Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/23b62c0c7280e5c86818b0862049c0970e95c848.roa
File: 23b62c0c7280e5c86818b0862049c0970e95c848.roa (raw, json)
Hash identifier: V2wlqErC+vt8ZTOm3rQ/BrDcOQBHs+ONYEtEZJoDzMY=
Subject key identifier: B3:E6:23:EC:71:DB:6B:3F:74:7D:86:E2:33:9A:92:D9:38:7C:45:6E
Certificate issuer: /CN=a1e706ce8128add2b25ca400a695dc4620ac6e0f
Certificate serial: 012C8B
Authority key identifier: 5E:D1:5A:C7:56:2D:40:AA:73:65:03:62:76:86:9E:A5:01:69:A5:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1e706ce8128add2b25ca400a695dc4620ac6e0f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/23b62c0c7280e5c86818b0862049c0970e95c848.roa
Signing time: Mon 15 Nov 2021 14:29:16 +0000
ROA not before: Fri 05 Nov 2021 03:00:00 +0000
ROA not after: Sun 05 Nov 2023 03:00:00 +0000
asID: 52420
IP address blocks: 190.11.128.0/19 maxlen: 24
190.11.160.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76939 (0x12c8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e706ce8128add2b25ca400a695dc4620ac6e0f
Validity
Not Before: Nov 5 03:00:00 2021 GMT
Not After : Nov 5 03:00:00 2023 GMT
Subject: CN=23b62c0c7280e5c86818b0862049c0970e95c848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:25:84:96:35:a9:2b:0a:e5:e7:98:f5:ac:09:
93:fc:60:5e:f6:59:89:34:ba:a7:04:08:f6:3c:bd:
e7:9d:0d:45:6c:cc:5c:1c:2d:67:be:88:c9:db:ea:
69:9a:81:5f:6f:25:65:5e:e5:e1:4b:7f:a2:23:4f:
5b:8d:44:52:ea:fe:d5:3f:c6:f0:11:15:21:23:ab:
d8:a9:ab:47:71:77:d5:01:5b:6c:a9:0a:44:ed:23:
cb:ce:b4:71:d4:0b:3d:10:08:77:e9:e8:7e:c2:00:
73:7e:1d:65:d7:6b:ef:f5:46:c6:27:55:0c:6d:a8:
0a:35:58:5a:0f:c3:4d:ba:e4:f4:7f:d7:33:78:d6:
6b:1a:9b:17:99:f8:c1:3a:d4:f7:6c:e1:28:55:b9:
3c:7b:52:41:e2:18:11:4e:63:bf:b4:58:da:40:8d:
da:29:15:14:82:f0:56:bf:93:4d:1b:84:b0:93:5f:
5b:d5:bc:0f:bd:f6:f1:23:9a:b4:bc:9f:f9:44:12:
51:1e:f8:99:67:4e:c3:d2:1d:d8:59:00:c7:3c:e8:
ea:7d:bc:6f:51:77:ae:69:da:35:3d:c3:50:5a:4e:
60:67:42:cf:69:69:c6:46:d7:47:8d:1a:c5:d9:f3:
1b:7e:3e:86:c5:e5:be:2f:92:0a:88:20:d8:f8:28:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E6:23:EC:71:DB:6B:3F:74:7D:86:E2:33:9A:92:D9:38:7C:45:6E
X509v3 Authority Key Identifier:
keyid:5E:D1:5A:C7:56:2D:40:AA:73:65:03:62:76:86:9E:A5:01:69:A5:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1e706ce8128add2b25ca400a695dc4620ac6e0f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/23b62c0c7280e5c86818b0862049c0970e95c848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/a1e706ce8128add2b25ca400a695dc4620ac6e0f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.11.128.0/18
Signature Algorithm: sha256WithRSAEncryption
0f:2b:7e:fe:73:c7:b3:eb:bb:29:53:2e:6f:78:f4:0e:4c:b7:
2d:b9:6b:e5:a8:df:41:15:17:9c:dc:2b:26:bf:ad:ab:43:d1:
ce:04:41:c5:60:89:c6:80:d8:1e:81:ac:4f:ee:8e:39:fe:07:
1a:fc:6e:00:e9:d1:3a:b2:a7:96:c0:e1:59:dd:fb:d2:d0:be:
f1:05:47:66:19:0c:3d:ee:cf:07:2d:93:7c:38:7b:36:51:90:
53:9e:eb:e9:89:6f:2e:cd:0d:cc:d7:e5:5b:a2:ac:63:ee:57:
e6:bd:55:43:de:a9:f9:cd:44:88:11:08:e7:94:3b:7c:c9:bf:
c6:c3:03:94:95:09:f1:f7:76:df:56:89:bc:81:97:e5:91:b7:
5d:fb:46:a1:15:35:be:60:57:79:3d:78:13:1d:52:93:b1:c9:
a0:bf:29:68:24:68:bb:c5:4e:c4:38:0d:96:93:d4:ba:e7:06:
4b:e7:31:4f:b1:72:37:93:a2:39:5b:42:0d:71:5d:0a:6c:bb:
08:19:b6:98:93:93:8f:c5:37:52:3f:9c:61:5c:1d:da:bd:f9:
40:83:d4:45:3a:3f:c3:4f:3d:a0:94:0e:f5:b6:9a:e2:e6:14:
c0:c4:9c:dc:60:f6:15:89:5c:28:5d:40:a1:2e:6c:37:8f:9d:
ab:88:ce:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 4 08:10:46 2023 by rpki-client on console-ams.rpki-client.org