Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f32302d3234203d3e20323632353839.roa
File: 3139302e39302e3139322e302f32302d3234203d3e20323632353839.roa (raw, json)
Hash identifier: /yswWRxvomvEZGceJc7YnXIYXzhur/Ln2BG66t0gI2E=
Subject key identifier: 67:6E:36:A2:3D:91:C0:6E:E8:29:69:5C:4E:80:C7:48:73:79:53:4E
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 6543356C9E0E67C1A5913EA3C5739A6B4F3E3420
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f32302d3234203d3e20323632353839.roa
Signing time: Tue 04 Feb 2025 18:17:25 +0000
ROA not before: Tue 04 Feb 2025 18:12:25 +0000
ROA not after: Tue 03 Feb 2026 18:17:25 +0000
asID: 262589
IP address blocks: 190.90.192.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 16:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:43:35:6c:9e:0e:67:c1:a5:91:3e:a3:c5:73:9a:6b:4f:3e:34:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 4 18:12:25 2025 GMT
Not After : Feb 3 18:17:25 2026 GMT
Subject: CN=676E36A23D91C06EE829695C4E80C7487379534E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:ff:13:c4:25:4a:8e:f7:4b:76:cd:c4:d9:
18:01:7d:f5:8b:21:4c:7a:62:04:8a:ba:19:86:37:
43:f1:fb:c1:73:47:e6:ea:38:95:5a:7d:b2:7f:5d:
ea:c3:32:54:ba:74:a7:c5:86:e8:bb:2a:23:a8:2e:
02:f9:7a:d8:bc:8c:2e:d7:e1:7f:f6:13:81:69:3e:
a2:5c:c4:44:58:55:cd:7f:0e:37:07:ab:04:64:dd:
4e:f2:58:d4:16:71:25:e1:17:eb:24:aa:4e:13:70:
55:ae:2b:73:0f:c0:9e:37:e1:a1:b1:b2:e5:a6:15:
13:4b:af:84:1e:f5:63:a8:4a:b7:c7:f0:06:8c:93:
5a:fa:a1:a8:c6:34:76:db:b3:29:ac:a1:a3:dc:4b:
a9:14:c9:21:86:92:7e:4c:fd:9d:ea:64:91:91:8b:
d3:be:c7:c9:d1:f7:7d:51:5f:12:77:51:7d:24:bf:
6b:6d:01:48:c8:0c:6c:2c:c5:22:40:cc:15:ad:26:
2c:44:20:e9:7a:dd:0a:60:0c:fc:44:56:e0:e4:57:
49:da:c2:dd:17:00:c9:0c:87:56:94:62:bf:af:48:
39:cf:83:cb:b9:66:d6:5a:ad:57:ce:ea:9b:8f:7b:
03:5c:92:04:0b:1a:a3:94:4d:2b:d1:14:24:02:58:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6E:36:A2:3D:91:C0:6E:E8:29:69:5C:4E:80:C7:48:73:79:53:4E
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f32302d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.192.0/20
Signature Algorithm: sha256WithRSAEncryption
67:8d:0b:b6:4a:89:d3:9c:0e:e3:03:71:85:7a:de:b9:41:8c:
96:fe:38:c6:5b:45:44:64:b9:22:a7:7c:76:5e:24:ca:2c:a0:
52:fe:ce:c3:67:51:76:f0:30:93:3d:0c:80:f5:6e:37:74:c7:
50:82:0e:7d:ce:e6:7e:74:3e:33:8f:dc:cb:e9:34:f4:13:f5:
96:7f:38:7d:14:5e:65:40:4b:31:ac:d7:00:68:fa:ee:0d:6f:
4c:4e:07:b4:fa:4d:45:a2:a8:80:2c:a8:1c:c3:43:b1:65:f8:
2c:26:25:c1:b2:a8:8c:ef:37:d3:ea:c4:e0:39:d1:85:2c:11:
e7:1b:e4:90:13:30:13:3e:ca:0e:17:eb:8b:fe:e1:79:97:6f:
b0:7c:83:11:37:07:81:e6:6d:29:1e:18:f5:60:b8:97:e2:88:
cb:6d:6f:55:7c:a3:8a:8e:05:b2:82:d4:62:c7:8a:2a:7f:fc:
f1:cd:7e:59:68:12:85:8c:d2:64:55:5b:f0:13:e6:1c:10:5e:
64:fe:b4:04:93:49:e9:1d:9e:2b:fe:fc:54:97:d1:b2:e4:fd:
83:b3:00:6f:5d:e6:52:a2:97:9c:f9:9d:c1:91:d6:f1:20:59:
1a:df:f7:f4:27:dc:05:f4:01:83:0f:88:30:af:37:52:8b:f1:
75:03:49:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:08 2025 by rpki-client