Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130352e302f32342d3234203d3e203233353230.roa
File: 3139302e3234322e3130352e302f32342d3234203d3e203233353230.roa (raw, json)
Hash identifier: nApkQznhFQd39ft3xl6S7zNvfNLOCJ+80WnFD/MxN7k=
Subject key identifier: E7:53:A0:E8:B4:78:3B:73:E5:F5:B5:F2:94:2C:25:02:81:7F:12:0D
Certificate issuer: /CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Certificate serial: 3D90B3A58C99E09064D5087EDC41CD6C22791E52
Authority key identifier: 76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130352e302f32342d3234203d3e203233353230.roa
Signing time: Tue 05 Mar 2024 18:14:42 +0000
ROA not before: Tue 05 Mar 2024 18:09:42 +0000
ROA not after: Tue 04 Mar 2025 18:14:42 +0000
asID: 23520
IP address blocks: 190.242.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 17:10:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:90:b3:a5:8c:99:e0:90:64:d5:08:7e:dc:41:cd:6c:22:79:1e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ADD31F06A0B745CFDA6B93835E198DDB0DB784
Validity
Not Before: Mar 5 18:09:42 2024 GMT
Not After : Mar 4 18:14:42 2025 GMT
Subject: CN=E753A0E8B4783B73E5F5B5F2942C2502817F120D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:73:0f:d7:14:5c:4b:a1:a6:15:3a:a8:4d:
b2:4f:04:ab:18:ef:4e:05:5a:3e:aa:5f:0f:9b:23:
1f:66:87:19:d0:ff:d5:33:07:b8:d3:af:74:0b:21:
8e:88:56:d1:60:e3:4f:f2:a8:84:26:57:26:de:a4:
72:82:25:49:cc:9f:17:f0:79:e9:b2:b1:52:f6:ca:
55:04:4b:db:bd:7e:fd:cd:a1:51:42:04:91:4d:4b:
2e:24:d3:fc:e0:d3:0a:7d:e1:7b:3f:38:1d:df:f6:
04:9e:b3:8a:4a:4d:9c:e2:d1:2f:a7:3d:72:40:ba:
50:c7:36:89:91:53:2f:6d:2a:bd:a8:f8:a7:04:08:
e6:74:c2:0c:e9:29:b1:7a:b7:0b:78:59:1c:f8:e1:
10:f1:25:c4:bc:5c:84:70:74:ae:05:47:89:13:9e:
46:e6:0c:c1:cf:97:d7:b4:70:6b:26:e3:d6:d5:3d:
d8:27:4e:0f:db:2d:db:34:60:83:2b:54:cd:a5:1a:
f8:3c:38:1c:b7:c1:6d:d0:90:57:a1:3c:a3:75:28:
6a:93:17:44:50:b4:43:84:82:a2:66:e2:fc:ac:3e:
e2:4f:40:1f:17:26:f2:ff:14:dc:bd:39:8d:ce:01:
56:d4:e1:0c:65:ac:f7:57:6e:8c:1a:5f:b0:12:31:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:53:A0:E8:B4:78:3B:73:E5:F5:B5:F2:94:2C:25:02:81:7F:12:0D
X509v3 Authority Key Identifier:
keyid:76:AD:D3:1F:06:A0:B7:45:CF:DA:6B:93:83:5E:19:8D:DB:0D:B7:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76ADD31F06A0B745CFDA6B93835E198DDB0DB784.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61E636F90E723CA159F8DF51B283A2A05C5A403D8E4A4661B9D86D892DB62D02/0/3139302e3234322e3130352e302f32342d3234203d3e203233353230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.105.0/24
Signature Algorithm: sha256WithRSAEncryption
07:95:01:94:ed:48:69:b7:67:63:30:44:6d:32:43:f4:3e:94:
