Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/dc8b738bcd02214b7ee7467bd002574127aad77d.roa
File: dc8b738bcd02214b7ee7467bd002574127aad77d.roa (raw, json)
Hash identifier: CsvSADEUu+m7TIIourjcIUk8wGbbQwujN5rPqEnU5WM=
Subject key identifier: 7A:39:64:8F:10:7D:CF:5A:3E:D5:D1:B9:55:0A:47:87:94:71:42:79
Certificate issuer: /CN=14544d678d65a7bfc793373410f1c5964d13b336
Certificate serial: 1E1B7D
Authority key identifier: 4B:16:E4:2F:F1:48:2A:05:9C:C2:6D:DB:CC:6F:FF:48:DA:6A:3D:B2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14544d678d65a7bfc793373410f1c5964d13b336.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/dc8b738bcd02214b7ee7467bd002574127aad77d.roa
Signing time: Mon 06 Feb 2023 16:36:05 +0000
ROA not before: Mon 30 Jan 2023 00:14:42 +0000
ROA not after: Mon 03 Feb 2025 00:14:42 +0000
asID: 262196
IP address blocks: 168.121.208.0/22 maxlen: 25
181.118.208.0/20 maxlen: 25
190.4.112.0/20 maxlen: 25
190.184.240.0/20 maxlen: 30
2800:ab0::/32 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1973117 (0x1e1b7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14544d678d65a7bfc793373410f1c5964d13b336
Validity
Not Before: Jan 30 00:14:42 2023 GMT
Not After : Feb 3 00:14:42 2025 GMT
Subject: CN=dc8b738bcd02214b7ee7467bd002574127aad77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:fd:4a:af:a4:25:dd:fe:91:ca:be:c4:9d:
43:a0:69:48:c5:0d:d2:8d:f3:f2:91:eb:fa:c9:7d:
01:4f:75:68:24:41:dc:66:1d:82:33:ea:f8:4e:ab:
24:ef:d9:92:31:e2:2e:73:82:ad:bc:03:41:bd:4f:
ec:98:cc:e2:34:96:06:38:d5:b8:be:78:35:0d:5b:
ec:b2:4b:fe:16:ba:83:eb:3e:fe:78:9e:b9:7c:27:
fa:09:8d:c2:3d:1a:7f:01:0e:82:13:0a:3d:c7:5b:
e7:d5:e4:1e:50:9e:65:f5:bf:9a:e8:b8:19:c3:43:
c6:bb:e3:50:c1:1a:26:03:5c:fc:17:92:98:9c:e7:
59:29:74:47:3a:87:7c:4f:f0:b0:01:5d:bc:75:a9:
10:bc:44:d6:b0:f4:e0:e3:68:36:e0:a5:3b:f4:fb:
d3:56:73:3d:73:92:5c:70:31:e7:8e:65:49:62:4b:
8d:c0:2a:8a:b8:ed:6b:9a:82:cc:8b:1d:27:58:5d:
49:d4:21:c5:55:92:25:8c:09:36:18:5d:5b:e2:e2:
6f:2f:0a:28:5e:09:f5:5d:23:d2:24:c2:f3:ce:5a:
bc:f8:bf:6b:ac:c5:c5:c7:1c:14:6c:5a:5b:cd:23:
9c:fa:22:12:ee:b7:85:84:16:a2:ef:fb:1f:e0:98:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:39:64:8F:10:7D:CF:5A:3E:D5:D1:B9:55:0A:47:87:94:71:42:79
X509v3 Authority Key Identifier:
keyid:4B:16:E4:2F:F1:48:2A:05:9C:C2:6D:DB:CC:6F:FF:48:DA:6A:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14544d678d65a7bfc793373410f1c5964d13b336.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/dc8b738bcd02214b7ee7467bd002574127aad77d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/14544d678d65a7bfc793373410f1c5964d13b336.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.208.0/22
181.118.208.0/20
190.4.112.0/20
190.184.240.0/20
IPv6:
2800:ab0::/32
Signature Algorithm: sha256WithRSAEncryption
b5:fa:33:b9:85:49:13:28:78:5a:72:22:39:46:2d:38:c9:34:
2a:f3:72:da:d6:99:7e:82:e4:6b:5d:b4:87:db:5b:4b:b5:b2:
aa:55:f2:c1:05:3c:08:fd:58:e6:13:df:e2:86:d6:7c:3e:e3:
36:b7:ba:74:88:aa:36:e3:51:23:20:41:00:9e:be:95:02:c1:
c1:ca:ad:37:11:dc:02:d4:a7:dc:0c:c8:12:65:89:8c:89:7c:
d7:65:21:cf:6c:58:38:d5:0d:e2:18:a3:65:24:bf:db:a7:d6:
16:6a:88:fc:6f:e4:1d:9d:ad:4e:40:d5:a0:e4:b2:3b:8d:a6:
89:ff:78:32:6b:87:01:44:6a:39:8f:ee:0e:65:b9:4c:a3:61:
24:cd:af:41:15:c3:4d:60:1a:39:ca:4a:ea:d8:49:dc:0c:97:
fc:b2:ef:68:69:4c:9e:a5:8c:5e:58:a4:fa:a5:a7:46:86:df:
0c:2c:5e:60:d2:d3:7c:ea:de:30:f2:f9:96:d9:7f:6a:28:f8:
57:91:32:8f:b0:b2:55:85:40:c4:52:5b:b0:91:54:7c:dc:25:
03:5a:9f:83:9c:d6:95:49:d6:f7:ed:4d:32:2b:18:6f:34:cf:
8d:2f:18:8c:9c:bb:95:7a:10:e5:e3:9b:d8:77:b4:40:98:b4:
82:bb:48:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:57 2023 by rpki-client on console-ams.rpki-client.org