Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3130382e3234302e302f32302d3234203d3e203237373531.roa
File: 3139302e3130382e3234302e302f32302d3234203d3e203237373531.roa (raw, json)
Hash identifier: AxLRaHVdtMOMMGQFIUPGHzfEQQd020Rad7o/ritYFsk=
Subject key identifier: 22:6C:81:A5:93:E8:C4:EB:8B:8B:AE:4E:1F:81:A1:2E:8B:82:9E:AC
Certificate issuer: /CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
Certificate serial: 4D43FE3083FF42CBB7D77D5156C2721520DE6476
Authority key identifier: 49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3130382e3234302e302f32302d3234203d3e203237373531.roa
Signing time: Tue 05 Mar 2024 18:02:54 +0000
ROA not before: Tue 05 Mar 2024 17:57:54 +0000
ROA not after: Tue 04 Mar 2025 18:02:54 +0000
asID: 27751
IP address blocks: 190.108.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 15:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:43:fe:30:83:ff:42:cb:b7:d7:7d:51:56:c2:72:15:20:de:64:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E
Validity
Not Before: Mar 5 17:57:54 2024 GMT
Not After : Mar 4 18:02:54 2025 GMT
Subject: CN=226C81A593E8C4EB8B8BAE4E1F81A12E8B829EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b5:96:bb:9a:64:30:de:35:e0:aa:cc:8a:08:
5a:8f:1f:61:55:54:91:1e:a8:46:e5:57:6c:85:b2:
ba:98:4e:06:59:dd:b5:af:c6:c2:92:94:f6:06:2d:
b0:6c:bb:86:53:49:0c:db:83:12:90:b5:bc:06:2c:
40:67:24:0d:52:9e:c0:11:5b:5b:9a:63:e0:9e:6d:
a6:35:8d:0f:e0:3a:5a:d7:f6:38:8c:b5:a2:0a:34:
cd:b9:a9:db:c4:60:62:41:25:f9:83:e8:11:90:a6:
ba:1f:93:ba:f3:93:e0:56:29:df:19:06:e1:18:e6:
15:17:cd:b0:7f:b5:9a:a5:44:a8:26:b7:14:62:37:
ea:d0:57:24:ec:c3:fd:b3:e0:c9:22:a3:4e:40:64:
f7:e8:7a:c8:5c:f6:de:fe:ee:d2:7f:dd:80:c0:3b:
03:f1:85:6e:30:57:0e:2c:69:79:03:05:8f:11:db:
45:3f:d5:21:37:46:e1:6f:72:79:6c:d2:f3:e6:7a:
fe:38:74:31:bc:9a:d2:0f:22:35:7c:27:0c:7d:bc:
b8:cd:bf:36:b8:a1:98:79:01:20:87:cd:d9:85:f4:
6f:90:40:d5:d4:5d:3b:f0:72:6d:2e:45:08:63:91:
2e:1b:15:ef:c0:32:4f:d2:44:09:3f:31:6b:77:a3:
6a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6C:81:A5:93:E8:C4:EB:8B:8B:AE:4E:1F:81:A1:2E:8B:82:9E:AC
X509v3 Authority Key Identifier:
keyid:49:98:6A:F9:BE:70:C9:F7:A7:BB:DE:B5:E3:E8:72:03:8F:59:7D:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49986AF9BE70C9F7A7BBDEB5E3E872038F597D4E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278B39519F38D9CF4B886A90BEA8C666D8C3215F50353FC7D2121D5E936EAF17/0/3139302e3130382e3234302e302f32302d3234203d3e203237373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.108.240.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:66:a3:e1:32:5f:2a:e3:42:92:b5:bb:39:e2:f2:ed:a0:42:
75:2b:0e:45:54:0d:f2:5e:23:99:38:66:c2:52:4d:ba:ba:c4:
92:64:2a:02:61:fe:63:0b:30:d8:2d:0d:3d:d7:84:c8:83:f0:
7a:46:bd:e9:b5:2b:e9:58:1c:af:c3:82:55:21:7a:e7:f0:2d:
27:0a:16:9d:e0:af:d7:69:67:5a:b2:6b:77:d3:88:60:a4:20:
01:5e:9a:cd:f2:f0:52:5d:d7:e3:51:9f:93:52:e8:d2:49:ca:
df:a5:c3:66:50:b1:79:75:9c:fd:d0:1f:ce:65:23:b9:89:79:
ee:06:1f:10:09:94:4f:5b:80:87:3b:52:f5:cd:a9:ea:f5:fc:
1e:24:c7:8e:91:b1:5b:9c:e6:16:64:b2:02:60:55:9e:3a:83:
15:ae:11:94:62:90:0b:b5:0b:45:bd:92:a7:c8:f8:9d:54:3b:
41:d6:a2:e7:3d:c6:8b:0e:af:94:fd:4e:b0:fd:c9:cf:c9:63:
f4:6b:aa:1e:6d:40:a2:43:fa:7c:5e:ec:a9:5b:91:b4:38:a5:
ee:8e:c0:e8:59:4c:c2:0e:68:6d:53:21:8a:ef:61:e7:f1:3d:
2f:d8:40:74:56:19:bf:d5:9a:2f:08:2b:38:92:7d:45:3f:96:
8a:64:76:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 18:24:28 2024 by rpki-client on console-fra.rpki-client.org