Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/75e949df867d071df4d03bfda112d6ea6029538e.roa
File: 75e949df867d071df4d03bfda112d6ea6029538e.roa (raw, json)
Hash identifier: oQvpIIgJvFXJXT9ee2amXT6uzBIOJtuLo34xdGqGIuY=
Subject key identifier: 3C:BA:E5:25:0C:7E:40:E3:71:F3:61:1E:B1:F3:DB:43:AF:07:C0:6A
Certificate issuer: /CN=425b31fb70180b4aa636c240ebd5276c722716f7
Certificate serial: 1E5A46
Authority key identifier: D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/75e949df867d071df4d03bfda112d6ea6029538e.roa
Signing time: Tue 10 Jan 2023 20:43:30 +0000
ROA not before: Thu 08 Apr 2021 03:00:00 +0000
ROA not after: Sun 09 Apr 2023 03:00:00 +0000
asID: 262589
IP address blocks: 190.94.176.0/20 maxlen: 24
190.94.176.0/24 maxlen: 24
190.94.177.0/24 maxlen: 24
190.94.178.0/24 maxlen: 24
190.94.179.0/24 maxlen: 24
190.94.182.0/24 maxlen: 24
190.94.186.0/24 maxlen: 24
190.94.187.0/24 maxlen: 24
190.94.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1989190 (0x1e5a46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425b31fb70180b4aa636c240ebd5276c722716f7
Validity
Not Before: Apr 8 03:00:00 2021 GMT
Not After : Apr 9 03:00:00 2023 GMT
Subject: CN=75e949df867d071df4d03bfda112d6ea6029538e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:45:1e:73:92:ee:50:3d:6b:e4:5c:ce:19:14:
3d:a1:dc:b3:02:c4:9c:2a:e7:8f:ac:46:6c:1b:41:
6d:de:d8:c5:80:01:7a:c1:82:67:b8:65:17:32:82:
d9:36:71:5d:a9:cc:19:a7:9d:ea:79:53:00:50:d1:
b9:b9:35:03:70:46:f7:a2:aa:fe:29:66:8f:64:c6:
a0:c5:7f:9c:61:57:66:50:3c:ba:1c:ae:07:fd:53:
88:c3:20:af:c5:dd:2c:ff:69:15:ff:2b:98:61:c2:
27:d1:9f:89:c0:67:db:af:65:fa:e9:be:b4:16:b4:
57:ce:a7:9c:79:16:34:da:2a:c4:e9:47:49:06:da:
de:50:bd:d2:9c:68:1d:d2:ee:04:0b:d4:52:74:7f:
5e:95:2c:53:8a:45:3d:21:f9:70:45:fe:04:8d:a5:
6e:ba:43:b9:4a:07:9d:d1:54:ed:bd:6a:fb:6f:ad:
34:fc:7e:ec:55:07:72:f9:70:b0:dd:a0:6b:09:96:
6c:4f:ce:3a:55:03:f0:10:37:e7:d6:32:a0:48:15:
10:2b:8d:58:2d:a4:67:a9:03:3c:22:98:10:2b:36:
6a:d1:95:f4:86:47:6b:9a:11:36:da:af:92:57:ae:
68:e3:80:82:8a:ae:1d:a7:91:82:70:7e:50:c4:b2:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BA:E5:25:0C:7E:40:E3:71:F3:61:1E:B1:F3:DB:43:AF:07:C0:6A
X509v3 Authority Key Identifier:
keyid:D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/75e949df867d071df4d03bfda112d6ea6029538e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/425b31fb70180b4aa636c240ebd5276c722716f7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.94.176.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:d9:ea:81:96:61:d9:35:a8:9d:7e:5a:b6:0d:e1:6e:a4:7d:
36:e3:51:6e:3c:28:36:fd:ae:6d:8e:81:b5:c5:1a:dc:13:b4:
a2:9a:6a:79:e1:9b:d2:88:73:cb:3f:92:89:e5:19:58:bf:e4:
5c:8c:d4:9e:14:7d:55:b6:ef:25:b2:35:91:b8:a9:c9:f9:f6:
80:59:63:0b:f9:89:fc:09:36:d6:75:15:fc:1d:ad:ef:6d:0a:
47:5c:b8:1b:f2:c5:88:79:e0:f3:45:95:a1:6d:02:4e:a8:cf:
ee:06:04:cd:0e:8d:14:46:e1:86:15:26:05:cf:4b:b8:f4:55:
6c:bd:35:74:4b:75:ae:bf:74:11:36:3a:a9:a4:6f:bb:a0:45:
9e:94:d2:16:9b:3c:ed:3d:49:32:17:bd:94:21:12:d6:f1:35:
fa:01:26:9f:cb:f5:4f:63:61:87:a8:90:35:a6:e3:ea:1a:57:
5d:99:82:30:87:7f:52:1c:da:0f:e3:c3:a5:ac:cf:3e:32:42:
2d:f2:df:41:81:8f:3e:74:3c:4b:02:60:d8:7c:54:0a:64:4a:
29:25:dc:48:86:15:8a:34:d3:12:c3:96:0f:81:f9:89:de:d2:
92:a2:44:92:14:c2:a8:cd:a1:fb:99:6d:e0:8c:5f:26:04:83:
ad:bf:31:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org