Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/1ded455b7394e54b4b9dda75a4f125ef10dd5100.roa
File: 1ded455b7394e54b4b9dda75a4f125ef10dd5100.roa (raw, json)
Hash identifier: dj7QXT4vz0ajOLp5xSkn2t2xJ2/acFTsGW/RAk8gGUc=
Subject key identifier: 6C:26:44:AB:01:98:46:4C:A6:FB:F2:55:C8:ED:BD:D9:8D:60:FB:12
Certificate issuer: /CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Certificate serial: 0F96CD
Authority key identifier: 63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/1ded455b7394e54b4b9dda75a4f125ef10dd5100.roa
Signing time: Fri 03 Sep 2021 20:53:01 +0000
ROA not before: Fri 03 Sep 2021 03:00:00 +0000
ROA not after: Sun 03 Sep 2023 03:00:00 +0000
asID: 265615
IP address blocks: 189.206.22.0/24 maxlen: 24
201.151.150.0/24 maxlen: 24
201.151.151.0/24 maxlen: 24
201.151.156.0/24 maxlen: 24
201.151.177.0/24 maxlen: 24
201.151.178.0/24 maxlen: 24
201.163.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1021645 (0xf96cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Validity
Not Before: Sep 3 03:00:00 2021 GMT
Not After : Sep 3 03:00:00 2023 GMT
Subject: CN=1ded455b7394e54b4b9dda75a4f125ef10dd5100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:6a:bf:e5:27:53:20:f0:70:50:da:25:eb:
9a:81:61:aa:f1:bd:66:43:32:e1:71:2e:a2:94:85:
e7:74:7e:29:4a:8a:7b:94:bc:ed:1e:be:30:cc:17:
73:2c:cc:03:9a:0c:24:c5:c6:9d:f2:02:73:37:f3:
b6:5c:1b:70:0d:c4:61:c6:b6:49:9f:15:e8:49:c3:
f8:c1:21:8c:60:4e:46:ce:a8:51:6b:9f:ed:f7:31:
ad:9d:e1:3c:75:36:f7:7d:9e:33:b3:eb:f3:db:0e:
ba:84:68:26:6e:e9:a4:24:b5:a8:2c:a8:17:42:2a:
28:59:6b:0c:d4:13:6c:f7:32:05:94:7e:e3:74:7a:
ca:ab:cc:ad:88:02:14:76:8b:b4:c8:08:f5:fc:6f:
c2:84:66:16:e7:e3:8e:d1:67:da:df:f8:fe:81:20:
f8:39:ea:90:04:1b:aa:5f:fe:bf:92:fe:4e:f4:e0:
87:a4:ec:7c:f3:68:92:e6:e9:76:e5:47:06:b6:7e:
f5:12:f1:c0:62:b4:ea:52:c4:d0:fa:60:da:ce:65:
14:42:ac:98:ea:82:c2:55:21:a0:30:84:f7:8c:37:
62:6d:05:2c:06:44:8e:6e:8e:42:0b:68:50:49:87:
bd:eb:73:c1:8c:4e:62:63:93:08:71:50:b0:3e:ad:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:26:44:AB:01:98:46:4C:A6:FB:F2:55:C8:ED:BD:D9:8D:60:FB:12
X509v3 Authority Key Identifier:
keyid:63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/1ded455b7394e54b4b9dda75a4f125ef10dd5100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/0932ed7fc7587a11240901c76c1f6f64f3020149.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.206.22.0/24
201.151.150.0/23
201.151.156.0/24
201.151.177.0-201.151.178.255
201.163.96.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d1:49:37:1d:8f:c5:9b:96:f2:53:bf:40:bf:4c:2b:51:5b:
a4:60:3b:47:d2:5f:bb:0a:fe:7b:c5:ea:95:fa:7a:81:84:b1:
cc:f4:85:26:99:4d:83:3d:79:2a:b6:ae:36:95:b9:ef:9e:93:
e2:55:4d:39:05:d4:3f:53:cf:e9:de:c2:bc:8d:b1:29:9d:b9:
53:43:80:42:78:d0:fd:26:ab:1d:56:ce:70:0d:e6:9a:d7:48:
47:74:0b:97:f6:db:04:a4:6a:38:15:15:a2:49:bc:01:aa:18:
17:ed:be:ea:d8:f3:7f:d7:b4:83:ad:cf:ec:a2:22:51:a9:17:
6b:54:32:3d:bf:54:93:1e:f3:92:f1:60:dd:27:56:2f:e7:41:
7d:c9:a5:51:5c:00:7c:57:49:58:3a:9d:49:40:d5:7d:a6:27:
28:b3:d9:62:89:84:ee:46:06:3d:72:1d:ce:18:1d:f0:4e:47:
40:3e:b2:24:70:f4:44:d3:c3:0d:25:d8:5b:63:0d:eb:d1:ca:
0b:9e:c3:0f:a8:f2:0c:11:10:6c:8d:f5:f0:5b:51:22:d0:f7:
92:11:a6:21:3d:31:6f:bd:15:05:a9:43:9a:01:fa:56:65:f6:
61:15:15:60:2f:56:cf:c5:4a:47:08:e6:df:eb:86:d4:5f:7f:
a9:8d:39:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:58 2023 by rpki-client on console-ams.rpki-client.org