Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/630c600548c9cf0c8b0673449b4b63612f34cab4.roa
File: 630c600548c9cf0c8b0673449b4b63612f34cab4.roa (raw, json)
Hash identifier: RLaEwwjkeNxPKRnCHJUE3PTZHmsyZAdaXS50BiaXwXU=
Subject key identifier: 2E:E5:19:68:6C:46:F5:13:6E:DB:75:16:2B:F0:C4:22:35:75:D7:8F
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 0DEB44
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/630c600548c9cf0c8b0673449b4b63612f34cab4.roa
Signing time: Wed 24 Mar 2021 14:28:59 +0000
ROA not before: Wed 24 Mar 2021 14:28:59 +0000
ROA not after: Tue 24 Mar 2026 14:28:59 +0000
asID: 28075
IP address blocks: 186.189.66.0/24 maxlen: 24
190.113.162.0/24 maxlen: 24
201.190.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912196 (0xdeb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Mar 24 14:28:59 2021 GMT
Not After : Mar 24 14:28:59 2026 GMT
Subject: CN=630c600548c9cf0c8b0673449b4b63612f34cab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:59:f0:bd:68:1e:e1:37:20:32:76:cc:57:
9b:29:0b:74:52:3f:7f:87:ae:9f:a2:f8:8c:1d:96:
19:af:62:5d:a6:d6:4b:4e:2c:e9:5d:97:8f:5d:ac:
1b:90:d1:f0:9d:ba:2c:13:1d:dd:d6:0d:7b:e6:62:
e4:4c:2f:47:a8:92:13:d2:aa:f4:0b:ff:91:ea:69:
e3:16:db:7e:7c:17:e5:fd:13:63:b4:fe:3c:a0:85:
ee:24:ce:36:c0:16:cf:65:9c:6f:5b:e1:d1:53:2b:
c9:8d:f5:c1:60:cf:a7:53:02:7c:33:05:8e:a3:35:
3c:ff:a4:7f:31:5c:09:06:42:d8:4a:25:20:e6:e3:
1a:9b:60:7d:7f:be:05:bb:18:1c:2f:da:41:79:29:
54:5d:be:b1:a2:0a:d0:4c:8a:e5:5a:7e:44:ef:cf:
b2:f2:e8:b3:c3:ba:65:2c:83:b0:9e:c5:34:31:42:
ec:c4:f1:0c:ba:9b:29:20:e2:95:d6:36:94:f6:17:
6c:47:e1:bc:bd:48:6a:0d:19:4d:8f:bd:31:a3:cf:
fd:23:e6:a7:81:40:80:b8:29:75:ce:30:a8:20:9d:
07:86:fe:9a:93:09:7c:ff:3a:44:aa:4a:10:7d:91:
f2:d1:82:53:1c:8c:96:1b:68:20:07:21:e2:81:95:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E5:19:68:6C:46:F5:13:6E:DB:75:16:2B:F0:C4:22:35:75:D7:8F
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/630c600548c9cf0c8b0673449b4b63612f34cab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.189.66.0/24
190.113.162.0/24
201.190.173.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b3:c5:ed:4a:19:39:6e:0d:f8:f8:91:a6:5f:7c:3b:c8:28:
e0:bd:0d:e2:31:4e:b7:f9:ce:e2:a4:ca:a4:6b:09:b0:62:c4:
5a:50:db:e7:6a:d8:cf:66:b0:df:70:00:65:d8:ef:3e:fb:84:
8c:cc:b6:29:fd:a4:cb:ff:38:fe:3b:b1:26:f2:e3:2b:55:ba:
e8:58:28:e9:c3:79:6e:88:20:79:f9:f2:cb:1a:d2:9b:8c:0a:
32:53:b2:ff:26:bf:1f:57:51:11:22:55:e2:40:98:41:fe:54:
8c:7b:2c:4b:f1:ab:59:61:45:0f:84:19:0f:5d:74:80:f1:fe:
69:ae:80:c3:10:83:3b:fc:df:64:05:98:13:67:bf:26:c8:07:
b2:48:c6:33:49:92:e5:50:de:0e:95:35:35:72:aa:b2:72:4b:
96:ad:bc:54:09:79:46:0b:52:1b:e9:b3:17:7c:50:bf:74:da:
4f:78:66:51:30:c8:c6:22:03:4d:72:a1:2e:0f:88:32:51:8b:
bf:7c:49:25:ff:11:34:a2:85:f3:e1:34:97:7c:94:0f:7d:46:
77:a2:0b:6c:5c:af:44:75:ce:ec:55:b3:90:dc:c9:29:c5:7b:
92:2e:7b:8a:5b:4d:e4:9e:e6:78:6f:82:52:53:e5:8d:7b:ea:
19:c3:8a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org