Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a370194-1d5c-460f-9b20-b1d88ead4e77/66a90438d6f050b81c84d6b9cee31baebf616244.roa
File: 66a90438d6f050b81c84d6b9cee31baebf616244.roa (raw, json)
Hash identifier: zznQKHXhZ/GyeoRKmBd+26mBkrW+qfvblkveCsOPiRg=
Subject key identifier: 8C:05:A4:30:7C:13:B9:4A:26:17:4A:33:C9:2F:3F:B2:11:A0:7F:57
Certificate issuer: /CN=f84e0f4f21dac65238183b89155b8f48a9b0455c
Certificate serial: 1538F4
Authority key identifier: B0:93:38:83:3E:34:A6:C0:8C:5F:89:BD:BA:77:B2:5D:76:30:8E:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f84e0f4f21dac65238183b89155b8f48a9b0455c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0a370194-1d5c-460f-9b20-b1d88ead4e77/66a90438d6f050b81c84d6b9cee31baebf616244.roa
Signing time: Mon 24 Jan 2022 16:05:42 +0000
ROA not before: Mon 24 Jan 2022 03:00:00 +0000
ROA not after: Wed 24 Jan 2024 03:00:00 +0000
asID: 263243
IP address blocks: 190.107.80.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 07:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1390836 (0x1538f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84e0f4f21dac65238183b89155b8f48a9b0455c
Validity
Not Before: Jan 24 03:00:00 2022 GMT
Not After : Jan 24 03:00:00 2024 GMT
Subject: CN=66a90438d6f050b81c84d6b9cee31baebf616244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a8:fa:b7:52:5e:ed:66:59:fa:97:42:6b:1a:
32:06:ca:0a:c4:73:23:37:a6:86:db:a7:f7:6b:7a:
26:48:af:9b:90:d3:50:41:7c:64:0c:f0:02:ff:26:
a2:55:aa:48:8a:61:5d:26:c5:8c:81:d5:a8:c1:ba:
18:bc:ba:22:86:f5:14:d1:47:34:23:4b:b0:dd:ca:
da:84:0b:01:de:7d:40:96:51:0a:bf:b3:9d:59:8c:
a4:3a:ee:d3:8d:0e:8b:b6:c3:1e:d2:64:a5:27:70:
74:ca:2e:49:d7:da:25:34:ed:93:51:4d:ee:f2:58:
d1:5f:0e:13:4e:3b:44:88:5a:a6:fb:cb:f6:81:23:
66:00:76:cd:5b:bf:85:cf:e5:1c:32:c1:a5:49:93:
af:97:0f:c7:d6:58:91:82:81:3a:dd:6c:ed:ca:96:
76:dc:4c:bc:a5:25:e1:e8:cf:03:82:7f:2f:ef:77:
01:28:e3:f7:40:23:f5:d4:4c:bf:83:e1:6c:90:9e:
3c:13:8c:bf:b1:ef:08:17:82:f6:fa:71:74:6e:a7:
83:f5:73:f2:85:44:73:d6:56:63:9a:f3:3b:ea:4c:
78:28:75:ff:17:1f:d9:ba:12:b0:56:95:10:cc:5c:
ba:86:4b:8c:a0:eb:d9:71:06:63:f8:ba:c2:3b:0e:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:05:A4:30:7C:13:B9:4A:26:17:4A:33:C9:2F:3F:B2:11:A0:7F:57
X509v3 Authority Key Identifier:
keyid:B0:93:38:83:3E:34:A6:C0:8C:5F:89:BD:BA:77:B2:5D:76:30:8E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f84e0f4f21dac65238183b89155b8f48a9b0455c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a370194-1d5c-460f-9b20-b1d88ead4e77/66a90438d6f050b81c84d6b9cee31baebf616244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0a370194-1d5c-460f-9b20-b1d88ead4e77/f84e0f4f21dac65238183b89155b8f48a9b0455c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.107.80.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:06:54:35:fc:09:cc:b6:24:4c:f9:46:0d:25:f7:fc:41:ce:
2b:9f:e6:6c:5c:bf:ef:38:58:5f:11:86:ae:d2:bb:d9:6d:81:
bd:b0:ea:0f:8f:df:01:0b:8e:c4:60:d0:6a:f8:62:30:d3:37:
56:a6:de:c0:8a:50:be:90:91:11:b2:7f:f2:59:ef:76:ee:cb:
2f:4a:ee:fc:17:5d:12:32:37:95:5f:35:0e:71:9d:d8:fe:32:
7a:ed:e8:fa:72:35:34:a6:2f:91:70:3a:1e:46:28:7e:68:4b:
63:ac:8f:3c:72:58:97:5a:54:21:78:dc:21:bc:55:3f:85:28:
82:67:ae:53:93:ce:a0:3c:20:f3:26:5f:51:83:af:45:74:b9:
00:52:55:8c:53:b3:b0:71:d5:6f:1c:12:51:16:48:2f:ad:7d:
80:f6:84:8a:d1:d0:54:e4:87:57:6d:62:ad:b3:23:8e:1b:aa:
e7:f5:35:b0:f6:f7:da:78:3a:4a:6c:5c:7c:73:f6:d3:3d:31:
ec:8f:3d:97:b3:23:d8:92:71:78:7d:79:ef:05:8b:a7:b3:74:
d1:4e:c2:1a:c7:ef:f5:f2:47:50:21:9b:db:f6:18:49:5c:b6:
02:34:73:84:a0:bb:88:89:74:be:83:29:48:0a:af:4e:94:a0:
48:6f:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 12:11:37 2024 by rpki-client on console-ams.rpki-client.org