Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/3139302e3132332e36362e302f32332d3233203d3e20323731383133.roa
File: 3139302e3132332e36362e302f32332d3233203d3e20323731383133.roa (raw, json)
Hash identifier: PYKo35FVE2g4zrxUKfx90KTgZeNFK58Azvw1MnM1ga8=
Subject key identifier: 23:EE:CD:7B:40:29:F3:E9:9B:9D:6A:2B:6B:44:1F:13:B5:43:CD:04
Certificate issuer: /CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78
Certificate serial: 358F286501ACF1F8163A36BE0700687CCC593D1B
Authority key identifier: 92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/3139302e3132332e36362e302f32332d3233203d3e20323731383133.roa
Signing time: Tue 05 Mar 2024 17:51:21 +0000
ROA not before: Tue 05 Mar 2024 17:46:21 +0000
ROA not after: Tue 04 Mar 2025 17:51:21 +0000
asID: 271813
IP address blocks: 190.123.66.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 25 Sep 2024 14:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:8f:28:65:01:ac:f1:f8:16:3a:36:be:07:00:68:7c:cc:59:3d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921935EDD67E9C1816E703F1DABFFBF86CFA1B78
Validity
Not Before: Mar 5 17:46:21 2024 GMT
Not After : Mar 4 17:51:21 2025 GMT
Subject: CN=23EECD7B4029F3E99B9D6A2B6B441F13B543CD04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:88:6e:56:49:d0:46:dd:2e:05:02:cb:b0:
9a:bc:9e:34:26:2a:f5:0f:86:01:3b:d1:d6:ea:b7:
5b:64:f6:9b:e7:ec:89:c3:7e:ea:d8:07:26:1a:4e:
66:6a:01:5c:8a:9b:78:2d:76:be:a2:ee:5f:25:5e:
4e:9d:f7:06:e5:8d:dd:6f:46:06:0c:a3:53:6f:11:
31:a9:e5:1f:20:7d:ec:e6:f2:a6:31:f0:60:e8:0c:
23:5d:e4:27:c8:1b:2b:6f:43:bc:74:0f:b5:e5:d6:
b7:2e:32:19:4b:d1:16:50:90:12:d9:32:99:8a:60:
ee:87:02:bc:fc:9c:b0:b1:c6:98:db:2f:f4:ee:5c:
82:56:67:45:14:02:d0:2f:61:54:4b:aa:24:88:5e:
0d:03:b6:24:96:93:11:d4:c0:dd:fd:e9:fc:f4:8b:
25:43:0f:98:92:33:bf:79:68:d7:82:83:b5:55:63:
db:a1:4c:8a:bf:19:5f:3b:7d:99:81:43:ee:ee:04:
38:dc:64:19:d5:af:e9:a8:c9:7a:d2:08:4a:56:f0:
52:dd:95:c6:8f:c7:06:03:96:3d:d9:57:b5:97:be:
77:e8:2b:92:21:b4:7f:b8:4b:bb:f5:5a:a0:65:b3:
62:92:83:68:53:b7:ef:74:7a:5e:a7:55:f4:3b:4e:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EE:CD:7B:40:29:F3:E9:9B:9D:6A:2B:6B:44:1F:13:B5:43:CD:04
X509v3 Authority Key Identifier:
keyid:92:19:35:ED:D6:7E:9C:18:16:E7:03:F1:DA:BF:FB:F8:6C:FA:1B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/921935EDD67E9C1816E703F1DABFFBF86CFA1B78.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/538358A4467EEC3C0DA7CF2E5D3F3A42B2A22B3D4AB631A8D69E9EE0884F1C03/0/3139302e3132332e36362e302f32332d3233203d3e20323731383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.123.66.0/23
Signature Algorithm: sha256WithRSAEncryption
31:be:fe:1b:eb:50:07:63:17:fe:f5:55:1b:56:9d:60:e5:7d:
fe:c0:8f:9d:7e:22:c8:e7:88:c7:4e:67:8d:7f:10:44:b9:8f:
68:cb:66:2f:31:70:cc:2f:57:a8:7f:b9:96:2f:5d:a9:6b:ed:
70:e8:e3:38:ad:dc:88:ab:c6:df:24:79:80:01:c0:7c:0f:db:
48:42:03:ba:72:29:22:83:71:2a:63:21:c0:a6:8b:cc:4e:57:
94:d2:39:96:3b:d7:8e:55:80:38:e4:40:8c:6f:74:1b:23:32:
52:e8:6d:44:cf:0d:70:3c:3f:ca:06:85:10:3d:8d:eb:89:0e:
9b:56:47:24:60:78:1c:24:48:4c:82:3b:57:3d:c8:1b:79:4d:
99:93:56:f3:f1:4c:48:f6:f7:bf:b4:52:58:48:ab:bd:90:8b:
8d:5a:d9:87:c8:88:2e:7a:b2:b7:02:2b:57:58:d9:e1:bd:b9:
38:c1:78:55:1d:95:56:17:4f:c3:45:eb:de:2b:9d:64:01:46:
7b:e3:b5:51:ff:d7:d6:ec:75:a1:f6:aa:e5:ce:8e:1f:12:0f:
cd:fc:51:cf:bb:c1:8e:28:24:99:b6:c8:35:61:11:a0:d8:cc:
1c:7d:ab:08:d9:fc:95:fa:44:8b:49:b8:11:ec:07:e3:a3:f9:
20:95:c1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 17:33:58 2024 by rpki-client on console-fra.rpki-client.org