Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/e43afeb264f8bd0e9b50253869ef9ca98eb5b0a6.roa
File: e43afeb264f8bd0e9b50253869ef9ca98eb5b0a6.roa (raw, json)
Hash identifier: sgSmsOWlbDcYXmUVWN+CS44GysNV+J820B1XCVOgO+E=
Subject key identifier: E3:FE:29:B2:2F:45:34:52:DC:7E:EB:03:1B:72:5E:CA:EB:6C:D0:A9
Certificate issuer: /CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Certificate serial: 0D458D
Authority key identifier: D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/e43afeb264f8bd0e9b50253869ef9ca98eb5b0a6.roa
Signing time: Wed 24 Mar 2021 14:39:23 +0000
ROA not before: Wed 24 Mar 2021 14:39:22 +0000
ROA not after: Tue 24 Mar 2026 14:39:22 +0000
asID: 27738
IP address blocks: 190.130.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 15:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869773 (0xd458d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Validity
Not Before: Mar 24 14:39:22 2021 GMT
Not After : Mar 24 14:39:22 2026 GMT
Subject: CN=e43afeb264f8bd0e9b50253869ef9ca98eb5b0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:19:43:f6:1b:18:ee:27:f4:d7:b7:f0:34:
22:19:f4:7b:00:b1:fa:49:dc:e0:d0:32:ca:66:cd:
a8:2a:45:6b:ac:7d:f3:8f:0f:7e:de:57:02:b6:57:
27:ab:41:bd:26:a1:f7:ea:2f:44:b9:6e:36:91:37:
0a:04:54:c5:6f:30:66:44:a5:93:e9:de:c5:c7:d3:
8f:88:38:7c:7b:d5:8e:c5:99:78:10:24:f7:e2:95:
4f:32:bf:62:9f:63:a7:39:71:13:99:29:70:50:af:
06:84:35:53:c6:86:c5:e1:78:e0:23:0d:c3:02:7b:
5d:06:dd:fe:3a:02:35:2a:e9:14:39:69:68:bc:b9:
b2:11:7c:9b:e1:79:fe:6a:8b:48:73:fa:7e:28:29:
c7:a2:f0:f9:81:11:6f:bc:7b:d8:b1:9e:76:bf:b8:
4b:57:21:50:35:d7:1a:2a:03:f9:86:68:ec:e3:e0:
9a:81:c8:ea:78:77:86:ac:49:22:c6:38:10:96:a1:
d3:93:39:e6:eb:01:86:36:ce:02:27:db:31:61:d3:
03:fb:97:70:dd:9e:5c:30:44:86:03:58:87:d1:89:
14:52:d3:b5:c6:22:23:38:21:87:46:b0:cc:74:28:
a2:38:26:bb:6e:96:9b:3b:6c:b7:2d:20:1e:dd:e7:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FE:29:B2:2F:45:34:52:DC:7E:EB:03:1B:72:5E:CA:EB:6C:D0:A9
X509v3 Authority Key Identifier:
keyid:D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/e43afeb264f8bd0e9b50253869ef9ca98eb5b0a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.130.128.0/17
Signature Algorithm: sha256WithRSAEncryption
79:11:9d:d6:e7:c1:1a:ed:29:54:40:4b:39:12:04:9e:4e:f7:
be:18:d0:81:0c:4b:d7:ab:d0:ec:95:c2:4f:63:60:00:30:0f:
18:29:da:42:96:71:87:9a:ad:ad:fe:eb:8e:45:9d:03:3c:5c:
ba:bf:58:b8:94:cc:94:0c:b7:2b:37:d7:41:7a:1f:9b:83:ff:
28:9f:a4:4e:88:f6:06:18:7b:26:99:d9:4f:a2:91:e6:45:49:
17:ea:54:87:88:c4:d6:46:2b:cd:75:d3:1c:d1:0f:20:ff:34:
9b:88:72:9b:b1:67:18:5c:81:97:3b:65:1a:51:cf:35:ae:fa:
91:23:e8:8b:84:c1:6f:ff:fd:cb:5d:e4:6d:a4:93:4e:da:4a:
b5:f2:4d:22:11:df:9b:c6:25:54:7d:86:7d:e3:d8:f3:ec:d0:
73:a0:cc:88:58:84:f0:73:46:30:da:6d:7b:f2:fd:05:78:ef:
3b:8b:1a:3e:09:fb:e7:25:09:df:f3:27:37:39:b1:ce:10:28:
d7:be:b2:38:b6:71:cc:44:3f:29:9e:b6:22:3f:88:4a:9c:75:
62:94:97:fb:ea:c0:63:05:f7:b8:09:30:31:bb:d8:8c:8f:42:
ea:e7:a2:c3:17:5c:52:80:e8:f5:44:c6:57:33:66:46:5e:5c:
ee:6c:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 18:34:31 2024 by rpki-client on console-fra.rpki-client.org