Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28aa54ab-5d80-4a3e-a1f9-fef0ea1fdf37/9ddf53c6e055a4e5038428da6758c8fdac61ad2f.roa
File: 9ddf53c6e055a4e5038428da6758c8fdac61ad2f.roa (raw, json)
Hash identifier: nHAHsLS6USYhTdmwef9JK/WUWaXnPjG4JAnvNnMG1qY=
Subject key identifier: FA:F9:E4:4E:79:0D:3C:9D:99:AB:0B:43:BB:7F:FD:64:C5:DE:D8:BA
Certificate issuer: /CN=9ef8c45e09f82c12aacd3203f0c6e804e8a0d75f
Certificate serial: 012D5C
Authority key identifier: 31:6E:88:43:71:0E:AC:D9:48:40:63:0E:4A:2D:B2:C4:A0:A7:2B:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9ef8c45e09f82c12aacd3203f0c6e804e8a0d75f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28aa54ab-5d80-4a3e-a1f9-fef0ea1fdf37/9ddf53c6e055a4e5038428da6758c8fdac61ad2f.roa
Signing time: Tue 30 May 2023 18:43:49 +0000
ROA not before: Mon 29 May 2023 18:43:49 +0000
ROA not after: Fri 30 May 2025 18:43:49 +0000
asID: 270038
IP address blocks: 190.111.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 16 Jan 2024 14:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77148 (0x12d5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef8c45e09f82c12aacd3203f0c6e804e8a0d75f
Validity
Not Before: May 29 18:43:49 2023 GMT
Not After : May 30 18:43:49 2025 GMT
Subject: CN=9ddf53c6e055a4e5038428da6758c8fdac61ad2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:83:0f:92:3b:89:f1:ed:9a:25:f6:a7:f9:
2f:03:a8:70:20:f5:cb:55:b8:19:d1:fb:1b:e7:37:
db:a5:2d:72:53:8e:ef:e2:04:25:9b:25:2a:2f:e8:
6d:23:79:b2:a3:af:bb:4f:ce:15:09:39:69:6d:61:
08:7e:5c:57:d1:83:e3:9d:b3:14:7d:2d:f4:18:ac:
bb:a2:58:b4:f5:08:d2:9c:a6:b5:08:e9:25:5b:f8:
91:63:eb:30:c7:93:29:c4:fb:2b:3a:21:82:a1:22:
31:40:59:fb:cc:77:dd:a9:74:26:a9:05:d6:43:55:
ec:91:ba:a8:6e:88:2d:dd:6d:cf:ac:64:af:74:90:
ad:1f:e7:de:2f:b6:ca:25:e1:b9:66:82:57:ac:49:
1e:0b:7f:a9:52:75:57:b1:18:b1:a0:81:a8:61:c5:
b6:02:6b:29:1e:54:f7:ec:4a:1a:5f:92:da:0b:75:
25:45:30:7f:79:a0:80:11:ba:c8:54:64:05:7a:45:
5c:db:98:1d:72:87:47:9e:c7:db:ee:33:4d:3a:a9:
cb:f4:ec:02:30:27:39:8c:fa:9a:66:44:fa:0c:ca:
4f:78:17:ce:fd:56:c0:8d:2e:70:d6:5a:b9:cf:40:
d9:a2:9d:9a:25:63:ff:a3:8e:37:0c:7d:a2:b2:47:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F9:E4:4E:79:0D:3C:9D:99:AB:0B:43:BB:7F:FD:64:C5:DE:D8:BA
X509v3 Authority Key Identifier:
keyid:31:6E:88:43:71:0E:AC:D9:48:40:63:0E:4A:2D:B2:C4:A0:A7:2B:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9ef8c45e09f82c12aacd3203f0c6e804e8a0d75f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28aa54ab-5d80-4a3e-a1f9-fef0ea1fdf37/9ddf53c6e055a4e5038428da6758c8fdac61ad2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/28aa54ab-5d80-4a3e-a1f9-fef0ea1fdf37/9ef8c45e09f82c12aacd3203f0c6e804e8a0d75f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.111.152.0/22
Signature Algorithm: sha256WithRSAEncryption
88:5d:73:0c:19:61:99:30:e8:a9:aa:c7:1a:a3:4e:46:cb:de:
0c:a9:ea:e1:39:ea:1c:1c:c4:a7:d1:f2:dd:6d:27:a5:25:81:
a4:ba:24:c6:78:29:bd:49:eb:e6:d3:1d:33:bc:59:cd:a2:f2:
b8:8c:04:13:41:c4:a6:9d:cc:86:bd:bd:b3:4b:6a:fb:56:1e:
92:fd:38:db:9a:f2:cb:35:a8:4a:01:c7:37:ed:ba:7d:f3:c3:
ce:4e:c7:46:57:30:bc:a2:aa:09:66:22:e0:9b:30:1e:7d:3a:
68:b7:c8:01:35:b6:57:e3:38:3f:03:6f:ba:a3:a7:84:16:3f:
01:65:55:e0:29:27:f5:49:92:42:4a:af:1b:a1:bd:36:e0:3a:
f3:c8:33:0c:d3:2f:35:f3:ad:f3:f5:55:cf:d4:9a:37:aa:a8:
13:09:85:4a:08:6a:20:0b:ef:29:ec:d0:7a:62:46:aa:a5:6a:
e3:a5:22:ed:8f:7d:53:47:b1:b2:f0:27:ec:ad:d6:e2:56:b5:
63:d0:4a:c7:05:60:f8:30:55:53:8d:fc:cb:59:22:ff:0b:1e:
5e:4c:78:95:4c:c3:4b:0b:a0:2b:98:e3:ca:1e:1e:f7:0b:f7:
83:f9:d8:7e:7c:8c:eb:59:5e:c5:0b:7d:47:71:17:c7:d6:d4:
34:20:8e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 19:12:45 2024 by rpki-client on console-fra.rpki-client.org