Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/ac8465ece710003114d632b1d6c1f57a7e70e4b6.roa
File: ac8465ece710003114d632b1d6c1f57a7e70e4b6.roa (raw, json)
Hash identifier: 0lqxqw65Dx8zhJ3k3B9bVyOsS+rERXVZZKAXaAy8Ywk=
Subject key identifier: A9:DF:EF:EB:75:82:E8:3F:9C:49:61:F0:03:29:DD:1D:8A:21:5B:FD
Certificate issuer: /CN=c808f585323c60a52c534c21625a79d8b5959db7
Certificate serial: 0C28AD
Authority key identifier: 6B:24:3C:26:F5:3C:CC:AC:F0:B0:8B:93:85:4A:1C:40:57:02:F0:BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c808f585323c60a52c534c21625a79d8b5959db7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/ac8465ece710003114d632b1d6c1f57a7e70e4b6.roa
Signing time: Wed 24 Mar 2021 14:32:38 +0000
ROA not before: Wed 24 Mar 2021 14:32:38 +0000
ROA not after: Tue 24 Mar 2026 14:32:38 +0000
asID: 28107
IP address blocks: 190.124.224.0/20 maxlen: 20
190.124.240.0/22 maxlen: 22
2801:0:2f0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 796845 (0xc28ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c808f585323c60a52c534c21625a79d8b5959db7
Validity
Not Before: Mar 24 14:32:38 2021 GMT
Not After : Mar 24 14:32:38 2026 GMT
Subject: CN=ac8465ece710003114d632b1d6c1f57a7e70e4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:bb:0d:f7:1f:85:cc:45:1f:16:3d:a0:c3:
53:44:ed:c5:13:06:49:1f:fe:10:57:8a:80:cb:9b:
b7:13:3d:f2:fb:f0:79:39:ed:41:c9:b1:a9:01:c1:
67:11:d1:5d:59:8c:0d:dc:bb:c8:63:f5:ba:4c:67:
41:ce:ae:50:42:ca:5f:7e:72:e9:03:2c:ea:ab:38:
67:3f:8f:65:f2:32:8b:78:69:c3:a4:b0:85:93:aa:
a0:e3:4c:c8:00:17:dc:7c:ba:43:39:35:ba:67:0c:
c2:47:1f:01:59:37:5a:1e:8e:e6:86:88:28:3f:51:
42:ff:07:5d:8c:db:f8:4e:cb:a4:9a:ff:f1:99:6c:
09:fc:09:0e:64:97:77:de:d8:bc:b6:fe:c3:90:ff:
ca:20:71:da:8b:60:ef:c9:4f:5c:37:dc:59:13:f2:
3a:ca:05:d1:1a:e5:c5:5a:20:fd:fb:13:fb:50:24:
e9:01:1c:89:b7:9a:57:da:bc:95:08:71:b1:ca:e4:
fc:9a:37:b9:54:40:58:c1:06:a8:bc:06:1e:17:79:
20:af:ab:dc:33:ae:84:51:06:da:b2:50:a5:20:1d:
48:6b:37:74:1e:6a:3e:39:9e:fb:db:13:e3:d0:a2:
f2:a2:7a:cf:0f:48:83:6a:af:66:0f:de:43:b2:3e:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DF:EF:EB:75:82:E8:3F:9C:49:61:F0:03:29:DD:1D:8A:21:5B:FD
X509v3 Authority Key Identifier:
keyid:6B:24:3C:26:F5:3C:CC:AC:F0:B0:8B:93:85:4A:1C:40:57:02:F0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c808f585323c60a52c534c21625a79d8b5959db7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/ac8465ece710003114d632b1d6c1f57a7e70e4b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/c808f585323c60a52c534c21625a79d8b5959db7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.224.0-190.124.243.255
IPv6:
2801:0:2f0::/48
Signature Algorithm: sha256WithRSAEncryption
00:6d:33:22:95:24:d9:86:60:a5:30:dc:e2:8a:31:0e:c3:f9:
e0:fb:03:1c:c1:13:cb:b8:d4:e7:ab:fa:a6:bb:57:07:22:c9:
f2:f6:13:37:83:8b:96:92:96:4f:7e:63:64:3e:7f:e1:88:b8:
a2:7c:4a:05:59:e9:1e:64:71:6f:fa:a5:e7:ce:b8:23:c5:eb:
41:9a:c5:f6:77:31:0f:21:0d:7e:e0:61:61:a0:6c:a1:b9:cd:
33:c1:9e:24:57:4f:71:97:24:8a:1e:dc:bc:f5:40:f1:19:f1:
ac:f9:bf:91:ca:97:60:9f:b9:2d:1c:ac:0b:e2:ff:aa:df:50:
9e:34:19:49:2e:72:97:03:a1:3c:a8:30:9d:ff:fa:33:33:de:
c5:20:2f:8a:41:d7:55:7d:6a:9a:5b:da:e7:db:0f:3b:c4:60:
3d:7f:cf:73:d4:e4:8d:5a:51:f1:8f:bf:f4:9e:f6:fc:35:17:
57:4e:ce:58:a7:fd:8c:11:66:38:16:b5:fc:1b:9b:7f:4a:60:
32:2e:0b:78:dc:fe:7e:c7:0c:79:18:e9:a1:f4:57:98:46:47:
b5:5c:2b:f2:53:9c:6d:77:10:19:ce:da:47:c9:36:97:4d:8b:
38:38:3d:8b:bc:f9:bb:e4:2d:bc:6c:57:6e:3e:9a:a3:1f:d2:
6b:18:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-fra.rpki-client.org