Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dd0f90eb-e468-4666-a280-df1771f78cf9/c2b07e2776605127c491cdb08567f78e7f44f8b5.roa
File: c2b07e2776605127c491cdb08567f78e7f44f8b5.roa (raw, json)
Hash identifier: BOO1/VBsqfyyBfxB701Mncqr8+4quV6K9J22OxtyMas=
Subject key identifier: 9E:CD:E7:C2:92:09:80:5E:F9:47:88:5B:51:5B:F4:9C:08:21:38:85
Certificate issuer: /CN=cda627952372991f835267505e212d55f4374cef
Certificate serial: 103AAD
Authority key identifier: 20:7D:B3:FF:9C:9E:95:99:C6:BD:51:BF:9A:8F:26:DF:84:DC:2C:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cda627952372991f835267505e212d55f4374cef.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dd0f90eb-e468-4666-a280-df1771f78cf9/c2b07e2776605127c491cdb08567f78e7f44f8b5.roa
Signing time: Tue 03 Aug 2021 20:22:06 +0000
ROA not before: Tue 03 Aug 2021 03:00:00 +0000
ROA not after: Thu 03 Aug 2023 03:00:00 +0000
asID: 394474
IP address blocks: 191.102.128.0/21 maxlen: 21
191.102.136.0/21 maxlen: 21
191.102.144.0/21 maxlen: 21
191.102.152.0/21 maxlen: 21
191.102.160.0/20 maxlen: 20
191.102.176.0/21 maxlen: 21
191.102.184.0/21 maxlen: 21
170.244.92.0/22 maxlen: 22
170.254.176.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1063597 (0x103aad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda627952372991f835267505e212d55f4374cef
Validity
Not Before: Aug 3 03:00:00 2021 GMT
Not After : Aug 3 03:00:00 2023 GMT
Subject: CN=c2b07e2776605127c491cdb08567f78e7f44f8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:f8:90:03:30:0f:87:75:d3:89:9d:2b:97:
97:72:56:30:25:f5:ee:56:d2:de:99:4d:54:9c:e9:
ff:13:df:a6:6a:fa:8f:19:09:d3:9d:01:37:f7:66:
5b:f3:1c:38:d1:d5:96:42:af:68:14:09:b3:07:57:
d8:a2:08:ed:ee:cf:b6:1f:2c:35:98:16:6a:5f:c4:
a2:25:6c:fa:30:fb:f5:e3:04:5c:1f:44:2c:28:d0:
c6:ee:be:cf:1d:74:79:2d:64:c4:05:09:29:9a:da:
94:25:a5:7c:1f:0c:2f:d5:25:8b:64:e6:cf:bd:ab:
e5:e9:31:97:4d:8a:c0:ea:aa:e1:29:0b:37:cd:14:
24:74:39:b6:e9:31:9d:0d:0a:58:cd:f0:8b:d9:d6:
b6:25:1e:c1:9e:85:b5:78:f0:c8:ea:02:c5:95:56:
27:bd:82:8c:fd:71:5e:75:d8:e6:7c:dc:0e:58:c3:
08:99:d1:47:81:cd:b3:bb:5a:5b:66:e8:e2:94:9d:
d7:9e:20:e2:8b:5c:06:27:37:cf:aa:3f:b7:fa:0f:
33:0a:03:97:59:37:d4:65:0f:6f:4d:71:40:6e:10:
bb:76:2c:64:b1:07:38:43:89:2b:9f:d5:f9:14:35:
1c:11:98:01:21:df:66:e6:4e:f9:13:9c:31:71:37:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CD:E7:C2:92:09:80:5E:F9:47:88:5B:51:5B:F4:9C:08:21:38:85
X509v3 Authority Key Identifier:
keyid:20:7D:B3:FF:9C:9E:95:99:C6:BD:51:BF:9A:8F:26:DF:84:DC:2C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cda627952372991f835267505e212d55f4374cef.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dd0f90eb-e468-4666-a280-df1771f78cf9/c2b07e2776605127c491cdb08567f78e7f44f8b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/dd0f90eb-e468-4666-a280-df1771f78cf9/cda627952372991f835267505e212d55f4374cef.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.92.0/22
170.254.176.0/22
191.102.128.0/18
Signature Algorithm: sha256WithRSAEncryption
79:c4:43:d3:ac:fc:33:c7:8c:92:ca:9c:4a:57:a2:6f:eb:73:
c6:0e:16:c4:f6:1a:17:6f:71:25:ff:37:58:40:be:91:02:0e:
c6:6b:f7:48:f2:f1:67:ad:aa:0f:6a:39:f5:c1:7a:85:c9:c0:
a5:c8:05:24:8a:c4:19:f0:8e:06:6d:83:81:12:de:7d:19:dd:
89:b2:0d:ba:1d:59:71:12:3f:18:7e:46:c1:3e:5e:dc:62:0e:
31:8f:d3:9a:27:d9:1a:58:fd:0f:90:bf:74:78:b5:a7:f5:60:
3e:66:6f:5b:f0:dc:3c:c8:e2:46:3e:d6:81:d2:05:b1:62:26:
c2:f1:46:3a:bc:80:d0:94:0b:91:53:53:6f:a5:18:85:29:b2:
e7:f8:c2:3e:2e:f5:e8:48:fa:47:06:ef:05:83:36:77:0b:03:
3d:18:05:a2:38:ca:4a:89:f5:49:15:3c:20:5b:f6:75:53:4e:
ed:a4:ff:5f:e6:e3:35:89:5a:fb:e6:f3:0b:63:ac:52:dc:40:
74:4a:0b:68:9a:7a:0a:da:42:b0:7f:a9:94:8f:88:8c:d9:03:
bf:dc:d1:59:99:c8:59:86:50:eb:c3:6e:42:b4:2d:98:d7:b8:
22:4e:75:ad:8d:51:85:b4:e3:30:98:73:ae:6d:31:61:e0:d1:
fb:3d:f2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 09:11:41 2023 by rpki-client on console-ams.rpki-client.org