raw, json)
Hash identifier: mtQPQ2yHZbeBiK22wkB+gYYXDboMk99wyrYSAfAa17k=
Subject key identifier: BF:AC:9A:3E:76:62:F2:B7:A9:46:4F:F2:C2:AD:71:EA:07:C2:D7:25
Certificate issuer: /CN=09a203b64348f1b177ff9d7141f0356733b30843
Certificate serial: 0D3B81
Authority key identifier: C8:23:D6:7D:AD:B0:7E:45:58:BD:2F:96:39:0F:1D:91:87:F9:B9:70
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a203b64348f1b177ff9d7141f0356733b30843.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/153bfb3ac34c11ffaae6f8fa8c19eb2c28e406c1.roa
Signing time: Wed 24 Mar 2021 14:34:14 +0000
ROA not before: Wed 24 Mar 2021 14:34:14 +0000
ROA not after: Tue 24 Mar 2026 14:34:14 +0000
asID: 27979
IP address blocks: 190.93.224.0/20 maxlen: 20
200.73.208.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867201 (0xd3b81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a203b64348f1b177ff9d7141f0356733b30843
Validity
Not Before: Mar 24 14:34:14 2021 GMT
Not After : Mar 24 14:34:14 2026 GMT
Subject: CN=153bfb3ac34c11ffaae6f8fa8c19eb2c28e406c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c0:8a:39:3a:51:b3:2d:74:69:f6:1f:a0:06:
53:f9:83:18:9f:72:ba:88:58:06:81:6d:e2:e5:3a:
c7:fe:4d:36:3d:ff:91:a1:8b:bd:3c:63:20:95:af:
3d:4a:f3:24:da:3a:d4:be:3b:2a:8c:77:0d:e0:6c:
6c:ca:da:2f:61:84:8f:a9:b1:5e:30:42:90:8c:78:
19:fb:3e:3b:2d:8b:af:87:72:99:ca:56:6b:65:45:
a5:7e:30:3d:d1:0b:40:ef:b4:cd:4c:a2:dd:e6:24:
43:e5:b2:84:35:93:9e:de:6f:17:ac:00:d5:b0:7a:
69:dc:f9:a4:64:9c:7a:55:1c:ff:51:1c:22:ec:71:
5a:e4:1d:15:37:4d:09:37:2a:62:5c:4c:70:5c:c4:
67:3e:bf:e8:c5:e4:59:0a:04:8c:71:0a:55:75:6e:
e3:8f:b7:19:dc:4a:59:2a:c4:94:b5:32:8d:dc:d6:
ae:f2:52:ac:b1:89:fe:9a:6c:48:42:ef:0e:c4:1f:
56:8a:be:1a:05:af:eb:75:df:27:1a:41:ba:fc:c8:
2a:eb:29:14:cd:81:95:32:29:d0:51:1a:21:70:1a:
bc:47:06:94:f1:73:fb:42:e7:d9:fc:81:43:1f:6e:
c1:7a:4e:9f:1a:bf:ab:37:7a:f8:56:b9:49:dd:68:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AC:9A:3E:76:62:F2:B7:A9:46:4F:F2:C2:AD:71:EA:07:C2:D7:25
X509v3 Authority Key Identifier:
keyid:C8:23:D6:7D:AD:B0:7E:45:58:BD:2F:96:39:0F:1D:91:87:F9:B9:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a203b64348f1b177ff9d7141f0356733b30843.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/153bfb3ac34c11ffaae6f8fa8c19eb2c28e406c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/09a203b64348f1b177ff9d7141f0356733b30843.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.224.0/20
200.73.208.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:aa:6d:96:2a:5b:e6:81:ec:38:1d:ff:40:58:99:f4:e4:c1:
b7:70:9f:eb:f6:d5:66:58:5a:10:e2:26:4b:69:eb:72:e6:06:
3c:f4:34:4a:12:c6:f2:f7:df:af:38:e2:cc:71:7c:4f:76:23:
42:01:db:47:a0:49:cb:bb:2e:ad:1f:86:66:b2:c1:9b:94:f0:
40:e7:ec:f8:e3:1d:cd:2b:16:14:5e:c3:f2:1f:f4:b0:30:63:
d8:1b:c3:f8:60:6c:ca:e2:45:3e:61:9a:f4:8b:fc:ca:b0:d8:
94:85:c8:75:b8:a9:76:1a:e1:e0:36:db:ef:58:b6:97:04:3a:
10:25:25:37:fe:6d:33:df:c6:4c:6d:ae:35:54:85:e4:4e:73:
96:22:28:34:06:12:40:cf:69:be:60:98:f2:a5:1e:31:aa:8b:
0b:ac:d6:b2:b4:2f:55:f9:c8:e2:24:dd:4a:6a:16:ea:6a:dc:
f3:ab:9f:7a:cf:37:28:9a:4e:b6:82:92:38:63:be:ec:ff:e3:
6e:b2:16:65:e3:e9:a2:f6:b5:5a:9d:f9:94:98:f9:ed:c0:52:
7d:34:4d:17:12:fe:7c:1c:68:ec:14:03:de:cf:61:98:12:50:
dc:b0:6d:4f:09:85:fc:bb:7f:7d:18:22:75:e7:8e:6e:c8:18:
7a:b0:91:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 20:07:26 2023 by rpki-client on console-fra.rpki-client.org