Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/959160c6d98a7a4611048c0a8dda90cc9ccf0bda.roa
File: 959160c6d98a7a4611048c0a8dda90cc9ccf0bda.roa (raw, json)
Hash identifier: lWGwTuzoU9y/zAorDN3Dim3l86tOk/ubCYSrCa8viBI=
Subject key identifier: 75:15:38:FE:95:D2:36:6A:60:8B:D8:65:D5:1E:51:32:0F:10:A1:A9
Certificate issuer: /CN=1076b178dfcc599f8de3d8db587bc6a97166efe6
Certificate serial: 0DD248
Authority key identifier: 62:54:C0:88:69:DE:40:D1:4C:A6:E1:4A:A3:7F:49:06:2A:3B:EB:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1076b178dfcc599f8de3d8db587bc6a97166efe6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/959160c6d98a7a4611048c0a8dda90cc9ccf0bda.roa
Signing time: Wed 24 Mar 2021 14:31:42 +0000
ROA not before: Wed 24 Mar 2021 14:31:42 +0000
ROA not after: Tue 24 Mar 2026 14:31:42 +0000
asID: 262187
IP address blocks: 131.100.180.0/22 maxlen: 24
190.211.80.0/21 maxlen: 24
190.211.88.0/22 maxlen: 24
2800:a30::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905800 (0xdd248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1076b178dfcc599f8de3d8db587bc6a97166efe6
Validity
Not Before: Mar 24 14:31:42 2021 GMT
Not After : Mar 24 14:31:42 2026 GMT
Subject: CN=959160c6d98a7a4611048c0a8dda90cc9ccf0bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:45:8e:30:c7:7b:0d:89:49:ba:18:ec:f1:1c:
89:ec:b2:8e:28:ac:da:24:f5:1b:ed:ad:39:4a:77:
71:b6:e1:52:d3:1e:79:1a:d4:11:4e:6b:1b:9a:d5:
53:f8:d2:b0:fb:b3:5d:68:da:57:dd:9b:18:96:d1:
a6:63:25:97:8f:44:c0:2a:a1:c1:02:fc:7c:c2:94:
c1:4a:cf:dc:86:f3:9c:54:8e:55:a8:ec:c4:14:c1:
7b:ec:cb:4e:4b:3f:61:0a:63:26:c7:89:0c:38:d6:
65:c6:88:66:39:24:8a:bc:76:13:db:6d:a4:52:28:
52:52:b1:74:30:bf:4d:18:99:de:3c:7b:8f:cf:e9:
b6:af:f1:61:a4:db:50:c6:d7:2a:78:15:0f:5d:66:
57:f5:ef:be:4d:93:a7:25:05:59:80:c8:7b:7f:03:
67:e2:cc:79:d7:7e:7f:9b:dd:d8:83:5a:b7:60:c0:
05:55:a9:f8:df:3f:a1:36:4e:a6:fe:dc:a5:5f:3a:
47:af:1c:c3:16:83:f0:37:aa:de:1a:db:55:c8:4e:
66:16:5d:4c:5b:44:c7:59:8c:61:2b:79:f6:12:ac:
6f:25:70:ce:7f:73:83:0e:da:f7:79:41:5d:64:e4:
dd:89:f0:b1:04:45:42:a5:cc:42:2a:53:c9:d5:00:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:15:38:FE:95:D2:36:6A:60:8B:D8:65:D5:1E:51:32:0F:10:A1:A9
X509v3 Authority Key Identifier:
keyid:62:54:C0:88:69:DE:40:D1:4C:A6:E1:4A:A3:7F:49:06:2A:3B:EB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1076b178dfcc599f8de3d8db587bc6a97166efe6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/959160c6d98a7a4611048c0a8dda90cc9ccf0bda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/1076b178dfcc599f8de3d8db587bc6a97166efe6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.180.0/22
190.211.80.0-190.211.91.255
IPv6:
2800:a30::/32
Signature Algorithm: sha256WithRSAEncryption
03:76:6e:42:08:47:d7:3a:00:ba:b1:e1:33:ca:ee:50:3c:46:
af:1d:dd:3b:81:43:56:62:cb:f0:1a:cf:a8:fe:c7:78:66:59:
ec:52:a6:e1:f8:39:dc:0b:90:e4:a6:4a:31:be:a3:6d:38:e5:
4c:14:f5:5e:d2:14:56:07:4c:23:a1:99:b3:44:8e:82:80:c7:
a7:29:73:ce:94:b7:4a:93:5c:20:c6:1f:32:8c:bd:4b:49:d3:
dc:a6:42:c0:18:54:99:61:d7:a9:2a:46:6c:16:20:fa:45:d4:
61:43:36:53:79:ca:bc:e8:9c:b8:e4:ba:66:71:ac:ec:5f:ed:
d6:50:fd:06:10:de:fc:39:64:a4:35:97:25:fe:eb:64:0d:0c:
d2:61:fb:87:7d:c3:d3:83:05:28:a8:a3:bf:2a:81:15:e0:e0:
5d:27:43:f3:67:ee:01:d8:04:78:da:88:b6:ac:14:68:7c:14:
a2:77:11:33:c2:2f:4f:2c:fe:37:05:d1:9a:6d:31:63:0b:4b:
07:2d:ec:ea:35:22:7a:1a:49:fa:19:ea:50:7b:e3:90:27:74:
f9:e7:29:e8:37:46:ff:89:77:2c:01:3c:f6:f8:e1:4f:29:11:
74:bd:02:5a:73:3c:b1:9a:f4:29:6e:c1:f8:20:2f:58:e6:56:
0a:bf:48:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 17:34:02 2023 by rpki-client on console-fra.rpki-client.org