Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/8e5e177106e9a366e18fa2ddfce9c60b796bedf5.roa
File: 8e5e177106e9a366e18fa2ddfce9c60b796bedf5.roa (raw, json)
Hash identifier: Bz2Kb09XYAzC0jo46ISxixnLKVcXl4jBSs0LzvJxIwQ=
Subject key identifier: 64:ED:7C:A0:FF:EF:31:AA:50:44:03:29:0D:73:C6:EE:09:88:FA:B5
Certificate issuer: /CN=3fd7e91493678e5c49e72c20d07d4a277e63f224
Certificate serial: 1931FB
Authority key identifier: 53:47:76:B6:35:82:22:3D:B7:70:E1:E7:C8:FC:AB:13:24:64:75:A5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fd7e91493678e5c49e72c20d07d4a277e63f224.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/8e5e177106e9a366e18fa2ddfce9c60b796bedf5.roa
Signing time: Tue 12 Jul 2022 12:32:50 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Sun 24 Mar 2030 03:00:00 +0000
asID: 27960
IP address blocks: 179.60.96.0/20 maxlen: 23
190.122.32.0/20 maxlen: 23
190.122.48.0/20 maxlen: 23
200.49.120.0/21 maxlen: 23
2803:d080::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1651195 (0x1931fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd7e91493678e5c49e72c20d07d4a277e63f224
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2030 GMT
Subject: CN=8e5e177106e9a366e18fa2ddfce9c60b796bedf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d0:b9:a7:48:26:6d:21:d4:7e:bb:14:26:2a:
d1:59:a4:ba:80:04:b0:93:bc:97:35:6c:23:30:40:
01:b0:21:48:14:0d:34:40:27:fb:9c:89:ce:ba:56:
14:6e:68:a2:d2:18:99:3f:99:6c:1c:69:b2:8c:cc:
e8:81:f2:5d:a7:83:da:8c:bf:0c:c5:95:01:ee:92:
9e:bb:df:25:d6:2c:d7:f1:06:cb:40:72:f1:e4:8e:
48:e7:e9:88:a9:cd:dd:31:73:c3:25:96:8e:b5:08:
6b:88:ad:76:e8:f6:fd:ec:7f:ca:ec:49:cf:5e:29:
97:bd:ce:44:3f:0f:e4:d0:e0:9a:1d:6d:48:7c:73:
25:c7:4b:8c:c3:25:53:8b:f2:17:0e:73:9c:de:d4:
c9:fd:0d:94:3a:19:52:05:66:c5:05:99:2b:c4:19:
b1:7e:12:47:98:00:09:dd:1f:7d:c2:45:a9:dd:ac:
e0:9c:35:c6:3d:dd:e0:6b:7d:93:06:b7:7c:16:d1:
ec:56:72:e6:71:ec:57:51:d0:b0:a6:6f:3b:46:51:
fc:8a:66:d0:b4:8c:8d:e7:33:cb:34:5c:26:67:42:
71:5f:43:2c:61:ca:b1:0c:e1:90:5f:58:ba:6d:71:
3c:d4:ee:78:72:3e:24:3e:1c:a6:e3:2b:a3:98:8c:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:ED:7C:A0:FF:EF:31:AA:50:44:03:29:0D:73:C6:EE:09:88:FA:B5
X509v3 Authority Key Identifier:
keyid:53:47:76:B6:35:82:22:3D:B7:70:E1:E7:C8:FC:AB:13:24:64:75:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fd7e91493678e5c49e72c20d07d4a277e63f224.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/8e5e177106e9a366e18fa2ddfce9c60b796bedf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/3fd7e91493678e5c49e72c20d07d4a277e63f224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.96.0/20
190.122.32.0/19
200.49.120.0/21
IPv6:
2803:d080::/32
Signature Algorithm: sha256WithRSAEncryption
66:31:ad:ab:75:1f:41:fc:c8:45:68:ed:bd:d7:67:69:1f:5c:
2c:9d:dc:9f:39:a3:17:d0:2c:07:c1:89:e4:4d:de:ca:b8:03:
9c:17:94:b0:d5:bc:ee:1e:3b:5c:f6:b3:8e:49:9c:a7:68:84:
0e:bb:be:9d:56:30:ed:c2:75:2d:a1:3c:6d:68:82:ac:f8:eb:
e4:43:6d:19:bb:5f:19:80:80:f8:2f:5c:ed:d6:11:ef:cb:b1:
c0:27:78:7c:f2:47:11:b2:f9:37:f3:54:14:0f:40:87:44:22:
c8:3c:72:66:89:ff:43:3e:26:8d:9c:a5:e5:6a:77:f6:f2:22:
c5:a5:40:25:71:2c:fe:dc:48:6f:da:73:af:00:8c:9d:3b:7e:
54:7a:5f:4f:64:da:be:5a:06:91:af:1c:be:41:e9:13:b0:b4:
3c:36:d3:a2:21:d9:67:20:4e:fd:f9:c2:21:2e:a3:31:5a:c8:
44:01:7b:6e:e8:89:86:dd:c6:16:e8:48:c3:d3:1d:4f:c3:6d:
6b:6e:f2:ff:36:40:49:20:dd:c4:c1:78:55:1c:ef:84:e3:1e:
17:aa:78:52:98:e6:f4:dd:69:6a:25:67:f9:63:85:e7:ff:ce:
0f:b5:52:02:69:ff:4f:d0:0c:8b:53:24:f9:4e:6c:86:bb:a1:
b1:be:6d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-fra.rpki-client.org