Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e32392e302f32342d3234203d3e20323632313931.roa
File: 3139302e3130392e32392e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier: HRPutDOp3knkezDZkdqFtm/SIJX6E4U/gZ61lWdIIBI=
Subject key identifier: 65:D1:DF:74:30:9C:33:F4:89:EF:C8:E4:B7:4E:67:BE:76:E9:E6:C6
Certificate issuer: /CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Certificate serial: 3201AB1ABF85441AC4A7BDF86BEE5517E32EED8C
Authority key identifier: A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e32392e302f32342d3234203d3e20323632313931.roa
Signing time: Tue 05 Mar 2024 18:08:50 +0000
ROA not before: Tue 05 Mar 2024 18:03:50 +0000
ROA not after: Tue 04 Mar 2025 18:08:50 +0000
asID: 262191
IP address blocks: 190.109.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 14:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:01:ab:1a:bf:85:44:1a:c4:a7:bd:f8:6b:ee:55:17:e3:2e:ed:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14
Validity
Not Before: Mar 5 18:03:50 2024 GMT
Not After : Mar 4 18:08:50 2025 GMT
Subject: CN=65D1DF74309C33F489EFC8E4B74E67BE76E9E6C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cc:49:17:c1:6e:d6:4d:6f:03:d6:6d:c0:54:
23:33:45:45:25:10:6c:ca:dc:42:e3:18:1b:bd:58:
6a:06:c5:52:47:b2:d8:7c:b1:2d:2b:46:ca:b1:27:
3a:77:68:09:52:8b:8e:1b:78:37:66:3c:97:83:6c:
09:b4:11:3e:12:06:54:8b:60:60:82:1b:ea:05:75:
70:cb:55:c8:6a:66:61:9d:91:9e:c1:51:9c:da:75:
5a:6b:95:1a:69:43:f6:dd:dc:76:e5:71:8c:af:55:
a6:94:b7:36:3c:af:33:1a:c9:fe:87:04:ec:15:e2:
70:97:97:2a:d7:6c:a4:41:fb:0d:40:33:d6:b8:05:
fa:43:25:88:36:1e:9a:b3:7f:00:96:ff:9c:53:f8:
a8:e4:12:1c:64:cf:bc:3f:76:7a:64:ff:d5:91:9d:
43:ec:6d:a0:ec:cc:24:7a:3c:4d:aa:d3:93:a2:8d:
9d:c6:62:26:19:a2:a4:a5:b0:c0:94:4a:bf:ea:08:
d9:66:f7:4c:e4:19:4a:88:b2:7b:25:37:84:9a:ca:
bb:f2:4f:83:4e:c8:7a:3f:3a:33:cb:4f:80:56:02:
d3:04:8e:42:a6:da:d8:81:38:09:da:05:53:0d:65:
7a:69:71:32:af:ec:9f:81:9a:7d:c7:4b:a1:fb:19:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:DF:74:30:9C:33:F4:89:EF:C8:E4:B7:4E:67:BE:76:E9:E6:C6
X509v3 Authority Key Identifier:
keyid:A2:0F:E8:A6:E3:52:C9:C9:EC:9B:4C:7C:FF:FF:77:B3:23:93:6C:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A20FE8A6E352C9C9EC9B4C7CFFFF77B323936C14.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B339165FC292AC9D1326DCA79B05F17D39F878505CF316BB706506F0AABDFF5/0/3139302e3130392e32392e302f32342d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.109.29.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d6:98:36:19:04:e0:66:e7:e5:66:ed:1a:ea:09:c9:9c:aa:
41:a4:21:af:02:b4:4a:b7:95:80:1b:4d:d7:5f:8d:51:05:d5:
cf:62:e1:13:e6:f0:14:dc:3e:dd:01:ce:18:a8:44:a1:49:b1:
8e:cc:37:78:a8:57:1c:12:1c:32:07:74:4e:a5:ab:22:ab:d5:
af:5a:4b:e9:d3:d4:56:65:9b:ac:fb:40:38:6b:1d:01:28:d8:
0b:c5:94:5b:5d:0a:8b:56:39:fe:40:0a:33:a0:be:29:04:c0:
e4:34:67:a6:11:59:ee:0b:be:cd:a6:ce:40:e5:f5:c6:e1:cd:
dd:b9:3d:a7:c9:79:68:82:82:2b:e3:69:30:aa:4a:5f:09:59:
ba:27:1b:be:1a:7a:51:ed:f1:ca:b7:56:ad:e0:c9:6f:03:64:
ad:09:59:b0:fc:c6:04:31:8b:76:b7:93:0b:6d:74:0f:9b:03:
7c:22:90:32:4b:85:4c:53:3c:5e:f9:29:64:30:06:37:53:b4:
df:23:77:da:3c:e2:6b:b0:da:35:a6:d3:8c:fd:97:c1:e4:89:
6e:97:5f:e5:62:6b:8e:18:59:03:e2:c1:b3:75:f1:76:c8:a7:
21:f2:a7:e4:b4:2c:52:48:fe:e4:02:de:50:9f:96:7d:c6:c1:
07:d6:a3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 18:35:53 2024 by rpki-client on console-ams.rpki-client.org