Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c89445877a72eef2c75636e1bffbd22955f84f27.roa
File: c89445877a72eef2c75636e1bffbd22955f84f27.roa (raw, json)
Hash identifier: Yy1hO1gNIiqLstyOSs0hAPk0YqfcXvPL9CYqzIYVHL4=
Subject key identifier: D9:9B:EF:59:A8:2C:B5:8F:1C:9A:2F:A0:4A:F4:11:81:69:6F:D0:CC
Certificate issuer: /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial: 17EB9F
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c89445877a72eef2c75636e1bffbd22955f84f27.roa
Signing time: Tue 19 Apr 2022 12:26:10 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Wed 31 Dec 2025 03:00:00 +0000
asID: 12956
IP address blocks: 181.199.208.0/20 maxlen: 24
190.98.128.0/19 maxlen: 24
190.98.160.0/19 maxlen: 24
168.195.56.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1567647 (0x17eb9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Dec 31 03:00:00 2025 GMT
Subject: CN=c89445877a72eef2c75636e1bffbd22955f84f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:80:ce:d7:7b:87:1e:5a:65:a1:df:08:2a:
97:05:87:34:63:91:8d:8b:e2:f0:61:2c:00:a1:a4:
df:6b:d3:8f:6d:d7:17:0f:26:0d:1d:1a:fd:32:c1:
13:f1:b3:d2:d8:ad:a9:d0:a3:1e:f8:19:31:25:8a:
ea:43:a5:89:e7:3d:3c:c3:ba:40:d9:a4:9c:48:22:
67:a4:d8:b9:43:a7:f4:b4:c6:c2:2f:ab:ca:d5:ae:
ef:ae:4e:d5:2f:69:f1:47:69:1e:52:1f:9b:ad:58:
1d:50:12:c9:73:bb:d2:c9:06:16:7d:73:65:17:cb:
de:d8:85:af:a3:69:8f:b9:53:58:9c:22:d8:5b:f2:
0f:a5:8e:b4:d9:27:ec:db:62:21:d5:26:41:14:cb:
3b:d4:c0:9b:b7:a3:f7:20:7f:ec:59:6d:d9:d5:61:
fb:5e:2d:1e:3c:06:c9:1d:63:82:e8:d4:ff:fe:64:
c3:37:1f:c0:b8:71:a1:a6:08:dc:9e:5c:6e:5a:fa:
7e:83:59:56:96:f3:15:e1:25:3a:95:8f:d0:5d:c8:
43:71:55:a2:ef:90:d3:52:7c:7a:1b:78:67:9b:0f:
14:4e:1e:37:de:cc:c2:76:71:c5:ac:16:a1:b9:21:
ae:49:ed:eb:7b:85:48:11:74:a3:29:19:32:53:4e:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9B:EF:59:A8:2C:B5:8F:1C:9A:2F:A0:4A:F4:11:81:69:6F:D0:CC
X509v3 Authority Key Identifier:
keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c89445877a72eef2c75636e1bffbd22955f84f27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.56.0/22
181.199.208.0/20
190.98.128.0/18
Signature Algorithm: sha256WithRSAEncryption
11:db:7d:62:89:59:b9:6c:e3:56:ee:e7:f6:a6:49:f0:cd:5a:
57:f9:f4:f6:b6:26:cf:97:1d:8d:3d:3c:74:88:b8:62:90:4f:
0f:58:f3:51:e7:8b:52:7b:60:80:36:0e:71:36:e7:ae:61:d5:
0f:ee:0d:15:1d:d8:9d:8c:57:98:65:4a:b4:31:3f:53:10:5e:
ea:8b:df:a4:84:34:f1:83:8a:4b:2b:ee:96:1d:9f:f3:65:b8:
1a:e9:a7:d7:7c:b9:1f:77:3d:08:79:70:d5:61:23:40:20:b1:
b6:fe:6f:e8:72:d4:0a:fc:86:97:4a:63:5f:ea:89:a7:11:cd:
fd:53:fa:28:e5:d2:b4:78:5c:6f:6f:48:9a:75:ee:df:9e:24:
10:65:c6:5f:04:b5:97:e7:8d:b6:bd:82:c4:16:92:a1:96:7d:
3c:aa:83:13:b8:94:e0:4d:ef:70:2e:73:c1:b6:35:4a:6f:79:
f5:81:20:ac:54:c1:93:54:85:95:cd:ff:4d:50:ea:19:e1:ee:
a6:5e:42:76:25:f0:72:4d:16:a7:27:fe:31:40:af:ae:40:e3:
45:39:bd:43:57:1c:dc:2a:ff:d7:78:e1:ae:ee:64:07:fb:56:
24:eb:c2:77:eb:74:99:70:1f:be:16:c3:76:83:21:1e:6a:47:
29:7b:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org