Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cf5661a8-6382-4aac-8e5e-95d25e0725a9/4b7b957b7b9adde609d16a8c48ca1d2052ea304f.roa
File: 4b7b957b7b9adde609d16a8c48ca1d2052ea304f.roa (raw, json)
Hash identifier: YCsWgNrMgJxOQQdHtKDDIhceHT+S2tmSM1/ZVUoiXMY=
Subject key identifier: D3:8C:AD:51:0E:13:7D:FA:13:98:EA:CA:1B:5F:59:64:41:AF:E2:DA
Certificate issuer: /CN=d9a8ae11894bd66edd7f3008a8c1f68deb801687
Certificate serial: 031AE6
Authority key identifier: 30:CD:F8:9E:B8:A9:A1:6B:01:33:CB:28:EB:9A:FA:B4:0E:99:30:2F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9a8ae11894bd66edd7f3008a8c1f68deb801687.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cf5661a8-6382-4aac-8e5e-95d25e0725a9/4b7b957b7b9adde609d16a8c48ca1d2052ea304f.roa
Signing time: Wed 24 Mar 2021 14:29:06 +0000
ROA not before: Wed 24 Mar 2021 14:29:06 +0000
ROA not after: Tue 24 Mar 2026 14:29:06 +0000
asID: 52354
IP address blocks: 190.14.32.0/22 maxlen: 24
190.122.144.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203494 (0x31ae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a8ae11894bd66edd7f3008a8c1f68deb801687
Validity
Not Before: Mar 24 14:29:06 2021 GMT
Not After : Mar 24 14:29:06 2026 GMT
Subject: CN=4b7b957b7b9adde609d16a8c48ca1d2052ea304f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dc:44:32:be:47:3a:4a:f4:48:d3:19:c9:39:
f0:eb:28:e3:ac:f3:ae:58:83:24:70:3f:ef:a4:dd:
f5:01:9d:56:6e:a5:10:07:82:7e:e3:6a:1b:d1:35:
54:04:a5:86:e6:ac:8b:55:17:1e:f9:16:8d:91:b8:
05:e7:54:c3:1f:d2:9e:33:55:0b:b7:b2:71:2c:18:
75:67:66:b9:ef:d8:9e:86:ca:28:16:1a:fa:d5:64:
74:ef:a0:b8:ad:fd:47:a8:72:0c:9b:b7:7c:b6:d3:
38:f2:7a:71:51:b5:3a:55:77:3b:9d:18:e2:cd:07:
69:61:36:d5:d0:b1:75:d8:93:cc:99:c5:eb:90:0f:
fe:f6:58:e8:cf:af:16:5c:18:2c:42:fd:dc:db:c2:
67:1c:ce:c7:99:fb:10:18:11:36:19:4a:3e:d4:74:
14:6a:d2:bd:1b:8f:58:3b:0d:70:56:f7:23:d1:f8:
13:ae:22:01:a9:69:48:13:45:58:11:aa:43:c4:f2:
8a:85:24:69:c3:83:4b:f7:43:84:e3:8c:f8:eb:ab:
76:a4:2d:54:7e:3a:d3:21:87:05:96:d3:e9:bb:62:
91:78:4d:50:de:05:a0:75:fc:56:c6:f8:cd:9c:3d:
f8:6e:63:44:5b:9b:96:16:16:51:78:59:b4:5a:2c:
6a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8C:AD:51:0E:13:7D:FA:13:98:EA:CA:1B:5F:59:64:41:AF:E2:DA
X509v3 Authority Key Identifier:
keyid:30:CD:F8:9E:B8:A9:A1:6B:01:33:CB:28:EB:9A:FA:B4:0E:99:30:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9a8ae11894bd66edd7f3008a8c1f68deb801687.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cf5661a8-6382-4aac-8e5e-95d25e0725a9/4b7b957b7b9adde609d16a8c48ca1d2052ea304f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cf5661a8-6382-4aac-8e5e-95d25e0725a9/d9a8ae11894bd66edd7f3008a8c1f68deb801687.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.14.32.0/22
190.122.144.0/20
Signature Algorithm: sha256WithRSAEncryption
34:de:c1:e9:13:c0:f5:6f:16:76:9f:01:4f:a5:46:ca:d5:d2:
93:aa:96:1b:c5:59:8a:bc:ab:a1:8f:1e:c4:97:06:68:50:1a:
47:b0:8f:76:83:43:fa:00:23:0e:e7:5f:e7:5b:4b:b0:9d:37:
e5:5f:48:c5:38:4b:fb:9d:05:c2:be:f2:e0:d3:04:11:ad:8b:
ed:2a:d5:36:14:b0:30:54:06:ea:46:c8:53:ba:b7:9b:1a:42:
49:82:39:6c:ca:4d:49:b3:25:c4:95:f8:39:55:1d:1e:44:48:
25:87:cc:c4:1a:f7:ea:df:3f:8c:21:3b:c5:cf:25:72:d3:13:
fd:db:84:e6:86:5d:cd:f1:12:0d:72:a3:97:32:1b:b3:e2:46:
3b:f6:3e:ee:2f:7d:56:98:fa:ba:82:23:49:21:17:c0:a9:a4:
aa:24:f2:05:15:59:75:32:72:1b:de:b5:8d:95:34:14:f1:30:
cd:7b:cd:68:5b:25:ce:12:a5:5c:c1:d1:a3:ed:cf:b5:b3:cd:
e5:b4:cb:0a:54:66:17:3e:11:db:b5:0d:77:c1:ea:98:09:a4:
a7:f2:ed:48:f0:76:6d:19:fb:5d:93:0c:39:1b:98:43:aa:af:
a0:58:c0:b8:28:92:69:2e:3e:8b:24:62:30:4c:7d:b2:98:ac:
89:9a:d4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:54 2023 by rpki-client on console-ams.rpki-client.org