Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/a64b0243b6023dc26bd1c205284aa1f92e85cb4c.roa
File: a64b0243b6023dc26bd1c205284aa1f92e85cb4c.roa (raw, json)
Hash identifier: zDlbmFwfrGaofYDtcZK99+fcSV6IgXukviq1HAWYpFE=
Subject key identifier: 13:41:E2:43:4A:FC:FF:15:D7:32:E5:2E:22:22:EF:1D:4A:AF:16:22
Certificate issuer: /CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Certificate serial: 0D44E4
Authority key identifier: D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/a64b0243b6023dc26bd1c205284aa1f92e85cb4c.roa
Signing time: Wed 24 Mar 2021 14:39:23 +0000
ROA not before: Wed 24 Mar 2021 14:39:22 +0000
ROA not after: Tue 24 Mar 2026 14:39:22 +0000
asID: 27738
IP address blocks: 190.131.128.0/18 maxlen: 24
190.130.128.0/17 maxlen: 24
190.131.0.0/18 maxlen: 24
190.131.64.0/18 maxlen: 24
200.124.224.0/20 maxlen: 28
200.124.240.0/20 maxlen: 24
201.183.0.0/16 maxlen: 24
2800:440::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jan 2024 15:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869604 (0xd44e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Validity
Not Before: Mar 24 14:39:22 2021 GMT
Not After : Mar 24 14:39:22 2026 GMT
Subject: CN=a64b0243b6023dc26bd1c205284aa1f92e85cb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8f:15:fa:ef:6c:47:62:0d:dc:e0:0b:ab:fd:
ac:c3:35:2a:d0:b8:80:6e:c4:d7:04:43:92:ab:2e:
98:ed:72:ce:11:1a:34:44:64:5a:8d:91:2e:b3:62:
93:92:35:4b:3e:e8:b0:85:0e:77:60:56:71:5e:75:
84:ae:3c:3b:23:6d:00:01:07:64:9e:97:23:1e:4e:
c0:07:42:fd:b0:db:4d:cd:51:3f:65:dd:05:c7:99:
07:45:f2:ae:54:d7:c1:11:92:53:c8:fb:5c:ea:02:
5c:15:5b:db:60:b7:57:6a:3b:af:68:e8:60:7b:15:
4d:29:8d:73:b5:76:4c:b0:ab:44:ee:f8:95:85:af:
40:96:76:05:de:1d:bc:4d:fd:7d:8e:36:8c:7c:d0:
60:81:bd:37:9d:da:ab:e4:cb:e2:de:3a:d9:31:d7:
17:c5:f6:e5:43:bc:a2:7d:3f:a8:48:6d:c9:3b:e8:
cd:d1:49:fc:5e:da:14:2e:4c:11:33:3d:81:82:e6:
b6:c5:df:ae:e5:53:a5:b5:02:1d:b2:ac:6d:f7:b4:
4d:a6:7d:d7:55:01:b8:d6:28:5a:a0:c2:90:57:56:
6f:9d:4c:a6:96:93:05:05:48:40:96:8f:f4:05:b6:
8d:ee:04:0c:c2:63:32:63:b1:6c:3d:9a:30:f2:a3:
96:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:41:E2:43:4A:FC:FF:15:D7:32:E5:2E:22:22:EF:1D:4A:AF:16:22
X509v3 Authority Key Identifier:
keyid:D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/a64b0243b6023dc26bd1c205284aa1f92e85cb4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.130.128.0-190.131.191.255
200.124.224.0/19
201.183.0.0/16
IPv6:
2800:440::/32
Signature Algorithm: sha256WithRSAEncryption
94:ed:3d:d3:f2:3b:4a:70:96:f1:99:d3:ef:b2:d1:51:bc:f9:
b1:9c:7d:4f:c2:54:08:3f:2e:17:0d:7e:95:0d:3f:7c:48:4d:
9d:ca:88:3d:e0:31:99:de:29:ae:7e:b2:2b:4c:9d:79:f3:39:
75:c2:f6:0a:10:75:0f:99:12:8f:0f:93:63:d1:49:e6:39:80:
04:c1:11:30:7a:89:2e:71:d3:0c:a2:4c:8d:c8:a8:0b:6e:0d:
fe:9c:ec:c6:4a:a3:f6:c8:8a:3c:c4:e4:25:f9:53:46:eb:c1:
17:6a:bf:94:fd:e8:e0:23:3c:b5:7c:09:f7:cf:1b:a0:f1:6d:
35:65:aa:3f:7c:db:b6:6c:d7:16:85:a9:92:53:dc:65:a2:71:
25:c1:34:a1:a6:f2:e0:cd:f0:04:b5:53:bf:6f:2e:99:68:52:
74:49:a8:77:6c:67:15:0e:8b:06:35:0a:b8:2d:a2:60:ee:96:
09:9b:4e:95:f0:2a:d2:69:65:02:31:9d:f7:9f:92:2d:b5:f5:
4c:5f:c5:94:85:be:41:2f:6d:d1:8e:c4:20:69:9c:68:08:be:
52:7b:b5:65:f8:c3:c5:4d:14:f8:31:08:7e:de:00:a0:9a:6c:
85:fc:f3:fb:6f:d9:f0:d4:d3:f0:ac:6e:b8:3b:fc:2b:c7:e1:
a5:0d:c7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 18:34:31 2024 by rpki-client on console-fra.rpki-client.org