Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/8c1915a410959d30458fc2d83dddb44afc2e8aea.roa
File: 8c1915a410959d30458fc2d83dddb44afc2e8aea.roa (raw, json)
Hash identifier: AWep05gNB5GC2ymxdKDh9LxKZW8Ydt6a13HSwCNdm5o=
Subject key identifier: 25:4B:15:ED:75:DC:70:E6:62:52:E7:57:6C:E2:A0:95:6B:5D:8B:67
Certificate issuer: /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial: 1FA54D
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/8c1915a410959d30458fc2d83dddb44afc2e8aea.roa
Signing time: Wed 03 May 2023 14:51:21 +0000
ROA not before: Tue 02 May 2023 14:51:21 +0000
ROA not after: Sat 03 May 2025 14:51:21 +0000
asID: 52392
IP address blocks: 190.99.120.0/24 maxlen: 24
190.99.121.0/24 maxlen: 24
190.99.122.0/24 maxlen: 24
190.99.123.0/24 maxlen: 24
190.99.124.0/24 maxlen: 24
190.99.125.0/24 maxlen: 24
190.99.126.0/24 maxlen: 24
190.99.127.0/24 maxlen: 24
2803:b100:9::/48 maxlen: 48
2803:b100:b::/48 maxlen: 48
2803:b100:a::/48 maxlen: 48
2803:b100:8::/48 maxlen: 48
2803:b100:1::/48 maxlen: 48
2803:b100::/48 maxlen: 48
2803:b100:3::/48 maxlen: 48
2803:b100:2::/48 maxlen: 48
2803:b100:6::/48 maxlen: 48
2803:b100:e::/48 maxlen: 48
2803:b100:7::/48 maxlen: 48
2803:b100:c::/48 maxlen: 48
2803:b100:f::/48 maxlen: 48
2803:b100:4::/48 maxlen: 48
2803:b100:d::/48 maxlen: 48
2803:b100:5::/48 maxlen: 48
2803:b100::/44 maxlen: 44
2803:b100:10::/44 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2073933 (0x1fa54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
Validity
Not Before: May 2 14:51:21 2023 GMT
Not After : May 3 14:51:21 2025 GMT
Subject: CN=8c1915a410959d30458fc2d83dddb44afc2e8aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:79:2d:ea:7f:1b:c2:67:d2:73:cf:29:fe:
58:35:8b:f2:0d:34:f0:77:fe:c2:83:d4:c6:8b:9d:
1b:be:9d:cf:9d:df:b9:9c:35:03:73:dd:db:39:f5:
01:4f:23:ed:8d:0d:8f:9a:c9:9a:0f:2b:bf:23:d5:
df:0f:67:ad:00:b0:b5:a5:15:c5:67:21:63:e7:bb:
28:d3:6e:f6:d7:04:c4:db:6a:8f:c1:04:be:43:fd:
5d:66:4d:03:ed:aa:11:48:4d:5e:36:83:55:80:04:
ac:d5:b7:b3:48:67:c5:6d:a8:ae:2d:fd:bf:12:21:
73:ab:cd:ed:4d:5f:57:53:ec:4d:1a:6b:61:64:28:
89:be:1a:44:d8:71:38:3f:75:7b:04:11:cd:ef:0e:
21:d3:5a:da:75:3f:68:39:66:22:3e:b0:fc:c9:a9:
28:a1:b8:96:23:39:85:b7:90:f5:26:4c:cc:ca:7e:
49:ea:90:ad:33:a2:d0:df:f4:9c:0f:e8:7a:fa:65:
4d:dd:a2:9f:5d:48:e5:05:2f:b5:39:fa:12:44:22:
5d:24:a2:fa:30:85:29:af:01:79:89:c4:0b:d1:27:
73:40:9a:6b:69:00:15:9b:95:33:d7:ba:30:97:53:
6c:8a:65:a2:b5:49:cc:a8:fd:aa:44:82:04:4e:fe:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4B:15:ED:75:DC:70:E6:62:52:E7:57:6C:E2:A0:95:6B:5D:8B:67
X509v3 Authority Key Identifier:
keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/8c1915a410959d30458fc2d83dddb44afc2e8aea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.99.120.0/21
IPv6:
2803:b100::/43
Signature Algorithm: sha256WithRSAEncryption
0a:2f:d5:86:ea:42:b4:f5:2b:5c:89:31:b8:d6:19:84:d2:9c:
64:e5:93:49:f2:f6:a7:ac:d8:01:b5:3b:15:47:cb:3c:d3:cf:
d4:30:1f:de:35:52:38:1d:7a:29:dc:20:2b:2a:20:24:56:f0:
f1:fe:d9:bd:f1:60:9b:5b:de:3d:c3:23:cf:d8:0a:b5:63:95:
8e:11:a2:fe:87:71:21:eb:81:af:0a:88:ad:ae:83:d2:07:31:
67:b0:31:e2:8f:ae:90:af:fa:ba:c8:8d:dc:f9:56:2a:7f:2a:
91:06:53:46:ea:1c:df:fc:4e:66:98:62:f0:08:65:d1:ff:ba:
6e:1b:52:c1:2d:d5:61:f8:27:b9:36:fc:d5:63:71:ed:15:33:
d5:91:8f:ff:97:92:07:17:e5:b5:78:1b:9c:8f:c9:02:d1:52:
80:83:2f:ab:d9:85:fa:ea:01:5a:bf:43:3a:dc:aa:a4:63:c2:
72:33:2c:f6:2b:ac:7f:32:8e:03:61:3a:c6:92:cd:2b:7d:92:
06:81:f5:7a:1a:7e:99:76:15:f6:37:47:cd:92:15:ff:4a:85:
76:31:1d:b3:db:7a:06:b9:de:4d:51:78:e6:f2:d2:0e:0c:cb:
a5:2f:e0:25:04:08:74:3d:70:17:53:b2:33:03:9c:f2:75:5f:
f4:c6:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:59 2023 by rpki-client on console-ams.rpki-client.org