Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/3a7afe224670b9934e3e1e7c243b1c7e1e76d8c4.roa
File: 3a7afe224670b9934e3e1e7c243b1c7e1e76d8c4.roa (raw, json)
Hash identifier: 2o6RC8VMv9a0eH9U+ywS7QlGPWUxDLPymwvRjbKQj7Y=
Subject key identifier: 88:DF:9B:76:9C:E0:F7:03:2B:F8:F7:36:0E:A2:61:AD:18:5C:EA:FB
Certificate issuer: /CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
Certificate serial: 1134C6
Authority key identifier: 44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/3a7afe224670b9934e3e1e7c243b1c7e1e76d8c4.roa
Signing time: Fri 03 Sep 2021 11:01:24 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 27762
IP address blocks: 190.121.240.0/24 maxlen: 24
190.121.242.0/24 maxlen: 24
190.121.243.0/24 maxlen: 24
190.121.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1127622 (0x1134c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=3a7afe224670b9934e3e1e7c243b1c7e1e76d8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:97:77:dd:d3:a1:a8:f0:87:a6:32:d7:67:
9f:6e:ac:f4:db:47:42:c0:56:d5:59:c8:a4:12:92:
6a:3d:61:b8:b9:2f:0e:d1:0d:32:31:62:6d:88:2e:
96:bf:5d:a3:a5:2b:34:21:97:05:41:ca:32:df:5d:
8e:d2:4e:a0:ed:bf:9e:a0:39:3d:7c:d6:64:69:eb:
e9:90:ce:3b:ab:e2:aa:d3:a2:a1:92:45:14:e9:71:
ab:0f:47:11:76:8a:3d:72:ce:54:33:5a:1e:eb:5f:
9b:82:fd:b7:10:78:2e:b9:68:2e:25:4b:e4:bc:62:
94:82:e2:79:e9:f4:08:86:3d:1e:04:4f:7c:0e:99:
1d:d7:af:a4:63:c1:49:0d:7d:35:fe:2d:e5:90:29:
d2:0b:6e:45:a4:e9:6c:cc:7c:6c:38:e6:a0:58:b6:
8a:b7:ec:f4:e5:89:a7:39:b0:32:f9:5f:c8:80:16:
9f:70:21:ad:9a:b9:e8:cb:0f:3d:1d:eb:01:fa:23:
50:97:41:cf:c3:42:67:86:f4:2d:43:cd:b8:69:4b:
81:01:07:5d:5a:2b:83:a1:d0:e4:c2:80:0f:46:0f:
4d:7b:86:ff:ee:5f:94:cc:9e:11:e7:64:65:75:07:
0a:24:1b:d8:d8:86:bb:13:00:a9:df:d4:da:b3:65:
78:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DF:9B:76:9C:E0:F7:03:2B:F8:F7:36:0E:A2:61:AD:18:5C:EA:FB
X509v3 Authority Key Identifier:
keyid:44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/3a7afe224670b9934e3e1e7c243b1c7e1e76d8c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/fcc25171c7921fdcd117ca7096ecea5ba6358873.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.121.240.0/24
190.121.242.0/23
190.121.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:8f:3c:29:af:67:71:ac:a2:1b:9c:d4:66:a0:86:b7:23:63:
c1:ad:79:a0:89:10:b7:d7:10:42:31:37:13:10:b0:88:56:d6:
4b:c5:ce:6f:d6:7b:69:85:00:23:27:17:cd:5a:c6:7a:b9:2a:
d7:bc:e8:4e:16:f9:ae:7d:40:7d:a0:86:09:ff:c2:3b:ae:20:
3e:a1:8a:eb:fc:a3:94:2a:1e:67:42:1f:82:79:7e:24:57:05:
4b:dd:99:72:e1:23:e8:80:67:00:c7:5c:d2:41:e0:61:20:26:
55:34:b7:f9:6f:c5:6e:52:6f:ee:e3:e9:0d:c9:4d:1c:d1:50:
a3:13:52:c9:f1:ad:62:32:bf:b7:c8:6c:87:87:d4:53:a8:b2:
26:6d:29:a9:5a:4d:22:ee:1b:b4:bf:13:6f:8c:60:90:89:84:
67:17:a7:96:3b:9a:02:b2:8c:b1:4b:c0:0e:00:ab:f0:97:46:
dc:b6:2c:0c:d2:68:00:2d:4a:22:b0:68:1f:a4:ff:3d:b2:37:
1b:20:7c:ec:56:dc:af:98:a7:fa:3b:3c:83:e4:ed:69:84:6f:
53:d7:c7:ab:04:1b:92:74:a5:af:98:e9:d6:89:6a:2b:fc:dd:
5a:cd:aa:48:4e:01:76:92:59:a3:9f:92:20:6e:72:33:ef:ed:
bd:d9:dc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-ams.rpki-client.org