Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24361422-166f-49fb-976e-6e90747a9a46/da04135efe2148859110ec08d8c692b6149d78dc.roa
File: da04135efe2148859110ec08d8c692b6149d78dc.roa (raw, json)
Hash identifier: PzSPE2iKdDw6HEOrmnB64FnrRkVNOjpmfOnxk/IFSKk=
Subject key identifier: 3B:66:30:B5:4E:CC:65:F2:72:EB:F7:C2:22:5F:2B:77:0D:D9:F2:F9
Certificate issuer: /CN=2844fc34dad2e9ab1b8d792185500633344de91d
Certificate serial: 23CF07
Authority key identifier: 5A:ED:9A:44:DA:EC:34:1F:B6:EE:38:B4:11:CB:32:2C:77:51:CB:2C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2844fc34dad2e9ab1b8d792185500633344de91d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/24361422-166f-49fb-976e-6e90747a9a46/da04135efe2148859110ec08d8c692b6149d78dc.roa
Signing time: Thu 07 Sep 2023 17:49:53 +0000
ROA not before: Wed 06 Sep 2023 17:49:53 +0000
ROA not after: Sun 07 Sep 2025 17:49:53 +0000
asID: 28100
IP address blocks: 190.120.96.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2346759 (0x23cf07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2844fc34dad2e9ab1b8d792185500633344de91d
Validity
Not Before: Sep 6 17:49:53 2023 GMT
Not After : Sep 7 17:49:53 2025 GMT
Subject: CN=da04135efe2148859110ec08d8c692b6149d78dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:2a:73:bf:43:c9:88:d0:51:56:37:ed:9b:
3c:e6:d6:a3:08:0b:68:a1:1d:1f:f0:2b:d7:dc:9e:
49:2b:8c:4c:a6:ad:a6:87:72:a9:dc:c2:08:15:7c:
67:3e:09:d1:9a:34:97:bb:47:a5:d7:e1:8d:50:df:
29:3a:36:95:53:20:f4:b7:fe:15:42:86:74:d1:11:
a6:24:49:44:f2:7f:bb:76:3e:5a:7d:e0:2f:05:b9:
60:ab:2d:67:16:f2:dd:d2:29:cf:0c:47:f6:5b:e9:
a8:57:b4:2a:26:7b:4b:97:0b:58:a0:6f:7f:2e:f7:
0a:cf:6b:27:d2:25:b5:81:0e:74:f3:8a:1b:b9:60:
5c:d5:bc:cc:8f:4c:cc:51:a6:4d:e0:ff:d5:51:49:
29:be:a5:8f:52:8b:48:c4:b1:ec:90:93:ce:43:ee:
9a:46:16:f0:a6:1f:d0:08:d1:49:78:35:3e:b2:b6:
6d:ff:e6:0b:2d:94:c1:13:c1:8b:c9:54:03:7f:ec:
1d:72:81:d1:86:1d:34:43:68:65:43:0b:db:46:91:
75:55:d7:43:02:c0:a3:11:67:8a:fe:47:24:8d:e8:
61:02:75:38:57:6c:1c:e7:66:f8:db:b0:ac:52:9e:
52:47:7f:3c:35:54:2e:13:ab:65:60:d4:5f:51:52:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:66:30:B5:4E:CC:65:F2:72:EB:F7:C2:22:5F:2B:77:0D:D9:F2:F9
X509v3 Authority Key Identifier:
keyid:5A:ED:9A:44:DA:EC:34:1F:B6:EE:38:B4:11:CB:32:2C:77:51:CB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2844fc34dad2e9ab1b8d792185500633344de91d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24361422-166f-49fb-976e-6e90747a9a46/da04135efe2148859110ec08d8c692b6149d78dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/24361422-166f-49fb-976e-6e90747a9a46/2844fc34dad2e9ab1b8d792185500633344de91d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.120.96.0/19
Signature Algorithm: sha256WithRSAEncryption
76:4f:a2:d9:13:a7:ff:e8:2b:33:fa:29:90:91:53:02:e2:e5:
f8:df:da:76:e9:08:62:f1:81:64:87:9d:a6:c6:02:75:10:1a:
22:64:4f:e0:b8:cb:a1:dc:ad:81:2c:e6:1b:4d:5f:75:3c:7e:
33:9d:85:6f:a8:a7:85:8e:f2:1d:bd:7a:fe:50:75:5d:96:bd:
9c:84:a2:0a:06:22:6c:3b:b3:f2:cf:86:f2:80:29:fb:f0:2d:
66:ee:82:58:bb:71:58:0a:3e:bf:ad:cc:3a:36:da:6c:75:ae:
b2:4b:a7:f3:f6:7a:58:f0:d1:2b:9b:87:51:fc:34:f2:98:f3:
3e:63:56:cf:5a:e8:d4:ee:d6:7f:94:2b:d8:6d:2e:b3:b4:67:
ec:61:a4:98:fc:25:33:b0:c8:96:04:05:d1:8b:25:25:5f:15:
03:d9:82:fe:9d:7a:3d:47:eb:15:69:fe:66:f7:46:4a:58:e9:
cb:55:63:0b:37:21:2c:ea:b2:6d:5a:8b:2c:c0:8a:ab:e0:4b:
91:c1:a0:83:74:44:cc:c1:9a:b3:55:f5:8a:f4:36:b9:14:ad:
f0:81:71:ba:36:ea:ef:dc:26:99:36:05:d3:49:f3:9a:1c:9e:
a9:e5:ef:54:e3:f5:13:e1:07:c2:31:9d:c3:97:3c:ad:33:66:
83:58:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 18:44:43 2023 by rpki-client on console-fra.rpki-client.org