Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/6638391c623299ce75498a3ae67dace7e02605a5.roa
File: 6638391c623299ce75498a3ae67dace7e02605a5.roa (raw, json)
Hash identifier: Jh+x8p652Ct6RkE+G2Z0CA9S2OKZDpDsHAuPsI0li1E=
Subject key identifier: E9:F3:3B:1C:D9:7C:E1:4B:28:E8:F7:85:9D:25:4E:BB:60:95:AA:C6
Certificate issuer: /CN=035480923cfb3fc749b393f95a7b72c277263815
Certificate serial: 16AC08
Authority key identifier: 68:6A:59:4F:A9:67:FB:ED:13:5E:25:44:95:AE:8C:D6:9E:21:09:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/035480923cfb3fc749b393f95a7b72c277263815.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/6638391c623299ce75498a3ae67dace7e02605a5.roa
Signing time: Fri 24 Mar 2023 08:31:31 +0000
ROA not before: Thu 23 Mar 2023 08:31:31 +0000
ROA not after: Sat 22 Mar 2025 08:31:31 +0000
asID: 269953
IP address blocks: 190.89.128.0/24 maxlen: 24
190.89.129.0/24 maxlen: 24
190.89.130.0/24 maxlen: 24
190.89.131.0/24 maxlen: 24
2803:46e0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1485832 (0x16ac08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035480923cfb3fc749b393f95a7b72c277263815
Validity
Not Before: Mar 23 08:31:31 2023 GMT
Not After : Mar 22 08:31:31 2025 GMT
Subject: CN=6638391c623299ce75498a3ae67dace7e02605a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:1e:74:09:8b:ce:05:50:61:07:77:51:49:
32:aa:c7:43:5e:a9:af:e9:cb:3f:9e:46:7d:d1:45:
66:ee:65:d7:3f:da:a7:3f:4a:84:95:fa:eb:b6:ff:
01:34:b1:3b:a9:0f:a2:32:ae:aa:f4:8e:db:2f:0e:
92:df:4e:ce:04:72:32:b9:2f:65:12:0e:e5:96:4e:
af:2a:01:0b:d2:d4:9b:8e:25:7f:ba:e8:78:3d:d1:
27:66:09:b7:3d:21:5f:b0:08:33:d4:ed:eb:99:4c:
b2:60:c0:5f:c5:12:24:dd:43:99:f2:f1:47:df:dc:
b7:10:95:3c:16:16:f0:c8:a3:5d:62:5c:77:c6:aa:
98:35:d1:c8:c9:ed:63:b2:81:3e:c8:f1:49:ee:85:
a4:dc:47:5d:ac:5e:ac:64:14:63:b8:3c:2a:de:fd:
86:eb:b2:67:05:5c:e1:d1:da:35:3e:d1:ae:50:ed:
75:a9:a7:47:c3:6f:c9:a8:0b:24:72:6b:70:6a:f8:
7f:d9:35:4c:fa:38:bd:72:68:0b:d7:2a:bf:cd:d8:
4b:06:f5:dc:58:ff:9f:66:5a:6a:14:73:60:0e:37:
3a:11:1c:35:89:8a:4d:be:59:cb:b5:fc:b4:17:0a:
a5:59:b3:78:11:ea:55:a2:86:95:5a:63:18:d4:74:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F3:3B:1C:D9:7C:E1:4B:28:E8:F7:85:9D:25:4E:BB:60:95:AA:C6
X509v3 Authority Key Identifier:
keyid:68:6A:59:4F:A9:67:FB:ED:13:5E:25:44:95:AE:8C:D6:9E:21:09:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/035480923cfb3fc749b393f95a7b72c277263815.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/6638391c623299ce75498a3ae67dace7e02605a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/035480923cfb3fc749b393f95a7b72c277263815.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.89.128.0/22
IPv6:
2803:46e0::/32
Signature Algorithm: sha256WithRSAEncryption
39:a7:4f:43:f4:a4:1b:81:71:0d:99:22:f2:88:9b:31:62:c3:
ab:b2:17:62:fa:9e:ca:40:aa:a7:f3:1d:9a:8d:bb:fe:5c:7b:
58:af:5d:d9:35:df:6b:b4:45:40:7d:d5:06:67:fe:d6:0d:51:
45:ab:b4:7a:34:9f:63:f6:e6:39:bd:72:0f:be:75:0f:9f:30:
e7:1a:39:47:4e:a0:11:ee:c3:2a:53:21:c0:96:fa:b0:38:7d:
bb:cb:d9:63:4f:82:0d:d8:5e:63:43:31:b6:4b:49:de:1e:cb:
46:e7:5b:6a:48:09:16:d3:24:47:08:4b:7a:b8:1b:de:18:19:
a9:d0:db:12:c1:42:45:40:7e:58:2f:70:5b:6f:b4:aa:53:cd:
be:a5:e9:35:94:7e:04:ac:8c:6a:5f:cf:82:8e:b6:6e:bb:1c:
f6:5b:b4:58:e5:2a:70:12:ec:c2:a1:e0:a7:2b:2e:85:a4:bb:
57:13:f6:75:24:91:af:ec:08:2a:0e:51:b9:9c:f7:d6:81:c1:
1f:56:99:18:b9:a6:df:c9:5f:89:60:1f:cc:f8:57:4d:cd:c2:
c2:8f:ee:ee:36:f4:91:5b:7d:9c:68:18:50:8b:8c:57:2c:97:
d1:e0:97:63:59:38:6a:5c:32:2e:a7:6b:f1:a0:f5:b0:94:d8:
75:75:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org