Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/9b2802c91e69a39b07dc5cf53d05d3b8b4222049.roa
File: 9b2802c91e69a39b07dc5cf53d05d3b8b4222049.roa (raw, json)
Hash identifier: Vel7i7iqG3ELj5LziX1bh40d9ri7465A2JZv4EN9crs=
Subject key identifier: 58:E4:EA:F2:19:6E:45:26:D6:9E:B5:C1:CB:BD:4B:D9:71:FC:E0:A8
Certificate issuer: /CN=45578380b9b89070a52d9eb52d3ea3222cd94a51
Certificate serial: 0CEDF4
Authority key identifier: F0:AC:99:E3:BD:66:B7:43:F7:00:BE:6C:DD:68:A1:37:19:39:F1:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45578380b9b89070a52d9eb52d3ea3222cd94a51.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/9b2802c91e69a39b07dc5cf53d05d3b8b4222049.roa
Signing time: Wed 24 Mar 2021 14:42:25 +0000
ROA not before: Wed 24 Mar 2021 14:42:24 +0000
ROA not after: Tue 24 Mar 2026 14:42:24 +0000
asID: 7727
IP address blocks: 181.210.0.0/16 maxlen: 16
190.130.0.0/18 maxlen: 19
Validation: Failed, certificate revoked on Wed 31 Jan 2024 14:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847348 (0xcedf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45578380b9b89070a52d9eb52d3ea3222cd94a51
Validity
Not Before: Mar 24 14:42:24 2021 GMT
Not After : Mar 24 14:42:24 2026 GMT
Subject: CN=9b2802c91e69a39b07dc5cf53d05d3b8b4222049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:de:8b:53:02:64:59:56:7c:78:49:59:d6:
84:06:2a:dd:b1:ac:32:e5:bd:a4:da:f3:ea:0f:7e:
ac:ee:23:45:8a:69:bf:3b:25:4e:d9:26:3a:fd:fc:
14:19:4a:75:f8:10:6e:9c:f9:5b:70:ad:f8:e7:5a:
ac:11:fe:92:13:01:db:c8:a5:42:0c:bf:66:24:fe:
cf:d5:1d:e4:11:24:b7:2f:97:6a:58:70:9b:b8:10:
71:2c:2c:f7:44:df:16:bb:43:1f:e6:3c:66:3d:ee:
fa:b7:45:b5:9a:89:22:d9:12:59:e4:9d:0b:64:bd:
ed:d7:20:37:21:91:47:7b:a5:e3:14:81:4a:c5:02:
87:97:ce:2b:88:26:97:e0:e8:e1:a5:be:af:73:6c:
b7:64:03:15:b0:65:4c:ff:3b:f6:24:4f:11:96:56:
c0:35:62:a6:14:bf:32:61:1e:0d:d7:d4:50:7d:2b:
1f:bc:30:32:bd:61:ed:08:90:2c:a0:8f:d6:48:69:
4d:c2:d0:16:0e:b1:e2:18:04:3e:f8:25:3e:fe:df:
9e:b5:7a:7b:b6:57:ed:0f:42:e1:ef:78:4d:8c:1b:
71:e6:d1:12:65:0c:c2:76:39:1f:63:12:0d:ea:a9:
6d:1e:c7:15:7a:48:45:aa:6b:79:3f:df:f4:77:29:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E4:EA:F2:19:6E:45:26:D6:9E:B5:C1:CB:BD:4B:D9:71:FC:E0:A8
X509v3 Authority Key Identifier:
keyid:F0:AC:99:E3:BD:66:B7:43:F7:00:BE:6C:DD:68:A1:37:19:39:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45578380b9b89070a52d9eb52d3ea3222cd94a51.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/9b2802c91e69a39b07dc5cf53d05d3b8b4222049.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/45578380b9b89070a52d9eb52d3ea3222cd94a51.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.210.0.0/16
190.130.0.0/18
Signature Algorithm: sha256WithRSAEncryption
57:8a:07:e3:f9:3b:e0:6e:60:56:6f:0a:89:4e:5c:26:e7:1c:
2c:0f:21:4a:53:be:18:79:ec:f5:bc:18:b3:45:bb:ce:ca:66:
76:9e:5d:bc:7d:77:52:03:c1:c0:f4:f9:5a:ac:f1:3e:c8:ee:
8d:3a:7f:72:d1:f1:df:73:a5:49:23:f5:23:e7:8e:cb:0d:5d:
50:00:73:8d:0d:7d:e0:b0:31:41:3e:dc:2b:76:bb:bc:fb:35:
0d:3d:af:86:bb:b5:04:eb:b5:3e:fa:0e:0e:95:79:70:cd:88:
f2:94:24:6a:d4:65:89:cd:f5:21:20:be:36:e3:29:13:7d:c0:
75:90:db:08:7a:4a:9b:66:af:1f:3d:a3:21:be:d5:f0:0a:e5:
1b:37:8d:5f:02:1c:c8:8a:2c:a0:4f:dc:08:9b:a6:30:b0:81:
77:b9:e1:5a:50:19:c1:3b:ab:ff:5c:69:39:1f:e9:c1:4c:6a:
57:6f:5e:3e:f6:98:4d:1f:46:04:e5:28:8f:eb:35:a2:16:00:
05:ee:dc:b2:c9:83:0c:e8:36:0e:ad:ae:72:cf:c5:50:c3:50:
20:22:2b:17:b2:e7:30:66:01:3e:bc:2d:4b:ab:80:6c:fb:3e:
e3:82:f3:1e:5b:d9:6a:74:70:aa:71:b3:78:be:26:c5:84:76:
6d:0e:07:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 17:42:51 2024 by rpki-client on console-fra.rpki-client.org