Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/dbc9badc27b4df8b240b26012ed1a4b9a20ec038.roa
File: dbc9badc27b4df8b240b26012ed1a4b9a20ec038.roa (raw, json)
Hash identifier: bPEElzwUcbdRYQJ3jYY1B6E4REwJH29IOzC79dZkzDA=
Subject key identifier: 8E:04:D1:3B:EE:92:DE:AC:7F:7A:FA:24:F0:BB:EE:5D:41:D1:4C:A7
Certificate issuer: /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial: 19E65C
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/dbc9badc27b4df8b240b26012ed1a4b9a20ec038.roa
Signing time: Wed 03 Aug 2022 14:13:19 +0000
ROA not before: Wed 03 Aug 2022 03:00:00 +0000
ROA not after: Sat 03 Aug 2024 03:00:00 +0000
asID: 3257
IP address blocks: 190.151.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 15:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1697372 (0x19e65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
Validity
Not Before: Aug 3 03:00:00 2022 GMT
Not After : Aug 3 03:00:00 2024 GMT
Subject: CN=dbc9badc27b4df8b240b26012ed1a4b9a20ec038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:84:f1:c9:c4:88:24:ab:ff:d9:de:bc:34:
12:ff:07:5d:78:c5:4b:be:d2:74:d3:26:1d:f0:e4:
ef:e6:b4:1d:03:f2:35:5f:c1:0e:c0:73:f5:0d:4a:
5b:22:ad:0b:df:9d:cc:f9:1a:a4:f2:33:b9:f4:c6:
45:9b:b2:5a:47:17:d1:d1:0d:c8:36:eb:07:9a:67:
a8:6a:2b:f1:ab:22:e6:01:0e:f7:85:b8:bf:a9:1b:
95:22:b9:0e:ad:13:d0:d7:60:05:d1:e0:fb:0f:16:
9c:49:5f:ab:53:dd:6f:93:4e:32:cc:b9:70:64:9c:
90:1f:26:24:55:61:a5:4b:f4:45:a6:2f:26:75:1a:
e4:00:7e:7f:46:31:49:f2:7c:e1:6f:16:85:1d:88:
2f:6a:47:9b:70:56:c7:59:03:76:b7:c5:76:19:35:
70:e9:64:5f:a4:b3:14:11:93:f7:d5:0e:fd:e7:cd:
39:c3:90:db:27:d7:bb:72:21:5c:1e:23:25:19:b7:
20:0c:91:8e:d7:56:8a:c1:be:aa:03:f4:81:9e:86:
8f:42:f8:5f:bc:46:49:cd:dd:b8:01:87:17:72:80:
3e:e0:67:c5:c6:2a:2d:eb:e4:a9:69:e1:97:23:3f:
ed:57:71:4e:5a:31:45:2e:f4:db:75:a3:a1:3b:63:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:04:D1:3B:EE:92:DE:AC:7F:7A:FA:24:F0:BB:EE:5D:41:D1:4C:A7
X509v3 Authority Key Identifier:
keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/dbc9badc27b4df8b240b26012ed1a4b9a20ec038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.151.58.0/24
Signature Algorithm: sha256WithRSAEncryption
06:db:d0:86:4f:9a:f6:36:e9:be:83:5b:57:e9:61:f5:4a:44:
8c:38:35:b9:3e:c9:9d:e7:10:4d:a0:4d:43:e5:86:3c:2c:33:
ee:16:6c:68:e9:27:7a:1e:d9:b4:6c:5e:dc:c4:40:54:62:b7:
3c:4c:78:d0:04:bb:4b:a9:9c:6b:47:8f:90:d4:b7:9f:f3:96:
8d:e5:b9:be:0d:16:89:9c:5c:2c:bd:22:6d:b4:98:2e:17:4b:
e7:93:5e:9f:7d:fe:bc:cf:0a:04:ff:3c:00:c3:e0:4c:6b:46:
80:95:f7:1d:85:fa:95:06:51:70:35:4c:af:fb:6a:24:cc:bd:
c8:24:e3:d1:d8:96:be:08:e3:f1:a1:57:c9:dc:d1:49:60:58:
2f:fc:84:dc:ce:1c:8a:2b:07:27:b9:28:b4:d8:2d:62:5e:90:
45:8c:8b:17:a5:60:4c:65:1a:3a:b9:55:18:2f:8d:07:0a:7c:
59:99:a1:6f:52:21:c8:74:cc:5b:e8:0b:ac:1c:b7:0b:b0:78:
e5:6e:f8:fa:a0:21:47:c2:ab:ff:15:dc:5a:fd:70:3d:04:e9:
60:de:70:6f:22:4c:ad:ca:e6:dc:e0:b1:01:16:09:13:b2:7c:
65:7b:a0:df:42:27:90:f3:8a:01:98:78:31:f5:9c:81:3c:d0:
8a:22:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 19:04:35 2024 by rpki-client on console-fra.rpki-client.org