Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139302e302f32342d3234203d3e20323636383332.roa
File: 3139302e39302e3139302e302f32342d3234203d3e20323636383332.roa (raw, json)
Hash identifier: GUs93IzRg4GadsTtLcXPfWDsKxx3LKeuINQ4e6hsmmU=
Subject key identifier: CD:7C:FA:9A:B1:BA:00:7A:44:21:E1:18:94:43:22:34:F2:85:AC:7A
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 142F652A9BCA11DFB125191974E49956439B682B
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139302e302f32342d3234203d3e20323636383332.roa
Signing time: Mon 15 Jul 2024 15:10:00 +0000
ROA not before: Mon 15 Jul 2024 15:05:00 +0000
ROA not after: Mon 14 Jul 2025 15:10:00 +0000
asID: 266832
IP address blocks: 190.90.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:2f:65:2a:9b:ca:11:df:b1:25:19:19:74:e4:99:56:43:9b:68:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Jul 15 15:05:00 2024 GMT
Not After : Jul 14 15:10:00 2025 GMT
Subject: CN=CD7CFA9AB1BA007A4421E11894432234F285AC7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fd:66:13:fd:92:0e:23:02:de:f9:25:df:28:
d3:dd:84:10:13:d9:af:57:9b:66:8e:8d:b2:bf:46:
4e:b4:9f:4f:4a:3f:72:82:b3:b0:34:a2:49:27:c1:
c6:dc:2e:2a:e0:c2:a0:dd:77:1c:42:5a:d3:1c:1f:
41:6e:af:b2:37:3c:64:80:2d:cd:f8:f0:fd:a4:f6:
6a:1e:c3:43:6d:e6:3b:0e:ad:8b:55:25:32:a4:a4:
22:1b:e5:db:4e:a9:71:59:f6:82:35:82:91:d5:19:
20:94:d0:66:e4:60:7c:8a:bb:3b:22:d9:79:79:49:
de:ce:ca:0c:cd:c4:12:cf:34:29:55:95:07:ef:b4:
da:7c:ee:ed:c1:20:f4:80:9f:b0:61:4a:0b:44:6e:
aa:3f:96:af:fa:5f:e4:1a:22:34:a4:70:4b:69:2e:
0c:24:cd:36:6b:bb:dd:44:ac:0f:9e:cf:bd:d3:1f:
6a:29:dd:3b:17:44:7c:7d:6a:9c:66:46:f7:c9:98:
fc:9b:8c:b1:1c:e3:95:32:26:47:d8:ab:70:99:a0:
de:95:ef:35:b3:a9:88:ca:7f:47:6b:2a:75:e4:d1:
d8:0a:ef:08:ba:dc:aa:02:cd:48:50:6b:21:ec:de:
4f:30:60:8a:e7:94:60:43:d5:7a:f2:91:80:78:67:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7C:FA:9A:B1:BA:00:7A:44:21:E1:18:94:43:22:34:F2:85:AC:7A
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139302e302f32342d3234203d3e20323636383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.190.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d1:58:a3:72:5c:f8:34:2f:ae:9c:b9:86:af:ed:6c:51:fa:
9a:c2:48:67:9f:f1:8c:4d:e7:d1:86:c0:4b:2e:ce:a4:eb:dc:
d2:b3:7b:36:75:16:04:c4:3d:ea:fc:f8:82:88:2e:d7:47:00:
2f:c6:e9:be:60:a8:6d:d8:7f:6d:7b:bc:ae:19:8b:5c:52:22:
34:44:0a:ef:a7:7d:c6:39:9e:94:c1:74:91:d9:65:da:3f:37:
10:9a:78:96:29:5a:33:07:f9:6c:54:99:e3:5c:ce:1d:18:eb:
94:6f:21:75:2b:43:bc:25:1d:b3:71:7c:d0:e3:1e:00:17:a6:
8b:15:92:be:71:59:0a:10:6d:c9:db:20:cc:c6:45:ad:a2:28:
4e:94:4d:2b:89:f2:f8:cd:4d:42:b5:51:a9:34:29:a4:00:11:
eb:97:04:6a:e8:2c:5e:ee:92:a2:7e:02:e6:5d:d7:d6:ab:3a:
88:11:3d:39:b7:b3:c6:2a:3d:bc:c1:c1:7c:8e:e6:a4:ba:5c:
95:75:8d:d3:12:e4:d1:ff:ae:e3:86:d3:f2:de:dc:7f:f8:b5:
1c:e0:6d:15:dd:41:9a:82:67:10:84:b7:25:09:0d:cd:be:96:
39:3e:af:6f:5b:ce:ca:a4:21:40:43:bc:2b:ce:47:cd:b4:a7:
58:2b:d7:46
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFC9lKpvKEd+xJRkZdOSZVkObaCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNDA3MTUxNTA1MDBaFw0yNTA3MTQxNTEwMDBaMDMxMTAvBgNV
BAMTKENEN0NGQTlBQjFCQTAwN0E0NDIxRTExODk0NDMyMjM0RjI4NUFDN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq/WYT/ZIOIwLe+SXfKNPdhBAT
2a9Xm2aOjbK/Rk60n09KP3KCs7A0okknwcbcLirgwqDddxxCWtMcH0Fur7I3PGSA
Lc348P2k9moew0Nt5jsOrYtVJTKkpCIb5dtOqXFZ9oI1gpHVGSCU0GbkYHyKuzsi
2Xl5Sd7OygzNxBLPNClVlQfvtNp87u3BIPSAn7BhSgtEbqo/lq/6X+QaIjSkcEtp
LgwkzTZru91ErA+ez73TH2op3TsXRHx9apxmRvfJmPybjLEc45UyJkfYq3CZoN6V
7zWzqYjKf0drKnXk0dgK7wi63KoCzUhQayHs3k8wYIrnlGBD1XrykYB4Z2qhAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUzXz6mrG6AHpEIeEYlEMiNPKFrHowHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzOTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzgzMzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvlq+
MA0GCSqGSIb3DQEBCwUAA4IBAQAo0Vijclz4NC+unLmGr+1sUfqawkhnn/GMTefR
hsBLLs6k69zSs3s2dRYExD3q/PiCiC7XRwAvxum+YKht2H9te7yuGYtcUiI0RArv
p33GOZ6UwXSR2WXaPzcQmniWKVozB/lsVJnjXM4dGOuUbyF1K0O8JR2zcXzQ4x4A
F6aLFZK+cVkKEG3J2yDMxkWtoihOlE0rifL4zU1CtVGpNCmkABHrlwRq6Cxe7pKi
fgLmXdfWqzqIET05t7PGKj28wcF8juakulyVdY3TEuTR/67jhtPy3tx/+LUc4G0V
3UGagmcQhLclCQ3NvpY5Pq9vW87KpCFAQ7wrzkfNtKdYK9dG
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:34 2025 by rpki-client