Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/164cf594d8a3cd18870b96f1770fa103c9b34693.roa
File: 164cf594d8a3cd18870b96f1770fa103c9b34693.roa (raw, json)
Hash identifier: AGudKOZrTxKvcoq5eqNC1U3fXnvYTsW1prcJJaBlg28=
Subject key identifier: 70:E7:70:51:0E:A3:5A:16:9C:F8:EC:1F:3B:6F:44:03:9D:DE:4D:D9
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 0DE999
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/164cf594d8a3cd18870b96f1770fa103c9b34693.roa
Signing time: Wed 24 Mar 2021 14:28:59 +0000
ROA not before: Wed 24 Mar 2021 14:28:59 +0000
ROA not after: Tue 24 Mar 2026 14:28:59 +0000
asID: 28075
IP address blocks: 201.190.254.0/24 maxlen: 24
201.190.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911769 (0xde999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Mar 24 14:28:59 2021 GMT
Not After : Mar 24 14:28:59 2026 GMT
Subject: CN=164cf594d8a3cd18870b96f1770fa103c9b34693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:92:a2:21:91:3e:37:92:7d:7c:fd:5d:3a:1a:
00:7f:f2:20:7f:58:c2:4c:c1:39:7f:ed:11:c5:af:
d4:74:51:22:70:f3:17:1e:cd:bc:0d:0a:71:73:57:
2f:55:ce:4e:fa:ea:04:05:14:04:16:2d:af:1f:e1:
7c:0c:9f:57:0c:95:ff:c8:75:f4:09:9e:ce:e3:79:
87:4c:73:20:a5:96:97:26:f2:66:d4:2d:ab:98:75:
5b:b6:b3:46:e7:17:b0:e5:82:b7:fd:de:0a:d4:2a:
fe:08:66:7c:bd:0d:4e:1b:ed:83:83:29:25:e1:da:
b4:93:0d:7b:ca:06:e8:14:88:fc:8e:eb:b9:70:21:
87:39:23:29:d7:d3:3d:af:d9:6b:8d:d1:4e:57:de:
7a:6b:e8:25:75:da:56:5b:b8:d8:75:9e:2b:39:b4:
4d:fd:4f:24:31:57:60:93:70:6d:61:6b:21:28:99:
be:3d:a9:db:0f:e7:76:b6:9d:92:7c:95:cb:75:1a:
89:96:8c:dc:91:a2:62:bc:27:7e:a3:d7:fa:d5:79:
14:67:15:65:e4:42:ca:96:eb:a8:db:6e:8f:8a:13:
e4:76:e8:d3:6f:c4:b4:ee:ac:f1:da:b0:a5:a8:b0:
12:60:5f:56:eb:f4:eb:fb:7a:53:17:f3:13:53:c5:
b1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E7:70:51:0E:A3:5A:16:9C:F8:EC:1F:3B:6F:44:03:9D:DE:4D:D9
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/164cf594d8a3cd18870b96f1770fa103c9b34693.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.190.172.0/24
201.190.254.0/24
Signature Algorithm: sha256WithRSAEncryption
49:2c:09:c1:54:8b:ec:d1:44:e4:b6:19:f9:86:88:57:7a:a3:
14:4e:f8:a1:11:d5:9d:63:c1:52:ea:9d:1d:ba:34:f5:7e:48:
14:8a:c1:ca:c3:28:f2:d6:bc:51:58:17:09:9e:8d:e1:ff:88:
ab:f1:bb:73:bd:96:e6:26:96:6c:84:d4:b6:57:be:97:41:01:
58:16:da:c9:cc:de:01:6a:a0:cc:14:35:54:ac:96:4a:0f:8d:
d8:76:f8:15:0a:cd:3a:e4:93:39:39:9f:c9:6e:1b:31:bc:30:
19:88:16:97:5d:f1:4e:b1:0a:c0:b3:c4:ce:9a:ad:15:ae:95:
68:a9:ae:36:44:0e:4d:be:79:92:6d:a8:08:04:50:83:0a:3a:
db:0b:ba:71:4d:e9:7f:4b:e9:24:8c:b1:d5:8e:a9:ec:38:a5:
1c:9f:b2:49:5b:ce:62:5b:19:ce:5e:e0:0d:3b:e7:f3:70:08:
f7:5b:6c:09:f5:af:8d:e2:01:58:a7:41:f1:0a:27:c9:4e:48:
f5:05:f1:eb:e0:3d:ff:63:10:87:27:83:5e:08:1a:23:ba:e7:
32:61:ca:18:f8:72:f3:b5:50:5d:31:cd:af:76:62:07:1c:80:
50:62:38:39:81:40:c3:d2:56:b7:c3:50:3e:a8:63:32:2e:ab:
fd:12:24:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org