Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/03b6e49913d6e23976fe51156983092cc2b9ef82.roa
File: 03b6e49913d6e23976fe51156983092cc2b9ef82.roa (raw, json)
Hash identifier: +Bg93sxEZM3pn/2krrMUKxoxMTY0gEFXdJF2P+BxwQM=
Subject key identifier: E1:84:47:DF:39:DA:8B:E5:76:09:05:48:51:75:AF:54:95:2B:86:C0
Certificate issuer: /CN=88d44f0918975636ffb95bc864d2ead8021849e5
Certificate serial: 1351CD
Authority key identifier: 60:5D:91:FC:06:B0:3E:4C:60:D5:39:0D:5E:08:E0:2A:64:C2:A8:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d44f0918975636ffb95bc864d2ead8021849e5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/03b6e49913d6e23976fe51156983092cc2b9ef82.roa
Signing time: Wed 01 Dec 2021 06:09:18 +0000
ROA not before: Wed 01 Dec 2021 03:00:00 +0000
ROA not after: Fri 01 Dec 2023 03:00:00 +0000
asID: 262202
IP address blocks: 200.119.184.0/21 maxlen: 24
200.119.184.0/24 maxlen: 24
200.119.185.0/24 maxlen: 24
200.119.186.0/24 maxlen: 24
200.119.187.0/24 maxlen: 24
200.119.188.0/24 maxlen: 24
200.119.189.0/24 maxlen: 24
200.119.190.0/24 maxlen: 24
200.119.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1266125 (0x1351cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d44f0918975636ffb95bc864d2ead8021849e5
Validity
Not Before: Dec 1 03:00:00 2021 GMT
Not After : Dec 1 03:00:00 2023 GMT
Subject: CN=03b6e49913d6e23976fe51156983092cc2b9ef82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:44:1e:93:cc:61:b4:2d:fe:9d:4f:bc:48:
f3:6a:c3:be:1f:da:74:6b:81:d8:bc:82:d3:71:9e:
6e:f3:cc:49:95:6b:56:50:09:e3:36:2a:03:e2:80:
85:86:34:70:69:25:87:2b:c7:df:6c:27:c8:c5:2c:
84:99:a4:9f:fa:2d:c9:2b:e0:67:54:87:ee:14:dd:
71:e9:18:44:57:09:95:f1:c0:fa:eb:a7:92:50:6d:
d7:a9:7e:f2:9a:71:99:e9:1d:c4:39:00:96:bd:5b:
56:38:62:85:5d:d5:d3:b6:9b:d7:18:2c:5f:2f:40:
71:da:c4:3e:d6:29:1a:e3:70:75:94:83:84:c3:b1:
e3:73:e3:6a:08:34:92:0e:8b:d3:9b:25:cc:93:ff:
11:f0:af:99:15:eb:30:4c:ba:70:31:26:f4:ea:f4:
a1:ee:e0:d1:5e:10:cd:43:96:3b:1b:77:72:9d:37:
c8:33:a5:bf:a0:87:0f:02:fd:66:df:39:52:74:b3:
7d:42:25:41:4d:a3:41:8d:ca:04:b9:f7:bb:7a:6d:
e0:3b:bc:b7:40:60:ab:5b:0b:60:06:8e:64:75:a8:
62:22:68:42:7e:b3:ca:89:63:5c:d7:8a:c1:a6:d1:
30:68:c5:aa:d0:fb:2e:77:43:24:67:47:42:5b:30:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:84:47:DF:39:DA:8B:E5:76:09:05:48:51:75:AF:54:95:2B:86:C0
X509v3 Authority Key Identifier:
keyid:60:5D:91:FC:06:B0:3E:4C:60:D5:39:0D:5E:08:E0:2A:64:C2:A8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d44f0918975636ffb95bc864d2ead8021849e5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/03b6e49913d6e23976fe51156983092cc2b9ef82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/88d44f0918975636ffb95bc864d2ead8021849e5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.119.184.0/21
Signature Algorithm: sha256WithRSAEncryption
37:c5:f5:28:ba:7b:fd:6b:c5:7a:8e:05:30:bf:9c:ba:20:60:
22:ce:d2:ee:8d:61:6d:f0:79:b2:0a:08:68:08:f4:0d:da:ff:
93:b9:df:33:8c:b5:47:08:47:91:58:18:f2:57:a0:5b:a0:a4:
ee:48:e1:fa:a3:42:a3:b7:2f:6c:e3:b6:3e:b6:a4:8a:96:1f:
27:c3:c1:03:4d:fe:f0:bf:dc:46:ca:30:c3:38:d4:90:c8:87:
e4:50:e8:9c:11:3e:b0:25:d3:99:92:e4:83:80:9e:ec:0b:e2:
3d:01:0e:ce:a8:a0:27:ad:12:4b:1a:29:8c:e6:c7:db:26:13:
c5:c7:8f:aa:ab:d0:69:70:5b:ea:3d:1c:eb:ce:97:8b:c5:29:
88:92:99:d5:ab:c1:e3:02:5f:1f:62:41:b9:4b:f3:49:2d:57:
8e:3e:9c:e1:fc:85:87:cc:be:f4:5c:8c:eb:6e:1e:84:59:27:
40:6b:e3:ba:9c:85:36:d0:d2:83:06:60:7f:a1:2f:46:e5:05:
1d:24:d1:98:b2:ae:70:d7:73:0e:79:99:cc:9b:96:78:83:b5:
76:12:91:20:98:04:bb:d0:bc:96:8a:38:26:03:08:dc:e0:49:
01:7e:0a:db:4d:7e:f2:39:0d:23:38:6f:21:1a:3d:a3:f0:d8:
25:1c:eb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 17:02:09 2023 by rpki-client on console-fra.rpki-client.org