Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/d3c62d95f89b761151a8a58161e2a1cb5a0fa96a.roa
File: d3c62d95f89b761151a8a58161e2a1cb5a0fa96a.roa (raw, json)
Hash identifier: im8suUlq6drK4NHdd5AfJGwloDICTvoNg1JkNGRu8RA=
Subject key identifier: 39:EA:02:32:8C:B3:03:6B:CB:59:36:4F:87:AD:2A:3F:5F:F9:6C:FB
Certificate issuer: /CN=9e7d975858e57eba8aa9f3546843c2ca4ff98a40
Certificate serial: 0D4616
Authority key identifier: DE:BC:71:7F:74:DB:DD:C0:04:1E:52:07:60:20:BD:59:47:54:E2:D9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/d3c62d95f89b761151a8a58161e2a1cb5a0fa96a.roa
Signing time: Wed 24 Mar 2021 14:42:30 +0000
ROA not before: Wed 24 Mar 2021 14:42:30 +0000
ROA not after: Tue 24 Mar 2026 14:42:30 +0000
asID: 52262
IP address blocks: 191.103.67.0/24 maxlen: 24
191.103.69.0/24 maxlen: 24
191.103.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869910 (0xd4616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7d975858e57eba8aa9f3546843c2ca4ff98a40
Validity
Not Before: Mar 24 14:42:30 2021 GMT
Not After : Mar 24 14:42:30 2026 GMT
Subject: CN=d3c62d95f89b761151a8a58161e2a1cb5a0fa96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:b7:8f:6a:d4:25:e0:8a:af:90:c9:30:c2:
bf:27:ab:9f:99:2b:0e:d1:5e:dd:49:9c:97:43:86:
4b:39:d4:2a:9b:86:de:55:46:d1:b2:9a:e2:14:57:
b3:dc:22:3b:ea:82:c8:d6:6c:27:47:83:53:91:28:
11:41:d2:ab:b3:26:85:35:43:10:4c:61:d0:f1:c7:
d1:3b:11:b0:84:d9:59:11:cb:a4:af:5a:48:86:15:
25:7b:a0:a8:b2:65:b9:b3:a0:2f:e8:31:2e:34:a5:
3b:42:16:83:70:58:dc:da:ea:9d:e5:bb:de:44:a5:
5b:8e:8b:13:9c:16:17:4e:a5:b7:d9:9c:0e:c3:68:
ae:e4:0c:a2:1a:2d:76:70:c3:85:90:e4:f7:82:dd:
7d:fb:af:91:af:de:c3:0e:59:01:d4:56:b1:17:be:
03:f8:eb:41:43:31:d6:76:7d:3b:e1:cd:ad:60:00:
5d:ae:23:18:30:d3:22:56:50:80:90:da:b7:aa:79:
81:0b:18:93:8f:fd:dd:8d:2b:36:fc:f6:87:47:39:
65:26:1e:55:11:f4:21:95:c9:4e:4e:5a:ee:94:5d:
50:72:80:db:35:6d:cf:3c:e2:99:13:2a:c2:e6:c6:
ef:64:c8:42:bc:59:eb:f0:77:1b:a1:cf:dd:88:27:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EA:02:32:8C:B3:03:6B:CB:59:36:4F:87:AD:2A:3F:5F:F9:6C:FB
X509v3 Authority Key Identifier:
keyid:DE:BC:71:7F:74:DB:DD:C0:04:1E:52:07:60:20:BD:59:47:54:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/d3c62d95f89b761151a8a58161e2a1cb5a0fa96a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.103.67.0/24
191.103.69.0/24
191.103.86.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ee:06:86:b8:30:e6:18:8a:dc:53:b4:66:10:d9:2c:58:cd:
e7:28:e1:dd:ab:22:af:e5:4d:49:d5:40:36:49:90:65:96:3a:
f6:bc:f1:83:9f:9a:08:dd:81:39:05:83:ab:8c:c7:fc:97:0f:
39:c6:fa:32:d9:ef:ac:12:2b:46:25:07:8c:84:48:b5:3a:24:
c8:07:80:f5:33:0c:66:9c:72:a6:2c:db:b8:96:d3:39:3e:b2:
fe:ee:55:c7:e8:5c:9c:78:34:80:49:31:06:d4:08:2e:b8:91:
bc:98:52:1e:8c:2e:eb:c4:eb:bf:7a:d8:9a:95:2f:73:7c:f3:
fc:7c:c5:f7:92:9b:ff:51:c3:cb:62:f3:29:b0:b6:68:0e:3a:
73:08:3b:68:cc:b3:70:55:bb:0a:85:2f:f1:1c:c6:92:01:5d:
1e:ba:d3:6d:d0:c2:fe:4f:5e:7c:c5:4d:80:4b:73:fd:b8:5b:
b4:f3:c4:3b:f6:ad:8a:2a:8c:03:b1:6b:59:50:4e:b6:df:be:
3b:b5:44:1d:10:eb:af:db:ca:58:ca:58:3a:1b:b4:f2:6c:cc:
ec:fb:51:0c:7e:af:ac:5d:a2:12:a5:aa:9e:b0:64:0d:7e:fe:
95:f4:5a:c8:2b:c0:ad:3c:60:82:11:16:2b:54:75:35:fd:2c:
f7:d3:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 21:12:35 2023 by rpki-client on console-fra.rpki-client.org