Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/1ca53c54bdf6fe2b7edf5b8f83ba705f471cbafc.roa
File: 1ca53c54bdf6fe2b7edf5b8f83ba705f471cbafc.roa (raw, json)
Hash identifier: YIG42NTZax8nv14CY7gnZUoz0oxdZT9GuZenkMUhKDY=
Subject key identifier: 5B:89:93:17:25:A0:06:93:0C:E3:75:66:45:0D:49:DC:2F:70:2B:CB
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 0DE124
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/1ca53c54bdf6fe2b7edf5b8f83ba705f471cbafc.roa
Signing time: Wed 24 Mar 2021 14:34:59 +0000
ROA not before: Wed 24 Mar 2021 14:34:57 +0000
ROA not after: Tue 24 Mar 2026 14:34:57 +0000
asID: 3816
IP address blocks: 152.200.0.0/14 maxlen: 22
152.204.0.0/15 maxlen: 24
161.10.0.0/16 maxlen: 22
161.18.0.0/16 maxlen: 22
167.0.0.0/16 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 909604 (0xde124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Mar 24 14:34:57 2021 GMT
Not After : Mar 24 14:34:57 2026 GMT
Subject: CN=1ca53c54bdf6fe2b7edf5b8f83ba705f471cbafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:84:78:ed:68:19:f6:43:92:6d:ac:26:50:
b1:c3:dd:0a:b9:af:aa:bb:2c:d5:3f:20:79:3b:51:
26:03:4e:d6:6d:57:3d:9e:1a:32:2e:87:05:b5:e4:
32:cb:e1:61:92:ec:51:a9:24:42:2f:30:f6:f2:37:
f6:a6:d3:33:8b:20:3d:15:c3:00:8a:1e:a6:42:fb:
3a:e9:73:4a:49:6e:8c:c8:09:2a:52:ae:a4:14:7e:
b5:e7:46:29:4d:1b:74:2c:5b:e6:4d:0b:0f:32:1f:
14:c9:a7:d6:82:0f:78:0f:2f:82:3c:f9:ae:59:14:
cc:81:88:24:99:5a:c3:30:a1:e7:f8:a8:db:68:e7:
c4:7e:63:41:c9:d2:4a:42:0e:13:a7:95:0b:79:11:
7c:f0:7a:e0:12:cb:de:ca:5b:ec:88:2e:04:5d:4d:
34:c8:a9:df:f4:1b:9b:4b:0a:15:41:c8:bb:dc:c6:
8b:92:c7:88:31:b8:20:ad:08:53:00:bb:ba:05:b1:
e7:e2:d5:a1:03:91:e5:ce:19:df:e5:b8:d2:39:67:
70:f0:02:1f:08:6f:64:2a:9f:db:04:29:71:34:d2:
53:dc:92:59:ae:63:2b:fb:b4:bd:f9:71:c9:0e:5a:
de:ed:52:62:d1:c9:90:e4:c1:e2:ee:5f:66:f0:7a:
9e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:89:93:17:25:A0:06:93:0C:E3:75:66:45:0D:49:DC:2F:70:2B:CB
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/1ca53c54bdf6fe2b7edf5b8f83ba705f471cbafc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.200.0.0-152.205.255.255
161.10.0.0/16
161.18.0.0/16
167.0.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:a2:5d:83:31:8f:4a:e5:00:f4:51:e2:f2:cf:e7:81:e1:51:
58:f0:90:4e:26:09:c8:29:8e:a1:32:94:40:ea:09:51:22:28:
69:df:50:36:5f:bd:f8:4b:ed:56:3c:30:67:d6:87:1b:47:68:
77:9f:f7:6c:8d:1c:3b:79:d2:8b:aa:98:ad:c0:d8:1e:67:6e:
5b:99:f4:9f:a4:44:f2:09:f5:f5:45:f4:9b:bd:42:0f:cb:91:
b1:d4:ff:2d:8b:f6:79:1c:da:11:d2:75:36:85:7d:40:ec:00:
9b:08:19:6f:f5:78:44:3f:60:1f:4d:ee:3f:d7:36:3c:ed:bd:
00:d3:9f:bb:fd:78:b6:8b:4e:b9:1c:c6:b0:34:60:95:9f:e3:
81:f7:57:de:14:55:cf:57:b0:1c:f4:6f:d9:f6:e5:e1:c6:59:
61:ce:fc:a8:f2:47:d6:e2:77:6b:ea:ef:0e:bb:f4:53:d0:e0:
78:0d:16:2b:99:43:56:db:ba:ab:5b:9e:50:54:0a:c9:cd:a2:
c3:3b:c1:77:6c:a7:20:c9:7a:8e:2d:41:eb:3a:4c:33:6d:d5:
90:b5:d1:d8:cc:60:63:15:4b:56:1c:84:80:95:84:84:09:aa:
57:49:84:d2:57:92:8f:2a:81:05:18:0b:48:5e:12:5c:28:d3:
0a:5c:bb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:53 2023 by rpki-client on console-ams.rpki-client.org