Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/89e141363a7f8f0196ce65291264ce420fe4355b.roa
File: 89e141363a7f8f0196ce65291264ce420fe4355b.roa (raw, json)
Hash identifier: MSDcWNb37TdIdXOHMktd4QkMgNSGu4eldJ5OCDBsRk8=
Subject key identifier: 61:E3:67:FB:84:5B:B3:9C:0D:51:B6:D8:DE:0D:70:9E:A5:76:B1:4F
Certificate issuer: /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial: 01F14E
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/89e141363a7f8f0196ce65291264ce420fe4355b.roa
Signing time: Mon 29 Nov 2021 18:39:17 +0000
ROA not before: Mon 29 Nov 2021 03:00:00 +0000
ROA not after: Wed 29 Nov 2023 03:00:00 +0000
asID: 27768
IP address blocks: 201.217.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127310 (0x1f14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
Validity
Not Before: Nov 29 03:00:00 2021 GMT
Not After : Nov 29 03:00:00 2023 GMT
Subject: CN=89e141363a7f8f0196ce65291264ce420fe4355b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:ba:97:f2:e9:50:02:57:f6:6a:61:ad:72:
fd:52:3f:e3:21:05:89:4f:71:7b:5d:eb:90:c5:9c:
cb:d8:0b:fa:e1:08:8c:15:2d:50:d3:ef:d8:dd:3c:
85:ad:37:fd:95:69:f0:26:b1:c6:fc:fa:28:14:03:
2d:a9:10:fb:56:78:1c:dd:48:7c:23:fb:c6:dc:50:
1c:44:f6:21:ed:67:9c:5b:96:2e:87:d5:36:8a:f4:
04:14:d6:a7:a4:50:66:4a:81:a8:3d:5a:78:60:c5:
aa:78:c0:ff:ca:ec:6a:70:a3:6e:f6:c1:6c:db:6c:
3f:be:43:f9:bb:44:89:1c:35:1c:08:41:05:09:07:
8f:67:50:84:86:83:24:d8:83:89:5b:97:02:7b:5e:
50:f4:42:93:da:73:92:22:ed:ba:eb:81:c0:97:3f:
6c:c2:80:f0:21:38:f8:3e:7f:84:b3:b2:45:1b:69:
ea:2c:80:3d:a5:02:1e:67:f8:78:ff:2c:37:1c:0c:
a0:7f:bb:c3:fc:61:46:32:52:f6:d2:15:a4:45:0e:
83:b7:d7:2c:c3:db:a5:d6:87:32:ac:a3:25:27:94:
79:3e:0a:47:e4:16:4b:ee:d5:ef:70:24:31:89:cb:
5d:5e:aa:c5:0d:8b:3e:b5:6c:a0:2c:b7:ad:c1:9d:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E3:67:FB:84:5B:B3:9C:0D:51:B6:D8:DE:0D:70:9E:A5:76:B1:4F
X509v3 Authority Key Identifier:
keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/89e141363a7f8f0196ce65291264ce420fe4355b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.32.0/22
Signature Algorithm: sha256WithRSAEncryption
51:aa:1f:80:1d:07:6b:5c:db:8c:09:a2:90:b2:df:a6:37:7e:
b9:a9:24:1f:08:ab:20:f1:d9:fb:51:aa:f3:cf:a7:e6:f6:2b:
a6:e0:d3:f5:1d:a8:ff:aa:8a:e2:80:31:48:26:71:4b:20:8f:
df:ed:9c:f5:00:fe:71:e5:29:c0:85:90:08:84:cc:c8:b6:a9:
13:fd:ec:2c:03:39:db:78:90:1e:35:8f:bd:68:28:c5:29:a3:
44:5d:3b:7e:bb:0b:b3:d5:73:70:88:5b:fc:18:34:82:9b:b8:
7f:93:a7:0a:b2:9b:7a:bc:8f:e1:d9:f8:37:a9:28:7e:e5:8b:
be:cf:c6:90:0d:4a:0c:35:5f:1d:16:63:e5:b5:7b:17:4d:81:
d6:68:c2:a1:91:e7:23:4d:be:57:8a:24:5a:0e:2e:f8:d5:d0:
e7:ee:37:69:5e:d5:bc:84:ce:2e:c0:ad:2d:76:65:2b:42:73:
35:78:ea:04:f4:df:bb:85:41:5d:36:a3:25:b2:2a:ab:b9:ab:
2d:7a:17:41:2a:07:84:1c:c4:17:3d:99:0a:35:ea:2f:7e:b7:
24:1d:d0:af:a1:39:b4:51:07:58:76:9b:05:c1:b0:90:42:58:
3d:4d:07:73:18:6d:1d:a5:c3:f5:cf:34:af:16:96:1d:35:e6:
20:e6:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org