Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/7028eb9d196a34992f126d70239f9dc353e1e2b9.roa
File: 7028eb9d196a34992f126d70239f9dc353e1e2b9.roa (raw, json)
Hash identifier: FrIWxnZMdCDu7jdSL6H5SNwnUJLHBS4m9KBHu7ksdw8=
Subject key identifier: E1:0A:39:B7:3D:83:BA:97:49:01:9A:7B:FF:23:10:67:01:95:FC:18
Certificate issuer: /CN=af916a8098c48f9f0fefd791512ee124a99ce09d
Certificate serial: 0E8CAF
Authority key identifier: 72:51:EE:4E:B7:2D:E8:EB:21:05:10:5C:13:54:28:D2:1B:65:6E:20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af916a8098c48f9f0fefd791512ee124a99ce09d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/7028eb9d196a34992f126d70239f9dc353e1e2b9.roa
Signing time: Wed 29 Mar 2023 00:34:21 +0000
ROA not before: Sat 07 Aug 2021 03:00:00 +0000
ROA not after: Thu 10 Aug 2023 03:00:00 +0000
asID: 20191
IP address blocks: 146.155.0.0/16 maxlen: 24
146.155.1.0/24 maxlen: 24
146.155.2.0/24 maxlen: 24
146.155.25.0/24 maxlen: 24
146.155.39.0/24 maxlen: 24
146.155.49.0/24 maxlen: 24
146.155.60.0/24 maxlen: 24
146.155.73.0/24 maxlen: 24
146.155.75.0/24 maxlen: 24
146.155.77.0/24 maxlen: 24
146.155.89.0/24 maxlen: 24
146.155.92.0/24 maxlen: 24
146.155.94.0/24 maxlen: 24
146.155.95.0/24 maxlen: 24
146.155.96.0/24 maxlen: 24
146.155.97.0/24 maxlen: 24
146.155.99.0/24 maxlen: 24
146.155.100.0/24 maxlen: 24
146.155.109.0/24 maxlen: 24
146.155.117.0/24 maxlen: 24
146.155.118.0/24 maxlen: 24
146.155.119.0/24 maxlen: 24
146.155.122.0/24 maxlen: 24
146.155.123.0/24 maxlen: 24
146.155.127.0/24 maxlen: 24
146.155.157.0/24 maxlen: 24
146.155.158.0/24 maxlen: 24
146.155.160.0/23 maxlen: 23
2800:1b0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953519 (0xe8caf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af916a8098c48f9f0fefd791512ee124a99ce09d
Validity
Not Before: Aug 7 03:00:00 2021 GMT
Not After : Aug 10 03:00:00 2023 GMT
Subject: CN=7028eb9d196a34992f126d70239f9dc353e1e2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:7b:e6:87:fa:f9:48:f9:fe:e9:87:c8:91:
ea:b6:c5:d7:bd:f0:d8:7c:91:57:00:64:30:9a:5d:
d8:2a:d0:2b:07:ee:b6:63:aa:54:ac:a4:27:f5:40:
6b:c9:98:54:84:2f:82:f9:e9:12:aa:6b:5d:04:4f:
b7:51:b4:c9:5d:c3:7e:2f:7d:42:46:2a:ba:5f:4d:
78:5c:90:45:d7:7c:54:1a:8e:15:b5:00:8b:d4:d8:
4b:e8:78:b5:51:1a:90:57:6a:a1:1d:9d:89:e2:67:
d1:f8:5a:20:50:9d:3b:c0:1d:99:52:e4:85:6d:88:
4d:71:54:1c:99:34:eb:16:dc:f2:a9:75:83:18:b8:
f8:c0:be:a5:cd:9e:7b:91:2e:dd:6d:17:1a:04:46:
7d:2b:51:eb:29:77:3b:35:b5:79:13:65:12:63:85:
7d:1e:88:9c:03:a7:1a:db:87:15:b5:a8:d3:4a:20:
4e:e4:f6:a5:7e:8d:cf:e4:3e:12:59:e5:f0:5a:d0:
60:6f:db:6e:ce:49:b4:02:3a:df:54:d1:54:f8:6d:
70:ad:17:44:9a:18:43:fe:dd:33:73:3e:90:ef:b2:
35:dc:87:a9:7c:31:6f:a5:31:a3:ce:0c:32:19:5f:
8f:03:7e:9f:2b:e1:60:67:83:1b:a2:b2:31:52:c5:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0A:39:B7:3D:83:BA:97:49:01:9A:7B:FF:23:10:67:01:95:FC:18
X509v3 Authority Key Identifier:
keyid:72:51:EE:4E:B7:2D:E8:EB:21:05:10:5C:13:54:28:D2:1B:65:6E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af916a8098c48f9f0fefd791512ee124a99ce09d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/7028eb9d196a34992f126d70239f9dc353e1e2b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c102fa88-a0c3-438b-b62f-6c4ad3d7ae5e/af916a8098c48f9f0fefd791512ee124a99ce09d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.155.0.0/16
IPv6:
2800:1b0::/32
Signature Algorithm: sha256WithRSAEncryption
23:fb:21:ec:fe:e8:68:71:9b:90:21:4a:96:db:f9:28:f3:e1:
a3:bd:db:09:9a:3d:65:93:7b:8f:9a:5f:64:c3:73:80:b4:fa:
e1:8d:76:3a:4e:18:1a:a5:dc:3b:85:64:92:75:e7:0f:e1:f0:
ce:64:b4:e9:98:b4:21:ca:dd:8b:61:78:fe:65:de:f2:01:78:
a4:74:a5:c9:d8:1c:10:f9:a9:06:85:7a:3d:2f:e3:a1:e7:f5:
47:66:f6:22:fa:64:7b:e2:aa:4f:7c:ef:a9:4e:40:29:4e:1b:
44:ea:ef:a2:ed:9b:1d:5b:7f:66:fe:d3:7b:b5:cc:5e:bc:c0:
e0:c2:f2:85:84:34:21:53:19:a9:44:6e:36:ee:7e:5c:cc:84:
85:09:a5:3a:75:4f:09:c5:6e:55:d5:16:81:5e:e5:56:8a:d6:
92:4e:23:99:2e:47:bf:b2:41:74:59:34:af:55:35:26:35:9b:
f4:9a:aa:84:0b:1d:11:71:b9:a6:ef:c1:8a:9b:22:84:ed:73:
b7:7d:42:e3:13:5b:e7:93:f7:f1:6b:5a:ee:8c:04:57:a5:79:
46:d4:6c:c1:d8:9c:2f:cb:04:e5:69:0a:04:45:f0:33:9d:33:
e1:57:b9:96:c6:98:fa:77:82:a7:81:16:0a:c6:2a:ce:40:f9:
80:e1:6b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:53 2023 by rpki-client on console-ams.rpki-client.org