Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/5f3fd23b87b43c97afc6c173a5340297c47a9195.roa
File: 5f3fd23b87b43c97afc6c173a5340297c47a9195.roa (raw, json)
Hash identifier: Gvw0tXxpfdrf1ISUDTWeTajJisIWpDQ2O3zrXTkiXtw=
Subject key identifier: D9:F0:B2:5F:2D:56:20:94:44:7D:0F:36:1C:6A:99:FA:19:57:C7:2B
Certificate issuer: /CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
Certificate serial: 1B5A2C
Authority key identifier: 4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/5f3fd23b87b43c97afc6c173a5340297c47a9195.roa
Signing time: Fri 28 Oct 2022 12:03:41 +0000
ROA not before: Sat 20 Mar 2021 14:47:25 +0000
ROA not after: Tue 24 Mar 2026 14:47:25 +0000
asID: 27889
IP address blocks: 190.76.244.0/24 maxlen: 24
190.76.248.0/24 maxlen: 24
190.76.251.0/24 maxlen: 24
190.76.252.0/24 maxlen: 24
190.76.63.0/24 maxlen: 24
190.76.208.0/20 maxlen: 20
190.76.224.0/20 maxlen: 20
190.76.240.0/24 maxlen: 24
190.76.192.0/21 maxlen: 21
190.76.200.0/21 maxlen: 21
190.76.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 13:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792556 (0x1b5a2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
Validity
Not Before: Mar 20 14:47:25 2021 GMT
Not After : Mar 24 14:47:25 2026 GMT
Subject: CN=5f3fd23b87b43c97afc6c173a5340297c47a9195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d0:b8:a0:b8:0b:7b:9f:1a:7b:10:64:81:bf:
6c:b9:0f:1f:03:5b:f3:f3:ff:f7:b2:43:d0:e8:64:
49:fd:24:9d:36:b9:09:14:3e:20:6d:96:fb:39:6f:
47:e2:84:16:88:2d:a8:5c:0b:a5:01:f0:1f:98:fa:
dc:23:cf:2a:a1:24:6a:c2:80:38:73:20:0b:4b:08:
b9:b3:5f:aa:82:72:06:d0:52:e4:cf:31:35:b8:d5:
c6:b7:2c:e7:99:7e:82:a6:3d:8f:db:ef:70:4a:4a:
2a:8b:46:c0:57:51:7e:ea:75:37:61:cb:7b:5a:a3:
01:b5:bf:d5:d9:ce:8a:2c:f2:93:6e:44:15:fb:1c:
e8:9f:81:5a:4f:09:14:df:63:1a:26:38:e8:e5:14:
4e:59:dd:3b:08:e0:0b:78:1e:43:9d:14:dd:45:99:
db:32:5f:9d:83:45:2d:7c:a3:69:f3:74:42:ec:7a:
3b:bb:db:80:fe:b5:99:f2:ec:67:f9:9b:2c:98:64:
29:60:07:45:da:58:10:1c:fe:07:1a:9b:34:bf:89:
e5:b5:90:1a:55:03:84:26:8e:fe:ae:24:81:91:ea:
7b:1b:eb:ee:d6:25:b7:6e:da:d2:dd:c4:cb:58:e7:
71:9a:30:63:f2:de:4e:10:af:4f:73:48:47:ee:d8:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F0:B2:5F:2D:56:20:94:44:7D:0F:36:1C:6A:99:FA:19:57:C7:2B
X509v3 Authority Key Identifier:
keyid:4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/5f3fd23b87b43c97afc6c173a5340297c47a9195.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/e804a389c3b0880219ecf5f7a3c62d96a274b592.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.76.63.0/24
190.76.127.0/24
190.76.192.0-190.76.240.255
190.76.244.0/24
190.76.248.0/24
190.76.251.0-190.76.252.255
Signature Algorithm: sha256WithRSAEncryption
2d:aa:8a:55:76:fd:1e:a3:9c:e4:4a:37:d3:25:82:a4:57:94:
b2:5c:1b:b7:62:68:3d:e0:57:61:2f:23:76:e6:74:f9:ac:8d:
48:2c:d5:a4:73:c7:0b:d4:e4:6f:8c:a3:b8:0b:c3:a2:ed:98:
2c:76:81:36:bf:cc:f4:cc:57:78:a7:90:fd:28:09:55:8b:cf:
bc:31:b1:9c:5b:b4:50:5b:57:57:8c:01:d5:f3:ff:28:c6:be:
98:33:e6:d0:3c:90:12:73:d1:70:5a:ea:75:5d:d4:4a:00:2a:
e8:14:73:fd:cf:94:bf:c1:e7:be:70:38:ba:b5:b4:d5:fb:f9:
38:47:b1:b7:24:71:61:e5:04:4a:21:86:b7:f2:7d:20:29:de:
74:9a:27:47:fe:f0:db:7f:0f:2a:f0:2d:b4:7a:a3:71:dd:a2:
4f:0f:1b:3e:08:17:1d:cc:6e:ef:a1:19:0b:33:d4:1a:11:3c:
d9:1b:d6:22:91:f5:89:8a:13:86:63:80:b8:a9:88:5b:ea:06:
9a:ac:ea:3c:4b:2b:49:57:c9:12:1c:a1:20:f3:60:de:ab:35:
08:2e:87:fe:5f:a1:87:d0:25:a5:5c:6d:51:9e:ec:52:98:32:
66:5c:1f:e2:4f:61:a7:45:bd:7c:dc:ed:3a:e6:c0:f8:20:52:
b2:18:ab:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 18:16:51 2024 by rpki-client on console-fra.rpki-client.org