Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/db825fdb31ce0e4b1b8fcf59c05ec481976a6821.roa
File: db825fdb31ce0e4b1b8fcf59c05ec481976a6821.roa (raw, json)
Hash identifier: IQ6bZ7ApkbAY78hUsQRZyBYg9IYY4o3XyEW6xlMAlFw=
Subject key identifier: AF:14:F0:44:7B:C8:D6:93:7F:FF:6D:52:54:FA:43:C9:77:65:CA:41
Certificate issuer: /CN=3070426b746ffaf94407f39e1e550bba97179b09
Certificate serial: 046A80
Authority key identifier: 4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/db825fdb31ce0e4b1b8fcf59c05ec481976a6821.roa
Signing time: Wed 24 Mar 2021 14:42:59 +0000
ROA not before: Wed 24 Mar 2021 14:42:55 +0000
ROA not after: Tue 24 Mar 2026 14:42:55 +0000
asID: 265540
IP address blocks: 190.123.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289408 (0x46a80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3070426b746ffaf94407f39e1e550bba97179b09
Validity
Not Before: Mar 24 14:42:55 2021 GMT
Not After : Mar 24 14:42:55 2026 GMT
Subject: CN=db825fdb31ce0e4b1b8fcf59c05ec481976a6821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d7:1e:90:bd:cb:55:df:7d:fa:04:e7:a9:52:
98:85:78:75:62:75:89:3b:a7:2a:5c:5c:c2:5a:77:
e0:06:70:81:8b:78:a1:27:7c:87:50:36:b2:41:08:
ab:fc:90:bc:50:d1:5d:69:46:1b:31:61:ad:3d:c3:
71:7b:d6:5d:3a:62:ec:63:33:68:ff:3a:a1:d5:74:
64:9a:a7:92:21:51:dd:82:24:7f:75:bb:28:54:7c:
76:e8:dc:85:a9:2f:2b:a9:45:b4:a6:ee:34:c4:5e:
85:4a:4d:8e:c7:44:28:f8:7e:4d:68:0e:50:38:af:
86:71:6e:7f:d1:3b:82:c5:3a:e4:65:2c:bb:64:14:
b9:7a:4e:68:fc:26:2a:82:33:4b:ec:81:5f:b3:27:
70:b7:1b:85:4d:c2:7a:40:84:46:20:0f:d5:cf:99:
1f:13:70:51:75:83:68:e5:12:82:aa:6a:ea:38:a3:
76:f3:f6:61:24:42:c2:58:d3:dd:4e:7b:b8:aa:cf:
8e:33:8e:dd:b1:19:35:b3:51:40:23:fa:9f:60:3a:
78:af:f7:c8:db:d0:95:a5:34:ec:2a:20:d0:fb:e7:
5f:d4:3c:61:fb:9b:1f:d3:17:ea:c5:88:c2:ba:f7:
80:63:b6:6f:47:80:96:2b:4b:c0:80:dc:00:3b:30:
be:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:14:F0:44:7B:C8:D6:93:7F:FF:6D:52:54:FA:43:C9:77:65:CA:41
X509v3 Authority Key Identifier:
keyid:4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/db825fdb31ce0e4b1b8fcf59c05ec481976a6821.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/3070426b746ffaf94407f39e1e550bba97179b09.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.123.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d2:be:0e:21:95:58:c6:c9:2e:80:1f:65:78:35:25:49:dd:
19:45:1c:5e:70:ed:ec:93:7e:3c:7e:89:01:c9:b0:52:72:eb:
85:b8:bd:ce:8e:18:2d:7a:ad:ec:bb:79:54:50:43:33:55:af:
e7:92:c4:fa:d8:9d:1c:e8:28:dc:10:d0:54:ec:5d:8e:97:c1:
4f:a0:ce:73:33:b8:e7:e5:8e:80:04:bf:fe:3b:db:09:52:f3:
ba:8d:01:32:8f:d3:0a:76:52:e4:d2:56:be:9b:d8:93:75:c0:
df:1f:dd:a5:b1:f4:21:df:ca:c1:d6:a7:62:7c:6c:8c:a8:95:
37:09:b2:16:ad:49:19:00:b8:10:26:eb:77:0f:37:93:9e:39:
ec:8d:23:0d:f7:e8:90:c9:28:25:18:91:04:59:da:1a:9f:36:
93:cc:0b:e6:9d:ad:43:0f:e7:bc:76:08:b5:50:31:fa:af:0b:
28:10:3c:b3:d2:94:3f:03:c6:b2:71:d5:78:9e:4a:38:5a:ae:
a1:33:59:92:63:d5:7f:59:dc:23:75:27:9b:33:37:80:18:38:
b0:ad:b8:94:79:cf:a0:bd:0d:df:6e:1d:f2:e5:8d:75:f6:ba:
34:67:64:ee:bd:70:e5:b9:43:c8:89:73:8e:a3:29:ca:38:78:
96:af:56:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 16:48:52 2023 by rpki-client on console-fra.rpki-client.org