Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139302e302f32342d3234203d3e203138363738.roa
File: 3139302e39302e3139302e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier: 7l+LvAUtnLLyG8a4uuaiRamovlVNduT1DscppdnkWA0=
Subject key identifier: 7A:A1:1F:79:85:48:1D:9C:92:D9:69:E4:57:34:5F:DD:39:C4:F5:3D
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 2206BABF7F2DC5D92D1FC031A0A377BF7990E477
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139302e302f32342d3234203d3e203138363738.roa
Signing time: Tue 05 Mar 2024 18:00:42 +0000
ROA not before: Tue 05 Mar 2024 17:55:42 +0000
ROA not after: Tue 04 Mar 2025 18:00:42 +0000
asID: 18678
IP address blocks: 190.90.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:06:ba:bf:7f:2d:c5:d9:2d:1f:c0:31:a0:a3:77:bf:79:90:e4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Mar 5 17:55:42 2024 GMT
Not After : Mar 4 18:00:42 2025 GMT
Subject: CN=7AA11F7985481D9C92D969E457345FDD39C4F53D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:ee:48:80:6a:d1:11:f6:97:3a:20:bf:e1:
d9:ef:4f:43:cf:14:e4:8d:65:ef:c5:83:78:27:3d:
df:8a:4a:cb:b0:01:75:89:e8:40:86:0c:ea:e4:21:
bb:e3:d9:43:1d:3a:99:f4:55:88:fd:49:5f:ac:3b:
79:4b:66:d9:4f:81:c8:2a:5d:dc:a8:b8:7e:67:1c:
bb:06:20:0e:6a:83:5c:06:86:3f:4d:a5:b4:2a:4f:
bb:e6:fc:48:44:a7:0b:4c:e1:b0:c2:a1:9d:34:bc:
4c:d7:18:eb:cd:d7:a5:4a:31:04:4d:94:fb:e4:5d:
e7:9a:e6:5e:62:9c:30:0f:28:40:41:99:09:49:56:
e6:25:0e:91:8d:3e:57:38:3d:39:fc:1c:df:76:2b:
c1:93:47:d3:f5:85:e7:ae:c6:d3:92:69:0f:e9:9a:
b8:a4:e6:57:d0:e2:d8:d4:bc:e3:72:3f:d1:44:92:
af:99:a7:39:ab:65:67:d7:54:09:90:fc:29:40:42:
c0:3e:cf:c1:75:42:79:71:5a:2c:5c:63:ef:08:90:
55:ea:a2:bf:52:b1:30:91:5d:90:94:19:d9:f5:a0:
98:87:5b:72:f5:17:99:ae:74:d0:c6:73:c2:1c:ff:
48:2d:e6:f5:97:f2:46:c4:13:83:b4:3c:07:63:9c:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A1:1F:79:85:48:1D:9C:92:D9:69:E4:57:34:5F:DD:39:C4:F5:3D
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139302e302f32342d3234203d3e203138363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.190.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7a:ab:e0:99:f9:3b:93:e4:da:a3:7e:44:6d:c9:5f:e2:6d:
3d:38:ae:62:ca:99:e1:00:63:37:1c:5b:63:af:69:35:0c:2e:
15:cd:54:5f:32:77:f3:fa:85:41:71:c7:5e:00:0d:0b:d9:1d:
fb:47:bf:2b:bd:d8:c6:19:4c:87:12:19:74:8a:f3:af:1c:e8:
b4:cd:38:0f:2e:b4:ae:5a:7d:90:28:60:00:f3:6c:c3:3c:f5:
03:1b:2d:f0:38:27:ef:1b:a4:95:58:92:cb:6e:5f:84:f0:33:
51:ba:1f:92:b9:b6:79:88:0f:32:0e:09:3f:1d:29:37:cc:12:
4b:99:c4:72:85:fb:39:9f:19:22:12:54:1a:28:fe:d3:53:bd:
b9:b6:48:d2:0e:97:d5:3a:a4:eb:07:c7:18:3a:9e:29:49:d5:
8f:48:61:f5:dc:b5:c8:68:7b:95:3c:70:02:5a:a4:69:04:19:
c0:b7:9d:0b:56:89:c0:7d:59:b6:31:a6:8e:a9:d0:d8:fd:b6:
12:2b:03:48:d6:af:a8:c0:96:c8:74:01:9a:f4:6e:85:e8:6a:
81:3d:8c:e6:7f:2e:21:fa:83:c6:03:51:15:93:60:3e:62:cc:
51:42:8c:da:51:58:bd:ef:d0:df:5d:bf:6c:d0:45:fc:93:8d:
a7:a1:02:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 18:31:49 2024 by rpki-client on console-ams.rpki-client.org