c4:7c:4c:9d:b7:d0:12:74:2a:d4:c8:71:22:e5:6b:cb:22:eb:
c3:2f:84:92:9d:4f:ae:60:ff:0f:b1:4a:2b:b2:16:70:b6:9f:
80:69:0c:0f:90:72:03:e6:7b:90:08:24:15:3e:72:4b:c0:1c:
5f:ea:4a:ad:65:82:ba:60:72:44:e6:33:97:d1:bf:65:18:65:
1d:8a:a8:19:07:e3:93:f9:c7:4a:6b:ba:22:d0:ea:76:42:5f:
52:84:8c:91:cd:11:d1:69:ca:45:98:e5:3d:ab:c6:c9:43:6d:
45:a5:19:44:f0:1c:96:47:37:8c:16:37:77:c8:0f:61:5f:f5:
b3:eb:01:b0:10:64:0f:38:31:bb:b2:8b:c9:bc:8a:1c:dc:dc:
f3:c4:a5:5e:a5:05:e3:25:5c:d4:53:0d:8c:09:46:05:f7:ba:
65:3e:af:f9:af:9f:60:98:c3:34:f6:6d:aa:6e:7f:49:f9:2d:
d3:a5:52:f1:cf:2c:48:a7:5f:b6:b5:4a:08:88:f8:04:88:49:
66:bf:92:e2:1f:cb:72:f9:83:90:47:98:2c:b1:0f:fb:06:46:
70:55:33:8b:34:08:e8:03:e7:f8:17:3c:aa:48:0b:b0:0e:48:
26:2b:f7:de
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPZCzpYyZ4JBk1Qh+3EHNbCJ5HlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZBREQzMUYwNkEwQjc0NUNGREE2QjkzODM1RTE5OERE
QjBEQjc4NDAeFw0yNDAzMDUxODA5NDJaFw0yNTAzMDQxODE0NDJaMDMxMTAvBgNV
BAMTKEU3NTNBMEU4QjQ3ODNCNzNFNUY1QjVGMjk0MkMyNTAyODE3RjEyMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr9HMP1xRcS6GmFTqoTbJPBKsY
704FWj6qXw+bIx9mhxnQ/9UzB7jTr3QLIY6IVtFg40/yqIQmVybepHKCJUnMnxfw
eemysVL2ylUES9u9fv3NoVFCBJFNSy4k0/zg0wp94Xs/OB3f9gSes4pKTZzi0S+n
PXJAulDHNomRUy9tKr2o+KcECOZ0wgzpKbF6twt4WRz44RDxJcS8XIRwdK4FR4kT
nkbmDMHPl9e0cGsm49bVPdgnTg/bLds0YIMrVM2lGvg8OBy3wW3QkFehPKN1KGqT
F0RQtEOEgqJm4vysPuJPQB8XJvL/FNy9OY3OAVbU4QxlrPdXbowaX7ASMetZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU51Og6LR4O3Pl9bXylCwlAoF/Eg0wHwYDVR0j
BBgwFoAUdq3THwagt0XP2muTg14ZjdsNt4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MUU2MzZGOTBFNzIzQ0ExNTlGOERGNTFCMjgzQTJBMDVD
NUE0MDNEOEU0QTQ2NjFCOUQ4NkQ4OTJEQjYyRDAyLzAvNzZBREQzMUYwNkEwQjc0
NUNGREE2QjkzODM1RTE5OEREQjBEQjc4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NkFERDMxRjA2QTBCNzQ1Q0ZE
QTZCOTM4MzVFMTk4RERCMERCNzg0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjFFNjM2RjkwRTcyM0NBMTU5RjhERjUxQjI4M0EyQTA1QzVBNDAzRDhF
NEE0NjYxQjlEODZEODkyREI2MkQwMi8wLzMxMzkzMDJlMzIzNDMyMmUzMTMwMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMzMzUzMjMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvvJp
MA0GCSqGSIb3DQEBCwUAA4IBAQAHlQGU7Uhpt2djMERtMkP0PpTEfEydt9ASdCrU
yHEi5WvLIuvDL4SSnU+uYP8PsUorshZwtp+AaQwPkHID5nuQCCQVPnJLwBxf6kqt
ZYK6YHJE5jOX0b9lGGUdiqgZB+OT+cdKa7oi0Op2Ql9ShIyRzRHRacpFmOU9q8bJ
Q21FpRlE8ByWRzeMFjd3yA9hX/Wz6wGwEGQPODG7sovJvIoc3NzzxKVepQXjJVzU
Uw2MCUYF97plPq/5r59gmMM09m2qbn9J+S3TpVLxzyxIp1+2tUoIiPgEiElmv5Li
H8ty+YOQR5gssQ/7BkZwVTOLNAjoA+f4FzyqSAuwDkgmK/fe
-----END CERTIFICATE-----
Generated at Tue Jul 30 19:32:43 2024 by rpki-client on console-fra.rpki-client.org