Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/05496e923e9314197bab63a7e86bf3681f8d831f.roa
File: 05496e923e9314197bab63a7e86bf3681f8d831f.roa (raw, json)
Hash identifier: 5pFBGM4V9iNxxjGaZ8URJMRk3CavbTKo1/e85I6eaCc=
Subject key identifier: 89:B2:44:1B:AE:C5:A2:31:BB:F5:9A:BA:6D:F0:EB:42:A3:D6:58:32
Certificate issuer: /CN=3fd7e91493678e5c49e72c20d07d4a277e63f224
Certificate serial: 0DB819
Authority key identifier: 53:47:76:B6:35:82:22:3D:B7:70:E1:E7:C8:FC:AB:13:24:64:75:A5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fd7e91493678e5c49e72c20d07d4a277e63f224.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/05496e923e9314197bab63a7e86bf3681f8d831f.roa
Signing time: Wed 24 Mar 2021 14:30:00 +0000
ROA not before: Wed 24 Mar 2021 14:30:00 +0000
ROA not after: Tue 24 Mar 2026 14:30:00 +0000
asID: 27960
IP address blocks: 179.60.96.0/20 maxlen: 22
190.122.32.0/20 maxlen: 22
190.122.48.0/20 maxlen: 22
200.49.120.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 899097 (0xdb819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd7e91493678e5c49e72c20d07d4a277e63f224
Validity
Not Before: Mar 24 14:30:00 2021 GMT
Not After : Mar 24 14:30:00 2026 GMT
Subject: CN=05496e923e9314197bab63a7e86bf3681f8d831f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:72:f7:a8:0f:60:44:02:d8:40:7d:23:b9:a2:
6e:55:df:dc:74:23:d1:c6:bc:42:55:4a:9e:e5:e1:
81:73:5e:e8:75:ee:30:9c:b6:d7:69:ad:fd:20:57:
ea:b4:01:f7:f1:33:27:66:04:5c:d7:62:3a:da:ef:
ec:72:e0:9f:8b:a0:24:da:63:cc:6f:9c:81:b9:f7:
06:9c:f9:a3:05:b1:b2:2e:a6:06:e5:e8:01:c9:12:
9d:36:6b:d2:65:11:16:8a:80:3d:79:84:96:0b:4a:
30:e1:88:63:ea:7a:c7:f1:48:d0:97:b6:d3:7d:73:
01:f5:83:64:2e:28:28:1b:7b:d7:19:22:70:16:28:
08:d4:0b:0d:21:bb:96:46:7f:cd:5f:a2:d7:03:7d:
76:65:eb:fa:81:bf:23:37:5a:4a:9a:96:ba:0d:48:
7e:80:3b:1d:92:4c:bf:3b:87:0b:c8:22:ef:8e:e8:
97:d6:35:fc:3d:c8:ab:38:fa:2d:be:86:e1:fd:27:
30:1b:80:a7:6e:e4:a4:eb:aa:1d:cc:ca:4a:78:61:
d6:71:82:66:4e:b2:b0:11:e2:6d:b4:c5:ff:4c:9a:
88:0f:7e:62:0b:d1:76:92:f4:e3:40:46:90:b0:99:
1d:69:a5:cd:75:3b:62:ad:64:59:41:58:9f:74:ed:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B2:44:1B:AE:C5:A2:31:BB:F5:9A:BA:6D:F0:EB:42:A3:D6:58:32
X509v3 Authority Key Identifier:
keyid:53:47:76:B6:35:82:22:3D:B7:70:E1:E7:C8:FC:AB:13:24:64:75:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fd7e91493678e5c49e72c20d07d4a277e63f224.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/05496e923e9314197bab63a7e86bf3681f8d831f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/3fd7e91493678e5c49e72c20d07d4a277e63f224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.96.0/20
190.122.32.0/19
200.49.120.0/21
Signature Algorithm: sha256WithRSAEncryption
10:b0:37:5b:38:e5:ae:26:51:45:10:3c:b3:65:94:3d:ec:ac:
77:3c:59:a1:ea:7d:52:0e:88:a1:71:44:c5:24:be:69:c5:c8:
d9:df:58:ec:4f:59:4c:05:f8:49:99:7b:58:99:14:ee:4b:46:
a1:4d:f9:1c:e8:44:a5:cb:31:fb:1d:07:d4:80:05:31:9e:bb:
47:e3:4a:40:11:8d:e1:78:35:ca:28:41:4d:74:7c:f8:e2:7a:
01:57:75:60:2f:83:1e:c7:be:41:fe:3d:d4:cc:6a:27:0c:e9:
33:57:cd:1e:bd:3d:bf:ec:bf:5d:2f:34:16:5f:47:d1:1c:54:
1c:af:b6:f8:ec:e8:07:ad:b3:9c:32:dd:e1:98:fe:d5:e2:aa:
92:41:aa:0b:f1:fd:0c:63:5b:a4:6d:2c:7c:74:67:f7:08:a0:
12:b3:20:ca:12:3c:ab:6a:bd:27:b0:99:b1:3f:b3:8f:c2:4b:
32:d3:eb:68:4a:0c:e1:ff:99:e6:7e:37:93:73:25:3e:31:4b:
6f:87:38:3d:5a:a4:96:90:91:5c:49:fd:2a:fb:d8:9f:dc:c7:
1c:cc:24:c1:67:71:b5:0d:0b:dc:60:a7:f0:01:cc:97:01:0e:
82:e9:8b:86:1f:7c:c5:f3:07:90:bc:dd:57:ff:1e:b3:4a:40:
c4:24:4d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:52 2023 by rpki-client on console-ams.rpki-client.org