Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/97d41d4e5d1589f368dc65a7565860a195600228.roa
File: 97d41d4e5d1589f368dc65a7565860a195600228.roa (raw, json)
Hash identifier: J71QME8bZ382qR4Mi52f59AM35avYG8gbg6h7/3tmvM=
Subject key identifier: E1:FC:BA:4F:77:0E:6F:89:CB:68:00:6D:87:80:A7:8B:3C:E1:7F:3A
Certificate issuer: /CN=3ec2580c7b1428c52b125216e3788d1f223af85f
Certificate serial: 05B200
Authority key identifier: D1:17:91:28:50:01:02:52:FE:D7:CD:F1:D3:6D:F5:FA:E3:8E:1D:15
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ec2580c7b1428c52b125216e3788d1f223af85f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/97d41d4e5d1589f368dc65a7565860a195600228.roa
Signing time: Mon 02 Aug 2021 17:02:04 +0000
ROA not before: Mon 02 Aug 2021 03:00:00 +0000
ROA not after: Wed 02 Aug 2023 03:00:00 +0000
asID: 262186
IP address blocks: 177.93.32.0/19 maxlen: 24
181.225.96.0/20 maxlen: 24
186.96.96.0/19 maxlen: 24
186.148.160.0/19 maxlen: 24
186.179.96.0/20 maxlen: 24
186.190.224.0/21 maxlen: 24
190.2.208.0/21 maxlen: 24
190.13.80.0/21 maxlen: 24
191.97.0.0/20 maxlen: 24
191.102.64.0/18 maxlen: 24
192.144.112.0/22 maxlen: 24
200.69.64.0/19 maxlen: 24
2803:1a00::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373248 (0x5b200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec2580c7b1428c52b125216e3788d1f223af85f
Validity
Not Before: Aug 2 03:00:00 2021 GMT
Not After : Aug 2 03:00:00 2023 GMT
Subject: CN=97d41d4e5d1589f368dc65a7565860a195600228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ad:e5:29:fa:78:5e:6b:0e:26:0e:d3:4b:7c:
0b:ea:82:76:c3:7c:ed:e3:b7:e3:17:ce:7a:47:f8:
b1:cf:26:dd:61:92:4d:07:d8:1e:50:62:01:c1:c4:
dc:c1:fd:32:fa:9a:28:a5:91:b3:16:1f:1c:da:61:
ca:de:fa:f4:80:11:fa:b4:0e:d9:76:94:5a:77:d3:
e9:0f:96:92:8e:60:40:46:c1:46:67:b7:36:90:6a:
a4:55:06:54:16:d9:0a:79:19:31:91:61:f5:27:19:
6d:05:3e:78:9c:2e:43:17:1a:28:49:16:f2:d6:06:
59:2b:b1:0c:71:5a:16:c1:b0:ad:15:e9:94:83:8a:
63:c1:50:f5:06:55:1b:ee:0f:42:1c:43:44:77:16:
27:7b:0e:74:72:a8:20:fa:5e:09:5d:4b:93:94:2b:
f3:98:b8:a0:63:dc:a4:36:b0:c7:cb:26:51:b2:5b:
d8:a3:a2:d7:46:34:c8:43:ed:22:b0:ec:b0:04:45:
65:ee:4b:c8:9d:c4:a4:a4:31:92:ac:3b:02:82:89:
17:3c:79:2e:b5:d2:8c:ef:a4:7b:e2:48:88:9a:b2:
cd:fc:ca:4b:de:8a:f2:e1:9f:d7:c9:d2:38:c7:18:
1c:18:b0:6e:e5:26:d2:9b:21:d0:35:3d:61:de:9b:
68:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FC:BA:4F:77:0E:6F:89:CB:68:00:6D:87:80:A7:8B:3C:E1:7F:3A
X509v3 Authority Key Identifier:
keyid:D1:17:91:28:50:01:02:52:FE:D7:CD:F1:D3:6D:F5:FA:E3:8E:1D:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ec2580c7b1428c52b125216e3788d1f223af85f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/97d41d4e5d1589f368dc65a7565860a195600228.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/3ec2580c7b1428c52b125216e3788d1f223af85f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.93.32.0/19
181.225.96.0/20
186.96.96.0/19
186.148.160.0/19
186.179.96.0/20
186.190.224.0/21
190.2.208.0/21
190.13.80.0/21
191.97.0.0/20
191.102.64.0/18
192.144.112.0/22
200.69.64.0/19
IPv6:
2803:1a00::/32
Signature Algorithm: sha256WithRSAEncryption
45:77:c6:7f:75:29:a3:7c:87:e8:b8:bd:f7:ab:2b:aa:e2:0d:
06:f6:50:f2:f6:04:8a:06:38:e0:90:ef:a9:0b:4c:57:95:e8:
98:2c:0c:4f:08:fc:d7:29:42:73:32:9e:f2:fe:9a:8c:72:c9:
92:2d:3f:f2:bf:0a:f2:2a:19:e0:af:72:c5:e1:ca:ca:a1:a9:
a4:e7:41:54:d2:63:23:b6:90:1e:ca:aa:e4:95:c9:44:4c:32:
40:42:e9:17:d5:67:3e:34:7a:c0:23:95:b0:b4:a3:82:01:3a:
e2:3d:4a:6d:fa:d8:e9:1e:1a:bf:e5:3d:b4:65:9b:0b:43:b4:
2e:ff:f9:4c:af:41:f1:21:79:40:08:f2:4c:b8:df:3e:6f:f4:
f0:2d:9e:10:18:6e:29:bf:76:38:d6:5b:bd:ce:f1:cb:cf:ad:
28:b1:b7:53:c7:89:5d:de:f2:ed:cb:e0:fb:89:b5:d2:aa:d8:
9e:ed:9a:51:b4:d3:30:35:15:7d:82:2e:c5:c1:4e:e8:c3:24:
2f:4e:3f:8e:5f:df:28:cc:58:25:b8:d0:ae:96:ee:ea:41:f0:
43:a2:2a:09:c4:2e:09:fb:50:b7:d5:0e:9e:70:a2:50:8f:98:
c2:80:30:cd:ec:d1:c6:9e:bd:1d:31:8c:e3:39:1e:ba:14:36:
4b:a1:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 09:24:15 2023 by rpki-client on console-ams.rpki-client.org