Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/7dc6599e7afe706bf45c7c6bb2e5edd8b40a9d24.roa
File: 7dc6599e7afe706bf45c7c6bb2e5edd8b40a9d24.roa (raw, json)
Hash identifier: x+2LtwjO6n1yhoejaeqfO9xxFUyhd97zwiWkygBoqok=
Subject key identifier: 5B:2C:8C:F1:DE:75:4C:57:E1:AD:91:30:88:27:4B:8F:13:2E:FD:5C
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 0E02D4
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/7dc6599e7afe706bf45c7c6bb2e5edd8b40a9d24.roa
Signing time: Wed 24 Mar 2021 14:29:00 +0000
ROA not before: Wed 24 Mar 2021 14:28:59 +0000
ROA not after: Tue 24 Mar 2026 14:28:59 +0000
asID: 28075
IP address blocks: 168.90.10.0/24 maxlen: 24
181.118.104.0/24 maxlen: 24
181.118.105.0/24 maxlen: 24
201.190.224.0/24 maxlen: 24
201.190.225.0/24 maxlen: 24
201.190.226.0/24 maxlen: 24
201.190.227.0/24 maxlen: 24
201.190.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918228 (0xe02d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Mar 24 14:28:59 2021 GMT
Not After : Mar 24 14:28:59 2026 GMT
Subject: CN=7dc6599e7afe706bf45c7c6bb2e5edd8b40a9d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:51:3f:3b:92:e7:a5:c6:bf:af:68:8f:a0:
18:36:93:17:75:d0:4c:32:00:71:30:14:25:0b:24:
09:c8:ef:46:c9:49:25:e8:12:35:6d:6c:13:87:95:
23:ae:21:01:34:30:e1:39:3c:79:20:0e:4e:98:24:
d1:cb:48:4f:9c:95:f4:86:96:49:8f:a4:4f:95:23:
41:19:f3:16:c3:cd:7e:5f:81:50:3b:3b:1e:bc:d5:
1e:ed:7c:38:e0:ab:2e:f5:01:82:3c:f7:e6:b0:29:
f1:11:23:e0:40:96:5d:12:80:64:6b:8f:29:79:ee:
e8:3b:f8:09:cc:40:96:f7:89:43:0a:80:c5:72:d6:
f8:c6:97:99:0a:bc:c2:a3:c9:71:7c:b7:5e:cd:78:
b1:c9:6a:8d:b7:7a:ce:f9:8b:44:40:88:e0:a6:83:
0b:c2:7e:c7:8e:97:2d:01:a0:41:ba:7a:53:94:d1:
48:83:33:61:4c:0e:30:d3:3d:58:e5:ec:77:65:6f:
66:84:08:fd:b2:24:8c:50:b3:bb:9b:e6:56:20:70:
7e:c6:76:73:9b:e4:e8:32:82:fa:e8:58:2f:25:30:
5b:97:cc:28:6f:de:46:82:dc:fd:36:29:c5:53:ee:
90:43:64:f0:1c:93:3a:45:09:49:b7:cf:b3:2c:6a:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2C:8C:F1:DE:75:4C:57:E1:AD:91:30:88:27:4B:8F:13:2E:FD:5C
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/7dc6599e7afe706bf45c7c6bb2e5edd8b40a9d24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.10.0/24
181.118.104.0/23
201.190.224.0/22
201.190.229.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c4:84:b0:8f:09:6e:ff:7e:9e:d4:e3:da:0c:f3:7c:71:c0:
1c:20:e6:a7:d1:3d:6a:fc:12:ac:43:5f:27:7a:23:3f:04:42:
15:72:93:94:92:69:da:32:c6:ad:b1:1c:0f:78:49:d6:26:2d:
3f:4a:ea:b4:a2:d8:13:26:eb:1f:96:a6:de:14:02:71:4a:bd:
74:c4:e5:ec:0d:d1:99:0f:eb:e6:51:8d:77:15:0c:ff:a3:06:
f8:86:b6:45:eb:c0:ec:69:b7:2d:a0:d3:f7:14:d7:9f:49:5e:
17:93:53:4f:47:aa:1a:9e:11:61:61:82:b9:d4:8d:d5:44:b4:
2d:22:39:43:43:c8:18:e3:02:85:ad:95:91:d4:c8:fe:0f:04:
18:f1:6f:d9:ce:32:56:80:6e:c1:67:56:5d:4e:4b:a2:35:b8:
5f:d2:aa:7c:7b:b7:71:0e:da:e0:6b:27:74:b0:7b:3e:73:fb:
d8:6f:fb:df:10:61:2e:c1:d0:d2:9c:71:79:8c:a5:0c:cf:e9:
96:7e:e3:27:42:65:03:78:99:1d:9a:6d:63:95:76:0b:f7:eb:
b2:79:92:a1:63:f7:ac:13:23:f4:d5:28:f5:5e:9f:7d:ea:af:
df:e2:6c:48:8d:6c:9d:89:69:0d:64:86:e8:d7:8e:d8:87:d6:
1e:8a:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:58 2023 by rpki-client on console-ams.rpki-client.org