Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/3b9a741d2ef934bef63f1f79dfab17476606fd14.roa
File: 3b9a741d2ef934bef63f1f79dfab17476606fd14.roa (raw, json)
Hash identifier: vUJic+2928kON3vWttb0t/S0ak8iPOChKdBlmbAURYU=
Subject key identifier: C6:56:67:54:3C:F9:BA:43:38:0E:17:66:D4:8E:EF:0B:2C:52:AB:12
Certificate issuer: /CN=8634873a21a0af40a01354647ad4978d3847d365
Certificate serial: 115043
Authority key identifier: 0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/3b9a741d2ef934bef63f1f79dfab17476606fd14.roa
Signing time: Fri 27 Aug 2021 14:39:44 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 28058
IP address blocks: 179.60.48.0/20 maxlen: 24
200.105.112.0/21 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1134659 (0x115043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8634873a21a0af40a01354647ad4978d3847d365
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=3b9a741d2ef934bef63f1f79dfab17476606fd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:80:8f:eb:19:7c:24:24:98:a1:bc:bb:c8:fc:
42:7a:5d:5c:da:0a:2c:b7:bd:78:ac:7a:b4:38:fa:
a8:51:56:74:04:5b:fb:42:14:06:75:d8:0d:1e:c4:
e3:7a:b4:65:55:6c:85:86:41:a3:9e:47:65:76:30:
fe:21:7c:e8:5b:18:d1:f0:a6:7d:8f:e3:37:63:44:
6b:ab:11:7f:70:3d:55:a8:fe:f5:ab:fd:8f:3d:8a:
28:71:b1:49:25:8e:b8:f8:4c:a5:5a:3c:59:42:45:
a5:bb:35:26:36:7f:d8:91:32:05:e1:9b:a0:09:d0:
a6:23:2b:2c:b4:f5:ce:cd:92:6a:9b:0e:cb:86:07:
6b:77:3f:70:17:fd:39:e2:85:a8:70:df:e2:6a:a7:
90:9d:7d:79:81:a9:0f:9a:0b:3f:2c:49:cb:fe:8b:
16:a5:f0:a4:3e:63:25:ad:1b:3d:72:44:44:c3:22:
02:71:25:63:6a:b6:e4:af:2f:1e:de:97:87:91:3f:
8e:4a:86:3f:ef:e2:d7:90:4d:bb:52:0b:89:38:cd:
6f:1c:10:9a:b5:88:47:5a:8d:cc:67:f9:e3:61:20:
10:2e:f1:82:70:1e:e5:de:62:18:9b:38:e4:6e:52:
10:15:be:40:35:48:f6:40:2f:8f:e4:0a:d2:14:c5:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:56:67:54:3C:F9:BA:43:38:0E:17:66:D4:8E:EF:0B:2C:52:AB:12
X509v3 Authority Key Identifier:
keyid:0E:F5:92:02:65:D1:AB:93:52:AE:4F:BC:7F:A3:27:34:6C:68:BF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8634873a21a0af40a01354647ad4978d3847d365.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/3b9a741d2ef934bef63f1f79dfab17476606fd14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d24585a4-c766-4509-a35a-026f38364aed/8634873a21a0af40a01354647ad4978d3847d365.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.48.0/20
200.105.112.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:66:fb:9f:7c:13:fd:55:2b:fe:df:7a:0a:9e:af:a0:0b:39:
12:2d:11:47:fe:41:7a:87:28:44:58:7b:52:27:39:9f:cd:84:
3f:26:01:7d:48:41:4a:ee:46:bc:a0:ae:97:9c:b9:e0:3f:cc:
ab:92:47:a4:aa:ed:a3:3f:ae:1f:4c:aa:ae:31:11:01:60:28:
bf:09:e0:20:58:b7:45:97:af:ec:49:51:db:b5:fd:cd:38:d4:
d3:55:17:36:08:64:c9:3d:ef:22:eb:7f:e8:20:56:73:1b:10:
f7:a5:fa:2a:f2:3a:22:e7:27:2d:00:18:cd:e0:bd:80:82:c6:
c3:d8:de:36:52:4e:6c:cd:ab:52:b9:8f:7e:5a:94:ed:f0:0d:
bb:11:4e:f0:63:a6:70:06:7c:d5:25:15:64:a7:c1:17:fd:21:
44:c6:b0:c8:f9:36:46:15:ad:8b:72:34:8e:e4:a5:f0:f7:bb:
a2:3a:dd:33:06:47:c7:f7:1e:df:bd:7f:86:24:80:34:cf:f7:
0b:44:11:e2:3a:b8:de:c8:91:ac:d5:0f:59:5e:8d:28:0d:fc:
5c:94:c1:9a:87:d7:46:c9:26:72:a5:aa:de:22:04:a8:5a:e7:
56:9d:ab:5d:2d:b2:9d:54:28:d4:45:ac:b5:36:0e:00:02:66:
35:c3:4d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org