Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e35322e302f32342d3234203d3e20323632353839.roa
File: 3139302e39302e35322e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier: SXVpV4nIOFZzZDC5fo3vUq45SkhYhAkiRYrVs3vX3ZY=
Subject key identifier: 9E:11:E5:14:A2:43:55:3B:9D:00:68:3E:B2:96:56:72:26:1E:57:C8
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 47772C8C4054CE6F95265C0D5FCFCB3EFE07648F
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e35322e302f32342d3234203d3e20323632353839.roa
Signing time: Tue 25 Feb 2025 20:15:00 +0000
ROA not before: Tue 25 Feb 2025 20:10:00 +0000
ROA not after: Tue 24 Feb 2026 20:15:00 +0000
asID: 262589
IP address blocks: 190.90.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Mar 2025 18:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:77:2c:8c:40:54:ce:6f:95:26:5c:0d:5f:cf:cb:3e:fe:07:64:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 25 20:10:00 2025 GMT
Not After : Feb 24 20:15:00 2026 GMT
Subject: CN=9E11E514A243553B9D00683EB2965672261E57C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:8d:bc:6b:2f:94:64:5d:65:ab:90:5f:1e:
09:2b:c7:da:d7:11:79:b1:db:b5:f6:d7:80:57:e9:
0b:f8:54:33:dc:70:9a:8d:cf:e9:27:13:22:7d:75:
7e:6c:b9:e5:1b:54:61:ab:f6:b7:a1:a5:27:68:17:
52:a5:ae:96:9f:b0:05:13:50:1f:d6:dc:2f:36:a2:
15:7e:05:e4:e1:f9:ce:c5:fb:62:68:14:bd:d9:17:
eb:4f:ac:bb:59:45:2b:ae:3e:15:ce:96:bf:03:b0:
a3:b0:6a:5c:e1:96:b1:af:25:51:40:33:d3:60:61:
ea:b2:8f:d9:a1:25:e2:66:37:63:19:c4:b5:29:09:
9b:21:20:2c:e6:72:f6:35:47:ec:c7:b0:6f:28:23:
6d:e0:57:7b:ee:2d:62:45:7d:4e:33:12:7c:96:a1:
05:1e:12:90:10:f3:a7:d8:f5:bf:2c:49:0d:d8:fa:
7b:d7:1f:d1:b2:c7:17:57:88:54:25:56:33:a2:37:
78:a9:d5:d4:0b:12:e9:b5:d1:f0:bc:07:d2:ea:ac:
b7:fb:9e:ec:30:2d:f7:a7:7b:d1:85:0f:7d:a8:22:
9e:dc:f0:24:5c:95:29:b7:95:ff:52:36:41:83:64:
fc:d6:63:50:46:d2:5b:3b:77:36:e4:f2:e4:59:f9:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:11:E5:14:A2:43:55:3B:9D:00:68:3E:B2:96:56:72:26:1E:57:C8
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e35322e302f32342d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.52.0/24
Signature Algorithm: sha256WithRSAEncryption
23:3a:ec:3b:7e:c4:9e:26:89:d6:34:d7:01:2c:51:71:e3:7e:
fa:e9:6e:48:c8:6c:aa:7a:6b:5b:8b:0c:03:5a:f0:14:6f:cc:
2a:a7:21:25:49:7b:84:66:12:b7:84:40:90:6a:8b:67:83:5a:
8d:66:f2:c1:af:52:91:b4:90:78:c0:fc:29:0b:5f:09:75:49:
90:83:a2:b7:86:1a:b7:8a:34:4d:38:c2:54:6a:9e:0d:a6:d9:
b8:a4:6f:40:04:10:69:3e:51:07:92:6f:1f:33:de:14:77:2e:
2b:b7:fd:d3:38:b8:4f:19:0f:89:dc:2b:c0:6b:d9:02:59:19:
4d:d9:0c:a2:5d:3c:bc:d2:bd:cf:02:60:cc:d8:87:d1:42:8e:
93:c8:4f:e7:9b:54:9c:5b:6d:4a:cc:70:27:2e:ed:c7:02:77:
31:a7:bd:a9:47:6d:82:6d:bd:e7:7f:f4:77:b9:65:cb:a1:9f:
0f:4c:dc:ff:f5:63:c2:8d:b2:55:bc:9d:e3:c2:a6:37:d1:20:
1d:bf:8d:66:20:a8:ad:81:2c:16:fd:50:b7:99:57:a1:91:2e:
dd:d1:55:18:f3:9d:4d:37:f3:f1:c8:21:e4:6a:fb:a8:bf:41:
1d:9e:11:c9:0a:31:9a:12:de:70:88:1c:c4:1e:9e:43:b5:97:
5b:ac:8f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 01:56:50 2025 by rpki-client