Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3130322e302f32342d3234203d3e20323632353839.roa
File: 3139302e39302e3130322e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier: mMjmufuc5vEYySl+IxNF2tGOqpWpu+R33QXduBeNp0A=
Subject key identifier: 8E:8D:E7:B5:68:25:2C:D6:46:04:27:2B:96:D4:D2:B6:0A:C3:41:8E
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 146A673177E5617846F0CF4A5335741DD54318F7
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3130322e302f32342d3234203d3e20323632353839.roa
Signing time: Tue 25 Feb 2025 20:15:02 +0000
ROA not before: Tue 25 Feb 2025 20:10:02 +0000
ROA not after: Tue 24 Feb 2026 20:15:02 +0000
asID: 262589
IP address blocks: 190.90.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 20:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:6a:67:31:77:e5:61:78:46:f0:cf:4a:53:35:74:1d:d5:43:18:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 25 20:10:02 2025 GMT
Not After : Feb 24 20:15:02 2026 GMT
Subject: CN=8E8DE7B568252CD64604272B96D4D2B60AC3418E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:53:06:18:ca:99:e1:0d:12:51:8c:55:8d:
9a:7b:1d:22:2a:fc:e3:37:38:d0:36:de:53:77:ac:
22:b8:7b:ca:b9:43:fb:9a:24:15:11:b9:05:03:34:
59:e5:35:21:e6:47:24:71:d8:84:b8:ad:e1:2a:79:
85:95:b8:66:83:55:cd:30:45:1d:0b:34:a8:0f:ad:
97:81:f3:72:0f:d9:66:f1:27:1f:68:ab:e6:ff:4b:
c2:43:e4:8c:ec:97:c3:1f:35:00:db:30:d0:41:4d:
85:97:c6:56:44:57:a3:d4:0b:9c:77:ed:f7:cf:2a:
e2:bf:e5:a0:f8:6f:5c:52:9a:30:b7:8e:4d:17:c3:
15:99:90:52:f9:c7:ba:df:fd:a9:9a:51:b0:fc:69:
ea:7e:06:c2:56:a0:72:78:98:20:db:5d:3c:9b:47:
b9:61:21:98:d6:59:e2:d6:d5:32:dd:cb:79:02:87:
57:fe:77:00:ab:70:71:10:60:48:08:6e:ad:7a:fe:
09:79:d6:ff:57:0c:bb:4d:5b:1d:e6:dd:cc:7e:ff:
a1:c7:1c:49:03:f7:0f:57:93:ac:d9:40:b4:03:9b:
6a:af:f0:f4:59:48:aa:6c:08:30:9f:19:6b:af:91:
d8:68:24:48:a8:ca:6d:40:b0:ad:b9:13:a1:be:48:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8D:E7:B5:68:25:2C:D6:46:04:27:2B:96:D4:D2:B6:0A:C3:41:8E
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3130322e302f32342d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.102.0/24
Signature Algorithm: sha256WithRSAEncryption
65:65:cc:07:ca:2c:4b:c3:0b:10:01:f4:95:52:0a:00:95:46:
c7:0d:25:67:a8:65:14:6c:3f:61:f8:7a:17:d3:89:69:67:24:
94:87:6f:d5:3d:82:f8:ac:40:c9:35:66:88:79:b2:30:4b:33:
9a:12:63:76:a5:6b:70:ec:52:f6:c5:34:64:66:ac:88:9c:2d:
c3:d2:85:e6:e5:77:cf:cc:51:17:25:85:4e:be:33:33:ee:85:
1b:59:53:cc:a4:d1:73:ad:c6:c7:b0:3f:23:b3:f0:16:ce:88:
87:78:e5:70:3f:55:da:be:31:c9:a0:d4:79:7a:c5:66:57:f6:
ef:23:25:00:6d:0d:bf:32:80:9b:f3:66:69:2a:5d:0c:c6:af:
cc:be:90:63:c0:a6:71:40:d0:8b:d1:ce:26:48:08:63:44:83:
5d:87:ca:06:51:93:ef:31:b4:73:77:6f:21:57:cd:50:8e:d1:
ce:62:6f:be:5e:26:d9:84:76:b0:8c:6d:dd:7a:8b:e5:d1:5f:
e4:66:da:e5:2b:a9:5b:cc:8e:16:24:20:38:b0:35:93:92:ab:
e6:15:91:22:a0:b7:5f:58:cd:e9:57:30:05:cf:40:51:fa:89:
a6:c9:58:b4:2d:0f:d4:54:06:dd:7d:a0:bd:c9:e1:ac:07:2c:
73:f0:70:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:05 2025 by rpki-client