Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/cb910dc38529792c9d77f06468ccfa74d35b2ace.roa
File: cb910dc38529792c9d77f06468ccfa74d35b2ace.roa (raw, json)
Hash identifier: R1UQFM4vrm5aGZtoaKdoz5GR5Fj0OPFw7R0xL3oiniQ=
Subject key identifier: 03:53:2D:66:DE:9D:B8:57:9F:43:F5:2D:1D:9F:C7:FB:5F:CF:D4:F5
Certificate issuer: /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial: 1C5EB0
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/cb910dc38529792c9d77f06468ccfa74d35b2ace.roa
Signing time: Thu 22 Sep 2022 21:12:31 +0000
ROA not before: Thu 22 Sep 2022 21:10:21 +0000
ROA not after: Sun 22 Sep 2024 21:10:21 +0000
asID: 22368
IP address blocks: 190.96.192.0/21 maxlen: 21
190.96.192.0/24 maxlen: 24
190.96.193.0/24 maxlen: 24
190.96.194.0/23 maxlen: 23
190.96.196.0/23 maxlen: 23
190.96.198.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1859248 (0x1c5eb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Validity
Not Before: Sep 22 21:10:21 2022 GMT
Not After : Sep 22 21:10:21 2024 GMT
Subject: CN=cb910dc38529792c9d77f06468ccfa74d35b2ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:1f:52:2c:6c:b7:70:ac:81:b0:50:14:0c:
2a:8a:f6:02:f8:ba:06:df:f2:50:f3:d5:0c:12:35:
be:08:1e:3c:b3:0b:2f:23:a5:a7:55:f8:01:bb:4e:
3f:8d:de:f8:3a:14:53:3c:b0:a7:b7:04:f7:27:55:
6d:82:52:fb:84:9a:6e:ab:6c:0f:34:6e:81:33:47:
0d:82:59:27:ad:65:b3:bd:df:58:c4:7c:27:2c:e2:
49:1a:ad:c2:f6:c4:d4:2e:31:d8:21:bd:93:d9:37:
b7:41:40:46:2b:5f:50:ce:c1:61:26:70:64:3b:a7:
d3:42:78:96:de:4d:0b:75:93:95:07:36:cd:d8:e5:
b6:ef:9b:3d:2c:39:e9:3f:1f:50:5a:48:aa:f1:f5:
a1:46:b4:56:ba:df:90:0a:dd:f5:c2:c8:1c:78:d9:
7d:be:0f:40:e6:80:01:78:24:fa:01:a8:34:3a:c7:
08:df:04:40:19:a7:5c:8d:1c:a9:0f:13:c2:bc:4d:
ae:45:4d:35:52:d2:46:c5:cf:59:34:a3:9b:cf:65:
ba:01:ed:b3:ca:6d:26:bb:02:62:37:3f:fa:3f:f7:
e1:59:02:3b:16:a5:cb:75:ae:a5:c4:ce:6f:55:a5:
37:81:ab:cd:09:c5:5b:b7:50:09:37:2a:05:ee:4b:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:53:2D:66:DE:9D:B8:57:9F:43:F5:2D:1D:9F:C7:FB:5F:CF:D4:F5
X509v3 Authority Key Identifier:
keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/cb910dc38529792c9d77f06468ccfa74d35b2ace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.96.192.0/21
Signature Algorithm: sha256WithRSAEncryption
af:b2:cb:5f:40:64:5a:6c:9b:12:3e:3a:bc:d5:69:2e:9a:32:
8d:fd:27:c1:9c:0d:7d:f7:da:76:a4:3e:23:67:79:e2:84:d8:
2a:c4:5b:96:f0:75:6b:6b:e1:a3:e6:98:87:53:14:39:67:a2:
1e:a1:a9:6c:ac:79:3e:92:4e:99:a2:9d:94:f9:dc:5b:8b:1e:
08:17:1d:5d:b1:0d:b7:ec:f2:0b:74:a2:01:b9:90:d4:ab:ce:
2a:97:74:00:33:e4:d3:9a:37:dc:9e:2b:ce:dd:8c:ab:eb:af:
45:53:90:9e:77:2d:8d:2b:f1:86:c8:8b:b6:e6:a9:fb:cb:f9:
3a:14:0d:76:da:64:0d:b2:02:fd:fd:71:fc:a1:31:04:cd:a4:
09:0d:d1:cb:97:2e:ab:69:18:02:48:6e:0f:c5:33:2b:c4:a2:
fd:dd:81:c3:fe:0c:17:d0:28:8d:90:39:50:31:21:78:ea:f4:
d6:a8:a4:7d:1e:c7:50:c3:d1:82:58:dc:b5:d7:d8:f9:f2:65:
7e:94:ba:1a:bd:29:65:46:c5:14:c2:26:f5:e3:b9:af:32:2a:
8e:2b:ac:87:34:b5:85:18:00:91:7b:a3:8e:02:1e:89:d0:70:
15:2f:08:72:97:95:62:89:e3:ee:f7:ef:4f:3c:8a:b3:4f:8d:
28:e8:93:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 17:43:26 2023 by rpki-client on console-fra.rpki-client.org