Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/0c2818470de9e213b754c7b7491ce37be4807aaf.roa
File: 0c2818470de9e213b754c7b7491ce37be4807aaf.roa (raw, json)
Hash identifier: hVElYOKrYmaFhM7pE+zrCVgG8GERzOD05iLGd2FpX60=
Subject key identifier: A8:0C:58:EC:C7:6F:D6:40:2F:F6:F6:9D:DA:3F:3B:03:79:A0:54:20
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 1C1831
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/0c2818470de9e213b754c7b7491ce37be4807aaf.roa
Signing time: Wed 28 Sep 2022 13:51:46 +0000
ROA not before: Wed 28 Sep 2022 13:50:20 +0000
ROA not after: Sat 28 Sep 2024 13:50:20 +0000
asID: 3816
IP address blocks: 190.13.96.0/20 maxlen: 20
190.13.96.0/22 maxlen: 22
190.13.105.0/24 maxlen: 24
190.13.106.0/24 maxlen: 24
190.13.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1841201 (0x1c1831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Sep 28 13:50:20 2022 GMT
Not After : Sep 28 13:50:20 2024 GMT
Subject: CN=0c2818470de9e213b754c7b7491ce37be4807aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:ac:1c:ea:4f:97:d5:01:43:18:8d:02:f2:
f2:40:71:52:65:93:91:17:f7:15:ed:da:a3:fb:3c:
69:ee:52:8b:6b:f4:89:67:bd:fd:b7:78:25:a5:80:
1a:b6:41:20:42:3f:70:cf:90:97:91:ab:02:38:b2:
3d:ac:bb:d3:12:00:63:cd:f1:9d:ae:1b:b4:c5:e7:
d5:5e:3c:69:a4:11:3b:ca:f1:5f:1b:c8:08:8a:2c:
8f:6b:18:d1:0c:3c:de:db:63:bd:44:5d:2c:71:23:
a5:43:2b:ef:c2:e9:eb:75:de:7b:0f:29:2d:ed:49:
a4:e4:ae:c5:89:68:7b:23:8f:59:73:f9:51:21:14:
d0:bd:ec:a6:11:fb:da:03:72:42:12:01:1f:8a:30:
59:ad:a9:b7:bc:7f:b8:3a:e5:ac:d1:aa:15:3b:bd:
a4:33:0b:10:84:2e:c3:06:8f:87:06:9c:25:08:46:
cb:67:74:bb:a3:8b:4f:07:5e:24:09:60:8e:b3:6f:
99:b6:5b:5d:d6:0c:f6:69:3e:31:0b:c5:75:bd:35:
e7:02:e9:da:8c:cf:76:50:42:18:82:ca:b6:7a:a8:
fb:81:ed:fa:c2:c1:b1:07:11:82:09:1e:0c:97:f8:
88:9e:81:89:07:2f:18:20:83:45:9d:94:46:47:4a:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0C:58:EC:C7:6F:D6:40:2F:F6:F6:9D:DA:3F:3B:03:79:A0:54:20
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/0c2818470de9e213b754c7b7491ce37be4807aaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.13.96.0/20
Signature Algorithm: sha256WithRSAEncryption
1d:67:b5:9e:83:57:62:3c:83:89:0b:8d:5d:8f:fe:2f:a2:0f:
48:38:bd:2d:42:e5:8b:d6:ac:f9:54:b0:89:7e:b8:99:0d:5e:
72:02:bd:a9:37:d0:c6:37:9b:d4:9b:13:df:2b:32:e7:0a:4e:
71:c7:82:fe:d0:11:13:0f:5d:1e:fd:8c:e5:89:85:f3:cb:d8:
17:1e:f0:e0:9c:43:4e:56:9e:10:15:46:4f:08:31:62:a7:0d:
69:f9:19:80:03:77:76:39:c0:7d:4f:bb:a5:6b:7a:49:79:1c:
e6:fc:4c:03:6e:01:13:47:c2:e2:28:05:d0:3a:df:c0:14:24:
ae:eb:09:20:33:46:a8:c5:b7:28:18:9c:78:ac:b1:13:ad:da:
4f:06:1b:4f:c3:7a:f8:82:75:ac:8e:f2:b1:04:ee:ae:74:ed:
24:31:6a:b4:15:10:46:6f:53:4a:cc:94:28:fb:8b:ac:53:4b:
7e:a0:09:ca:b8:ff:64:aa:4e:2d:d1:35:b2:a3:4d:0b:09:01:
fc:49:1e:68:91:c9:d7:ed:d4:79:b4:67:69:e6:6a:d9:b4:00:
9c:e6:77:aa:89:e8:30:3a:16:c0:58:98:08:54:cd:aa:b5:1e:
ff:bd:af:57:45:0d:dc:ed:88:02:97:92:24:ca:64:68:9f:e8:
2d:41:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 17:58:47 2023 by rpki-client on console-ams.rpki-client.org