Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/35dcc448bdea751c6ce983b5b23782637db270c0.roa
File: 35dcc448bdea751c6ce983b5b23782637db270c0.roa (raw, json)
Hash identifier: py4stmOvNQnURIyNaqFlf2jebEwRPVgpKqRRHjZFTRA=
Subject key identifier: 5E:19:39:07:17:3B:03:2D:89:42:2D:8D:2F:2F:93:2B:6C:F5:14:E6
Certificate issuer: /CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
Certificate serial: 0CDD09
Authority key identifier: 84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/35dcc448bdea751c6ce983b5b23782637db270c0.roa
Signing time: Wed 24 Mar 2021 14:29:58 +0000
ROA not before: Wed 24 Mar 2021 14:29:58 +0000
ROA not after: Tue 24 Mar 2026 14:29:58 +0000
asID: 27818
IP address blocks: 131.161.152.0/22 maxlen: 24
181.114.128.0/19 maxlen: 24
201.220.160.0/20 maxlen: 24
201.220.176.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843017 (0xcdd09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961b6618bb492a79bacf586c02bc72ae5ebcd74f
Validity
Not Before: Mar 24 14:29:58 2021 GMT
Not After : Mar 24 14:29:58 2026 GMT
Subject: CN=35dcc448bdea751c6ce983b5b23782637db270c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:72:b7:38:e0:3e:64:99:fb:1b:ed:7b:45:
3b:0c:a6:64:10:27:60:fb:a2:52:2b:6d:b5:57:97:
41:26:3c:a4:07:02:b7:49:2b:73:91:af:60:7b:49:
43:e9:7d:ac:31:64:cc:03:78:84:e4:e3:e0:e6:ac:
15:01:6d:0a:93:d7:dc:51:25:d5:21:10:e6:e9:a6:
ab:bc:c8:77:68:c3:1c:55:50:03:56:41:d6:81:cf:
fc:ba:93:4c:52:ba:2e:c7:3e:b7:ec:77:11:51:e2:
75:d0:13:9d:27:34:22:02:25:1c:e9:19:21:f5:01:
a8:34:6a:fe:d6:fa:50:51:ea:35:4e:41:4a:1d:5b:
86:a1:5b:6b:b0:63:69:52:41:5a:a7:9c:19:40:c6:
3e:cf:a4:5a:71:3d:81:31:52:37:09:41:ce:a9:a5:
b4:5c:87:33:ea:48:0d:24:67:92:b2:e1:d5:55:79:
c3:00:0b:08:41:ea:b7:c2:ef:69:67:20:f6:c9:70:
a3:74:e5:a1:a1:ea:ed:87:0b:f6:a3:75:ad:2a:50:
c3:21:ff:0a:94:dd:61:bb:c5:f8:c3:ae:29:a7:64:
76:b5:07:bf:21:88:3d:29:ec:bf:72:2d:52:37:82:
6a:d9:46:ed:9b:eb:98:11:05:88:b8:ea:84:ca:09:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:19:39:07:17:3B:03:2D:89:42:2D:8D:2F:2F:93:2B:6C:F5:14:E6
X509v3 Authority Key Identifier:
keyid:84:C5:F5:2E:5D:60:E1:DB:BD:C9:33:55:09:A0:FE:BA:24:DA:B2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/961b6618bb492a79bacf586c02bc72ae5ebcd74f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/35dcc448bdea751c6ce983b5b23782637db270c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fed0e153-c27b-4682-af31-b29bbe687a86/961b6618bb492a79bacf586c02bc72ae5ebcd74f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.152.0/22
181.114.128.0/19
201.220.160.0/19
Signature Algorithm: sha256WithRSAEncryption
53:b6:49:4f:36:7c:3e:e3:e2:f4:7a:15:77:51:8e:f5:1c:13:
e0:94:77:9a:5e:a6:fb:62:6f:2a:9b:b3:68:c4:b3:63:04:57:
1f:a1:50:fd:aa:d4:f6:5e:3f:08:6b:51:43:44:0e:06:fb:d9:
83:65:2e:66:64:f7:94:de:92:20:64:76:7e:51:c1:e8:65:d9:
b1:1f:3a:b6:b7:30:e9:1f:c2:c5:b5:76:31:56:d4:70:1e:4b:
40:da:74:04:b3:0e:bd:bb:75:ad:d4:91:86:88:35:7f:8e:0d:
59:3d:bc:f7:8f:cb:3a:f5:75:1e:fa:f5:bb:7c:48:3c:ff:c9:
1f:90:a9:01:33:b4:f8:cb:3f:f8:e9:cb:bc:c4:0a:6a:fb:e8:
33:00:04:d0:4c:e8:ef:a2:5b:b8:61:95:71:28:5f:29:28:97:
d0:0b:4f:54:33:6b:ba:dd:78:be:07:1b:b0:ff:a2:57:3b:e5:
9e:49:67:2f:7e:7e:94:cf:20:0a:b8:db:58:f6:09:82:15:55:
06:8b:a1:e9:6d:15:07:38:57:fa:ce:39:b9:7b:04:a4:ea:11:
fb:4e:bc:33:d9:0c:de:b3:04:76:3d:81:25:df:e6:fd:5e:16:
82:08:9d:b7:e7:7a:52:9e:5a:06:5b:18:c8:9c:d2:ac:c6:55:
6d:c2:aa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 17:15:23 2023 by rpki-client on console-ams.rpki-client.org