Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/637a27cb74e78b8791095e3a16be1ed35afa182a.roa
File: 637a27cb74e78b8791095e3a16be1ed35afa182a.roa (raw, json)
Hash identifier: i2Nj89KisIkM0AECkUTB3mAsGkcbGoXbEbE5+Fxaa10=
Subject key identifier: F2:7B:F5:26:E7:DF:23:86:F0:8E:4A:43:66:C5:C0:F6:6D:E1:7B:BA
Certificate issuer: /CN=f2cbbb792ff42fa718619507a50663798055643b
Certificate serial: 21DE25
Authority key identifier: AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/637a27cb74e78b8791095e3a16be1ed35afa182a.roa
Signing time: Wed 05 Jul 2023 08:30:04 +0000
ROA not before: Tue 04 Jul 2023 08:30:04 +0000
ROA not after: Thu 03 Jul 2025 08:30:04 +0000
asID: 52308
IP address blocks: 190.108.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2219557 (0x21de25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cbbb792ff42fa718619507a50663798055643b
Validity
Not Before: Jul 4 08:30:04 2023 GMT
Not After : Jul 3 08:30:04 2025 GMT
Subject: CN=637a27cb74e78b8791095e3a16be1ed35afa182a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:d0:4c:86:ba:f7:d1:86:9d:9f:f5:47:fe:
82:df:de:4a:fa:70:7e:84:c0:9b:6e:3f:c0:61:1b:
1b:1a:4a:53:43:58:15:5c:03:0e:3d:f8:73:5c:ce:
a5:03:16:d4:f7:49:cd:89:c5:f1:c2:1f:12:b2:03:
37:d2:e8:28:8d:a3:cb:3d:42:4c:e7:15:31:5f:30:
5a:26:7f:95:df:bb:a6:e6:1e:06:52:03:ff:32:58:
10:8d:ed:25:ae:68:63:f9:5f:e1:39:ca:67:4f:54:
b7:81:a0:34:3d:e1:1e:a4:63:d2:de:ec:fc:56:da:
03:52:43:36:99:bd:3a:9f:b0:34:24:39:41:98:3a:
8b:f8:ff:41:09:d3:df:d9:b4:6b:86:8f:81:fd:51:
ca:71:9a:75:11:35:6c:c1:91:1f:b4:e8:11:12:9d:
62:b2:39:33:c0:b1:02:8e:80:74:40:4b:72:ad:40:
95:51:97:7f:6c:1c:ff:9c:14:8e:90:14:bc:34:86:
1e:99:55:6f:75:ac:71:5b:3a:1e:c2:15:0b:d6:a2:
4b:00:bb:08:32:46:01:b6:e1:ec:16:83:5a:a9:49:
79:1c:9e:41:fc:da:f2:6b:99:de:6b:a5:f0:85:30:
ab:31:30:89:71:9c:84:51:9b:e0:d3:fc:8f:12:c7:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7B:F5:26:E7:DF:23:86:F0:8E:4A:43:66:C5:C0:F6:6D:E1:7B:BA
X509v3 Authority Key Identifier:
keyid:AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/637a27cb74e78b8791095e3a16be1ed35afa182a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f2cbbb792ff42fa718619507a50663798055643b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.108.37.0/24
Signature Algorithm: sha256WithRSAEncryption
79:26:22:eb:d5:29:d0:09:08:40:09:b4:94:19:3a:5b:d1:17:
db:68:21:a6:5a:ae:3b:31:d1:bf:af:69:02:45:d8:b1:46:9d:
0c:f9:5f:ce:89:84:e4:70:46:e9:2b:90:90:e9:d3:17:c9:6c:
ca:9c:00:e8:64:12:48:38:d3:15:67:60:f6:10:d1:55:c9:48:
6b:5e:5d:8f:28:cd:33:8f:b9:85:1a:86:ed:0d:5a:c1:0b:b0:
1b:16:2d:4b:8d:bd:01:b5:bc:34:23:2b:63:9e:e0:7d:9c:dc:
a5:72:f0:ea:99:c0:8a:d9:55:5d:5e:ef:ed:81:23:af:d6:14:
04:95:87:8b:4c:9e:72:7c:8a:81:c8:6a:47:1c:6e:81:ea:35:
a8:36:08:d9:22:b3:91:07:60:1d:18:8c:e5:f9:88:9f:c3:4d:
36:07:8f:d2:7e:7f:6a:8e:dd:81:66:55:44:83:f8:ae:48:61:
12:58:59:be:01:3a:fc:6c:16:04:94:53:c0:be:60:63:8c:e7:
c7:50:c5:d4:bd:25:88:d0:4c:fb:37:ba:4b:50:28:2f:96:d0:
f8:c9:78:37:d3:e9:4d:b3:50:2b:a1:c3:95:eb:36:da:be:cb:
d2:0a:a7:0a:e7:a3:4d:11:5c:e0:05:80:28:d1:a1:62:c1:20:
52:53:1d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 16:04:51 2023 by rpki-client on console-ams.rpki-client.org