Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31382e302f32342d3234203d3e20323632313931.roa
File: 3139302e3130392e31382e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier: UzaYm7wTXfp/qXtTTPqiNK1ImkqQLX9YJWgbOpv/8tg=
Subject key identifier: DD:C8:70:AF:81:DB:38:71:D6:3D:66:73:3F:D0:00:23:B8:06:D3:E9
Certificate issuer: /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial: 073A445D97E886A85196E7142B1987178D41A0A2
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31382e302f32342d3234203d3e20323632313931.roa
Signing time: Tue 05 Mar 2024 18:08:50 +0000
ROA not before: Tue 05 Mar 2024 18:03:50 +0000
ROA not after: Tue 04 Mar 2025 18:08:50 +0000
asID: 262191
IP address blocks: 190.109.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 14:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:3a:44:5d:97:e8:86:a8:51:96:e7:14:2b:19:87:17:8d:41:a0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Validity
Not Before: Mar 5 18:03:50 2024 GMT
Not After : Mar 4 18:08:50 2025 GMT
Subject: CN=DDC870AF81DB3871D63D66733FD00023B806D3E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:74:35:50:8b:a8:66:c0:b4:6e:14:58:7d:
17:fe:4c:f9:80:a1:6b:27:7f:ba:ec:9a:54:44:c7:
50:23:fa:39:69:9b:0b:e5:51:90:0a:ce:59:03:75:
e8:37:a5:76:42:6d:39:1c:fc:2b:6c:a8:c6:4d:a5:
9f:ea:f0:50:6b:86:67:68:dc:c4:49:06:77:a0:1b:
67:73:e1:c9:a8:fb:59:20:27:c5:23:e9:cb:79:86:
56:d3:8d:07:e3:6e:43:b1:e6:76:49:53:83:d0:87:
48:39:93:8a:0e:62:92:24:1e:17:11:d6:ba:f4:71:
d2:f1:be:1b:46:af:a2:f4:a5:73:64:14:b0:30:49:
b7:86:ee:4e:66:e7:55:d0:b2:7b:df:0d:bc:39:41:
a5:15:6c:c7:c0:ef:c0:72:31:6e:8e:30:dc:82:bd:
09:65:82:2b:31:b1:a9:44:a8:1a:55:11:5c:44:03:
22:f7:71:13:e1:1c:44:72:8c:25:04:83:fe:0c:19:
a4:da:d0:d7:c1:62:b2:6b:58:cf:f6:06:3a:c2:a6:
d5:f3:1d:f9:69:2e:15:cb:cf:57:b5:00:6c:d4:a9:
96:13:4c:ed:f8:87:85:ca:2f:15:5d:2c:50:a5:09:
6b:43:6c:37:c1:10:a9:46:74:54:e3:42:c2:5a:2d:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C8:70:AF:81:DB:38:71:D6:3D:66:73:3F:D0:00:23:B8:06:D3:E9
X509v3 Authority Key Identifier:
keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e31382e302f32342d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.109.18.0/24
Signature Algorithm: sha256WithRSAEncryption
74:47:2c:e3:e4:e0:dd:80:17:47:ab:de:19:ed:5c:d6:1f:c3:
3d:8f:e7:0d:2e:9c:23:e3:82:05:7f:cc:4e:4d:7c:50:f4:05:
fc:15:24:2a:e5:0c:f1:10:75:64:da:77:bd:de:de:43:c8:58:
05:1d:91:d2:c6:22:36:0b:0b:55:0b:59:28:d8:19:c6:4f:55:
70:88:37:57:16:b8:b7:d2:22:e4:84:0e:75:c0:1b:d3:be:2a:
4e:b6:2d:13:2b:f5:9f:09:c5:bd:5d:cd:2d:ef:fa:d3:f6:0e:
d4:2f:7d:32:3f:71:c1:e7:29:0c:a1:29:03:98:d8:92:94:56:
f1:da:bb:68:75:26:82:ab:8f:be:b3:51:9e:ab:ea:a9:95:03:
4f:80:95:27:17:d3:9e:31:2e:14:15:ec:2b:2f:cf:15:23:8f:
a9:93:c6:cf:f1:8c:79:7c:fc:8e:05:02:2f:da:b9:54:e2:6f:
6f:d7:a0:50:3c:94:cf:02:17:78:fb:e7:5f:ed:5f:18:5b:8c:
df:09:12:69:26:ed:6f:c9:84:c0:36:17:13:4a:49:9b:73:84:
8e:0f:97:52:51:cf:de:2d:fe:22:d1:8e:a7:5a:cd:0e:d6:93:
15:57:77:a4:3d:05:ec:35:44:1a:52:e6:f3:e6:85:ed:45:13:
11:32:f6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 18:35:53 2024 by rpki-client on console-ams.rpki-client.org