Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/445a43ac9cfbc1f404a196bab993a52b28097048.roa
File: 445a43ac9cfbc1f404a196bab993a52b28097048.roa (raw, json)
Hash identifier: vhA6sfXqNo/v1shgNx0zUrp4Tzbf9VJC4/WEtSvsl5w=
Subject key identifier: 9B:D7:CC:8A:28:C4:8D:6C:9E:43:76:3C:1D:50:49:BF:57:DF:1C:7D
Certificate issuer: /CN=425b31fb70180b4aa636c240ebd5276c722716f7
Certificate serial: 1A47D7
Authority key identifier: D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/445a43ac9cfbc1f404a196bab993a52b28097048.roa
Signing time: Wed 10 Aug 2022 20:45:18 +0000
ROA not before: Fri 09 Apr 2021 03:00:00 +0000
ROA not after: Sun 09 Apr 2023 03:00:00 +0000
asID: 262589
IP address blocks: 190.94.177.0/24 maxlen: 24
190.94.178.0/24 maxlen: 24
190.94.179.0/24 maxlen: 24
190.94.182.0/24 maxlen: 24
190.94.186.0/24 maxlen: 24
190.94.187.0/24 maxlen: 24
190.94.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1722327 (0x1a47d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425b31fb70180b4aa636c240ebd5276c722716f7
Validity
Not Before: Apr 9 03:00:00 2021 GMT
Not After : Apr 9 03:00:00 2023 GMT
Subject: CN=445a43ac9cfbc1f404a196bab993a52b28097048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:af:2e:ae:15:29:6d:ad:45:83:ef:cc:64:70:
49:34:47:ac:a3:f6:81:55:49:fa:e8:c7:9e:0c:89:
72:db:b4:05:5d:17:08:44:e8:31:df:0d:07:ca:49:
15:17:c8:3e:e9:01:c9:c1:fb:f8:85:82:ca:39:db:
4b:ad:ab:d1:e8:4f:78:e9:9e:a0:c8:6f:3e:dd:d3:
7c:01:00:5e:1f:a5:78:34:bc:18:e2:a4:47:cc:59:
c7:fb:ff:df:4a:8c:08:7d:4b:6e:ce:67:b5:cf:dd:
40:70:42:4a:6a:7b:38:9d:40:b6:94:03:f6:32:e3:
eb:3c:9c:a3:4d:ea:50:f6:e2:c8:81:9c:bd:57:19:
b8:c8:57:dc:a7:b5:78:1c:75:5c:77:a3:83:76:6c:
32:5c:62:70:d4:13:b6:65:21:d7:8b:6f:fd:61:06:
fd:90:cb:d3:14:42:1f:50:37:3b:42:b6:83:38:0e:
fe:0c:3e:03:55:00:08:c0:79:e7:44:88:28:dd:7c:
ef:8d:c7:9c:5f:b9:b8:e1:9a:5f:a1:a8:34:d7:d4:
bd:bb:95:8c:d4:13:cd:fc:c4:72:33:7e:e7:49:8e:
9d:5a:0d:9b:f9:37:2e:d1:f3:ae:4b:6f:8b:d8:88:
53:db:1d:f0:07:ab:58:dc:e2:32:b2:b4:83:5c:81:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D7:CC:8A:28:C4:8D:6C:9E:43:76:3C:1D:50:49:BF:57:DF:1C:7D
X509v3 Authority Key Identifier:
keyid:D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/445a43ac9cfbc1f404a196bab993a52b28097048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/425b31fb70180b4aa636c240ebd5276c722716f7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.94.177.0-190.94.179.255
190.94.182.0/24
190.94.186.0/23
190.94.191.0/24
Signature Algorithm: sha256WithRSAEncryption
15:13:bd:b0:7c:02:65:e3:5a:21:ee:93:30:08:e0:9e:65:f6:
3f:98:be:30:84:18:1f:a5:0b:cd:3a:65:46:1a:25:a1:4a:e9:
09:2e:6d:d5:fc:04:97:d7:d9:60:f1:2a:bd:42:de:0e:e5:73:
f5:63:8b:1a:54:5d:b1:45:ae:d8:95:c9:3c:36:fc:33:81:f5:
fc:35:2e:9d:98:4a:49:d9:78:3c:26:ba:6c:69:36:1d:3d:a0:
ef:12:83:8f:8e:d9:1e:be:82:db:31:28:6d:64:0f:a8:3e:71:
e0:a2:65:76:6f:aa:0a:b6:69:b6:47:35:63:8b:cf:48:0b:62:
48:ce:34:b4:57:74:b5:61:a1:fb:31:4d:7f:8a:fe:e3:0e:a2:
84:89:40:04:66:d8:44:24:68:a6:df:4f:c4:d3:70:a1:94:88:
cb:39:f8:5b:89:19:97:6e:3c:28:08:df:8d:c1:51:dd:55:15:
b4:e4:e1:a1:24:76:e9:42:6e:3b:2e:e7:5e:5b:ec:17:1a:97:
c8:fd:f4:f8:c7:d0:8c:fb:f2:71:01:b7:5a:1e:84:8c:3e:29:
6c:d6:6f:7c:8c:56:40:5b:3c:27:68:0d:87:72:cb:2a:cd:26:
3c:d1:32:10:f1:3f:f9:e0:d1:e3:48:a0:6a:24:c0:40:16:6d:
96:22:7b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org