Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/584ce99f68150734eede487893f83efcc16e7777.roa
File: 584ce99f68150734eede487893f83efcc16e7777.roa (raw, json)
Hash identifier: AFXdrO3tbHsonLifBMLKaPjibgUeA+/Rq2O5fbqDgkw=
Subject key identifier: AF:DF:C0:4C:6C:87:0A:4F:A5:E6:D9:0E:C1:1B:F6:BB:2F:26:DA:DF
Certificate issuer: /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial: 0ED311
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/584ce99f68150734eede487893f83efcc16e7777.roa
Signing time: Tue 27 Apr 2021 10:20:21 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Wed 31 Dec 2025 03:00:00 +0000
asID: 12956
IP address blocks: 181.199.208.0/20 maxlen: 20
190.98.128.0/19 maxlen: 19
190.98.160.0/19 maxlen: 19
168.195.56.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 971537 (0xed311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Dec 31 03:00:00 2025 GMT
Subject: CN=584ce99f68150734eede487893f83efcc16e7777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:28:19:6c:28:54:df:ea:45:4c:56:da:5d:
e6:09:84:b5:48:0f:ed:c3:e2:67:4d:1b:63:4e:f9:
29:7a:17:de:16:ee:d1:15:9b:83:37:3e:04:6d:eb:
13:be:92:af:c3:d6:50:d0:ce:bf:f3:e5:f5:ce:90:
d4:77:9c:93:3c:86:c0:4d:5f:42:87:95:f3:b5:f5:
e1:4b:2b:e0:46:f9:ba:35:c4:9a:cf:4d:88:a4:41:
41:d7:24:e0:b4:1a:07:bd:3a:99:07:ad:62:0a:54:
ee:45:27:d5:e9:e0:fd:62:1e:6c:d2:29:bd:2f:d2:
64:71:97:ef:2b:8d:5d:8f:0f:07:87:b9:b4:ea:af:
c1:74:51:d5:ec:8e:ad:a7:89:d6:16:1b:62:17:0e:
7f:43:24:d1:91:d1:70:fe:68:cc:ea:bf:4e:07:b4:
15:97:3c:92:a9:b2:92:51:df:ca:60:24:d5:cd:60:
15:13:91:7c:d0:60:95:ba:44:4b:63:33:78:08:54:
eb:9f:fd:d6:ef:25:18:ee:af:04:44:a6:5f:a7:a1:
8c:9d:f3:88:f6:83:a5:2a:e2:8a:c4:fe:01:84:37:
e3:65:07:a4:e7:c0:2e:08:84:14:61:58:73:c4:94:
d3:1e:6c:c3:52:a9:48:17:56:dd:7b:26:ed:c2:42:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DF:C0:4C:6C:87:0A:4F:A5:E6:D9:0E:C1:1B:F6:BB:2F:26:DA:DF
X509v3 Authority Key Identifier:
keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/584ce99f68150734eede487893f83efcc16e7777.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.56.0/22
181.199.208.0/20
190.98.128.0/18
Signature Algorithm: sha256WithRSAEncryption
69:e8:2f:ad:3d:57:86:a0:32:9c:ea:be:fe:a2:5d:e3:b3:12:
9d:83:be:34:ff:41:cc:35:b8:97:46:2a:60:85:f0:a2:d1:96:
01:b7:b1:5e:1d:2b:1f:86:c3:f3:04:98:1a:0c:09:86:9f:c5:
cf:f8:a9:d7:16:1b:51:b7:a3:cb:aa:58:ee:4e:da:bd:bb:13:
54:1b:96:71:b3:05:67:88:13:77:db:a0:3a:4e:a3:76:aa:a2:
90:19:b4:99:42:99:6c:cc:42:bd:ff:87:05:0f:14:3e:9d:58:
b4:1c:2b:bd:94:8d:0f:7e:a7:9e:af:c1:1c:ba:b0:a4:95:c1:
8f:90:01:97:70:0b:47:28:6d:c6:ba:f2:10:3b:46:b3:31:0e:
d0:30:e6:94:fe:a8:c2:23:95:1d:73:d7:d7:df:2d:cf:c6:4d:
9d:aa:3e:d9:28:6a:41:36:94:75:ca:a1:76:b6:7d:41:97:fc:
35:20:bc:55:d0:a0:bd:80:b8:d2:7e:06:3a:cc:73:d3:7b:d9:
11:40:eb:42:8e:18:be:9c:a4:93:a3:54:15:cf:2a:4d:ed:81:
35:3e:d0:2e:59:85:a4:c2:d7:ee:51:63:08:46:d4:c7:cb:48:
c3:b1:d9:f7:ac:91:f9:72:26:ce:02:1c:71:4c:bc:d5:46:34:
23:50:90:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org