Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/5ced892eb24d199b89f3f1fd8f8412b4c1e89c38.roa
File: 5ced892eb24d199b89f3f1fd8f8412b4c1e89c38.roa (raw, json)
Hash identifier: 4h0anNxwEUXogkqUJeWPWi7E/D+UhWICmFXuBmz8mIM=
Subject key identifier: 90:E5:1C:10:E6:AF:2B:99:91:5E:99:03:43:9B:6F:7B:2B:5B:30:10
Certificate issuer: /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial: 0736C6
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/5ced892eb24d199b89f3f1fd8f8412b4c1e89c38.roa
Signing time: Mon 13 Mar 2023 19:38:23 +0000
ROA not before: Sun 12 Mar 2023 19:20:11 +0000
ROA not after: Thu 13 Mar 2025 19:20:11 +0000
asID: 22884
IP address blocks: 186.96.7.0/24 maxlen: 24
186.96.12.0/24 maxlen: 24
186.96.170.0/24 maxlen: 24
187.251.139.0/24 maxlen: 24
187.251.142.0/24 maxlen: 24
189.203.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472774 (0x736c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Validity
Not Before: Mar 12 19:20:11 2023 GMT
Not After : Mar 13 19:20:11 2025 GMT
Subject: CN=5ced892eb24d199b89f3f1fd8f8412b4c1e89c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:96:df:b6:d3:53:16:86:11:62:84:55:b7:
77:a0:5c:92:35:f3:d4:2f:58:7a:dc:24:48:4b:37:
4f:c8:a3:61:30:d0:d7:3d:6c:99:e4:e5:b9:fe:92:
bd:5d:ff:80:c2:44:16:3f:8b:22:a3:6e:d5:49:24:
c6:fb:38:f9:3f:00:9a:67:ec:9a:76:65:58:5e:f5:
f6:5d:2f:e0:be:c1:96:c2:74:4f:9c:c0:81:7d:4a:
52:a1:13:ff:52:79:19:ee:53:03:6e:ed:14:36:21:
7a:60:b5:3a:88:73:0e:06:c8:52:5c:f0:5e:af:14:
66:73:be:89:d1:31:01:c2:65:b8:14:5d:cb:c7:91:
14:b6:aa:93:41:d0:0d:93:4c:da:c0:4b:09:73:77:
5e:a8:f4:30:2e:a3:63:c6:f2:49:3b:36:b0:89:68:
ec:a8:d9:8a:f3:75:de:5b:af:34:d8:23:02:a3:48:
51:81:e0:01:0e:1e:59:cb:ce:df:1f:6c:21:37:40:
a6:8e:bc:c5:d3:fb:73:b6:3d:66:14:f5:7a:5c:84:
d0:ef:f9:d3:15:3f:c7:c1:4b:8b:45:7c:8a:8d:14:
0d:25:47:76:85:5d:c2:be:66:d7:07:08:4c:5f:e7:
79:fe:fd:98:0c:72:31:a3:b2:d5:bf:45:57:3d:65:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E5:1C:10:E6:AF:2B:99:91:5E:99:03:43:9B:6F:7B:2B:5B:30:10
X509v3 Authority Key Identifier:
keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/5ced892eb24d199b89f3f1fd8f8412b4c1e89c38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.96.7.0/24
186.96.12.0/24
186.96.170.0/24
187.251.139.0/24
187.251.142.0/24
189.203.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:3c:59:53:fd:2a:51:cb:81:8c:d7:f6:99:77:45:b5:8d:5b:
06:98:eb:5a:1a:22:85:dd:0e:34:21:c2:19:d1:44:f5:7c:4c:
21:93:aa:3c:0f:d4:da:4a:3f:26:d4:3e:b0:36:72:bc:00:f4:
07:6d:59:3a:68:4d:d6:7e:67:a8:b0:b5:be:dd:ee:01:29:1d:
ba:e6:24:8a:ea:c4:f4:94:a5:0e:ac:3b:97:ca:ce:0c:f4:9c:
52:15:b7:bd:a9:57:3b:93:ef:01:0e:5a:b3:cc:0d:af:6f:25:
c4:5b:e5:84:ff:97:41:4c:7a:67:c9:c6:44:fb:1e:d0:4b:da:
26:82:63:e8:a0:f7:e1:e2:97:68:51:21:84:6a:0d:84:e2:3f:
1f:b6:96:1e:f6:50:83:e7:c1:10:76:5a:2c:11:9d:de:0e:29:
74:f8:be:ab:0d:55:f5:db:5c:0a:08:66:e5:14:72:91:66:36:
80:e0:ba:19:a2:63:12:fe:78:8b:02:cb:93:aa:73:31:01:9f:
66:3d:db:63:46:87:b3:ef:d5:17:c5:35:5b:a4:8f:fc:e8:91:
08:a6:2b:df:c0:1b:d3:08:12:ce:b1:2e:20:b0:cb:66:29:89:
07:70:00:43:a6:6a:29:31:db:4d:ed:62:c8:3e:0d:40:53:98:
ab:c9:1a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:54 2023 by rpki-client on console-ams.rpki-client.org