Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/d71f9a3033922f82afe195507c21baf00a32921e.roa
File: d71f9a3033922f82afe195507c21baf00a32921e.roa (raw, json)
Hash identifier: iEiUXouIhMepz6kR4RXBD7rbBHUkXdR8TCPFotqXUWw=
Subject key identifier: 85:83:27:2A:D2:15:85:90:BF:45:B3:B2:A6:27:BE:08:83:27:A2:33
Certificate issuer: /CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Certificate serial: 0D36F9
Authority key identifier: D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/d71f9a3033922f82afe195507c21baf00a32921e.roa
Signing time: Wed 24 Mar 2021 14:39:23 +0000
ROA not before: Wed 24 Mar 2021 14:39:22 +0000
ROA not after: Tue 24 Mar 2026 14:39:22 +0000
asID: 27738
IP address blocks: 190.130.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 15:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866041 (0xd36f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Validity
Not Before: Mar 24 14:39:22 2021 GMT
Not After : Mar 24 14:39:22 2026 GMT
Subject: CN=d71f9a3033922f82afe195507c21baf00a32921e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d8:99:ec:e3:60:a4:34:42:61:26:b2:72:0b:
d9:c5:97:eb:49:7e:be:63:f9:8a:65:6d:8d:c3:8d:
81:01:05:cd:0b:fd:ac:72:de:83:de:28:9d:bc:6e:
93:fb:55:a6:69:d7:30:9a:1a:ce:46:f0:2d:9f:cb:
c6:c9:38:a5:2e:e9:82:1e:c1:af:cc:7c:ab:4b:00:
21:9c:ec:9d:4b:fe:eb:44:52:a0:18:2c:94:ac:2d:
99:16:e7:a1:4b:00:d9:a4:70:17:46:e1:16:bd:77:
47:da:a8:2e:ca:a2:99:0c:ee:ba:2a:e6:ac:ac:df:
a5:95:27:f2:40:85:a4:d7:25:8d:cf:2c:35:d2:f1:
d1:cb:c2:75:d4:66:66:77:f6:44:f8:01:7b:d4:ee:
35:fe:c0:73:6e:5d:35:ef:74:4e:5d:3d:d8:73:92:
6a:73:80:79:6b:05:53:44:3a:81:e3:86:63:01:e6:
60:b5:90:44:e8:bc:ff:3c:91:de:4c:e5:08:33:0d:
0e:02:c3:10:06:11:02:8a:b5:5f:a4:ab:7a:87:c9:
01:a8:84:34:1b:5d:14:ce:75:99:36:16:1b:6b:23:
b5:4f:19:eb:12:b8:a3:98:ef:d2:94:bf:0f:76:79:
09:ee:6a:ed:72:cb:ce:78:01:1f:6a:4b:ca:90:7e:
c7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:83:27:2A:D2:15:85:90:BF:45:B3:B2:A6:27:BE:08:83:27:A2:33
X509v3 Authority Key Identifier:
keyid:D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/d71f9a3033922f82afe195507c21baf00a32921e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.130.128.0/17
Signature Algorithm: sha256WithRSAEncryption
43:26:6a:74:b1:20:92:d4:74:3f:29:e2:53:b5:2c:a8:66:e7:
29:70:60:f8:62:66:86:ce:37:ac:25:4c:ed:b7:3a:5f:fa:39:
93:b6:78:fb:e9:3a:fd:2b:11:22:79:7b:24:db:6c:33:6d:9c:
38:65:8b:21:fc:24:44:cc:60:f7:d4:d6:80:e6:45:e4:ca:02:
97:0c:4d:d5:c1:95:a6:f1:0c:95:34:f9:a0:24:c4:42:11:28:
a2:5d:10:7c:ab:a7:fb:35:e7:89:b4:af:f5:91:b5:10:68:3e:
cf:cc:99:a2:02:18:a2:ed:bc:8b:dc:d0:d0:2a:47:6b:33:87:
4a:a3:e6:58:0b:be:f1:a1:af:00:4c:d0:39:ac:87:1e:3a:dc:
79:10:db:6d:74:51:7d:32:d9:8f:d1:3c:87:b0:f6:2b:49:d1:
34:d8:66:27:8f:9f:fe:ec:20:d9:ed:55:ce:c6:f7:72:3a:da:
a6:e0:04:f4:c2:a7:e4:96:66:9c:a9:03:db:b7:69:ad:0c:f0:
98:f4:fa:32:d5:b4:5a:c7:50:09:4b:ef:b3:75:05:c9:12:dd:
ba:9d:fd:be:b3:5d:ce:93:9a:c3:93:56:d8:67:c1:e8:f4:3d:
88:f6:90:a0:da:7e:63:5a:85:8e:fd:91:a0:93:44:bf:4a:5f:
a0:7e:6a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 19:43:18 2024 by rpki-client on console-ams.rpki-client.org