Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/f4511a413d7f5e3ecdcd8fb299395da72ae6691a.roa
File: f4511a413d7f5e3ecdcd8fb299395da72ae6691a.roa (raw, json)
Hash identifier: 0wBMh+Eib/Ywhx4VwcYrmDnIPjB4WxyJQyEvoXIH+9Q=
Subject key identifier: 5E:1B:A4:BB:C6:99:F5:DE:7F:08:1B:A0:B9:79:BF:7A:11:D0:C8:4D
Certificate issuer: /CN=419e23f1fa27160195e5e3ab407b2d1b2f418f98
Certificate serial: 1EF037
Authority key identifier: 2E:4A:34:D5:A8:74:62:61:36:DB:18:55:57:9C:12:AE:4F:1B:9C:1A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/419e23f1fa27160195e5e3ab407b2d1b2f418f98.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/f4511a413d7f5e3ecdcd8fb299395da72ae6691a.roa
Signing time: Tue 28 Mar 2023 16:18:22 +0000
ROA not before: Mon 09 Aug 2021 14:51:20 +0000
ROA not after: Mon 10 Aug 2026 14:51:20 +0000
asID: 27988
IP address blocks: 198.12.36.0/22 maxlen: 24
190.122.80.0/20 maxlen: 24
200.55.240.0/21 maxlen: 24
2803:8d00::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027575 (0x1ef037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419e23f1fa27160195e5e3ab407b2d1b2f418f98
Validity
Not Before: Aug 9 14:51:20 2021 GMT
Not After : Aug 10 14:51:20 2026 GMT
Subject: CN=f4511a413d7f5e3ecdcd8fb299395da72ae6691a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:8a:74:5c:85:98:bc:44:77:ca:d7:8c:f0:
d5:4a:c9:24:36:be:8e:58:a7:0c:5e:a3:e6:5b:f3:
cc:89:01:b3:61:08:e4:59:41:9b:9b:11:6f:00:11:
89:e8:ae:c8:39:4b:d7:c0:47:ca:3e:04:01:5b:79:
76:a8:e1:72:37:68:e0:0e:02:17:e2:a8:10:06:01:
e8:08:39:bd:59:86:7d:9b:ff:4b:fc:66:d9:14:e6:
20:68:b1:91:96:b1:46:ed:f8:12:57:d1:86:9f:de:
e7:85:32:a1:9e:c1:e7:c3:00:10:a4:30:16:b8:72:
ec:5f:19:db:3b:a7:bd:b6:9c:8b:6e:54:8b:87:0d:
5d:b3:d3:b6:13:89:dd:e4:9c:b1:fd:3d:ba:f8:39:
b5:1e:4c:23:0f:29:e5:ea:c2:bf:d8:7b:14:73:15:
f2:43:bb:62:ae:c8:18:8f:e2:98:73:8b:ba:06:0d:
de:d0:bd:65:2d:67:f8:81:d1:76:a6:e8:e1:2c:0e:
01:68:51:93:2e:a3:35:9a:8d:49:95:63:60:e1:87:
60:cf:ac:ff:8a:4c:24:08:aa:55:ad:e7:54:88:e0:
74:5b:6d:43:82:54:f2:72:58:53:45:20:68:9e:7f:
b1:60:49:1a:9a:a6:53:8a:d9:6a:0e:4d:84:96:d0:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1B:A4:BB:C6:99:F5:DE:7F:08:1B:A0:B9:79:BF:7A:11:D0:C8:4D
X509v3 Authority Key Identifier:
keyid:2E:4A:34:D5:A8:74:62:61:36:DB:18:55:57:9C:12:AE:4F:1B:9C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/419e23f1fa27160195e5e3ab407b2d1b2f418f98.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/f4511a413d7f5e3ecdcd8fb299395da72ae6691a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/419e23f1fa27160195e5e3ab407b2d1b2f418f98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.122.80.0/20
198.12.36.0/22
200.55.240.0/21
IPv6:
2803:8d00::/32
Signature Algorithm: sha256WithRSAEncryption
1b:c1:30:a3:82:86:cc:eb:97:51:b6:6f:ce:0d:8c:07:83:e3:
38:67:8e:8d:51:6f:d5:31:34:7c:84:da:48:d9:66:23:f5:2f:
72:dc:ee:a2:9a:88:d3:f1:c3:ed:62:52:62:b2:7e:18:2e:7f:
05:80:6c:33:c9:33:49:bc:86:d5:55:bb:72:87:b3:83:a1:99:
4c:f5:be:4b:e6:2f:81:a9:de:51:65:43:99:8f:8a:6e:bd:12:
c6:e6:da:a8:96:4b:5f:3f:84:e5:44:b1:f4:47:c7:44:96:da:
0f:fb:37:c0:a8:d6:8c:83:b3:aa:6e:1f:5b:77:c4:02:a2:bf:
4f:ae:e0:5d:46:0c:b2:45:fb:c6:04:ba:1d:df:a3:cc:2a:27:
1b:c6:2c:7e:ae:ce:d6:11:21:d4:f3:65:20:bf:d8:fb:64:1a:
e3:ca:33:73:1c:23:b2:02:fc:b1:4f:30:83:f1:32:1b:5e:49:
99:fc:0e:a6:3b:bd:b3:f2:a6:a3:70:84:6f:cb:7a:0a:c3:29:
9a:9f:4f:c4:0f:1e:84:27:21:dc:76:f2:49:c8:c3:8a:86:55:
1e:05:d4:de:2a:d7:4b:b2:58:c7:9b:0a:b0:1b:63:34:14:f4:
26:5c:5a:4e:e8:e1:04:e4:d9:cd:70:14:29:d5:35:5d:fc:71:
25:7f:38:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 12:16:59 2023 by rpki-client on console-ams.rpki-client.org