Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3234302e302f32322d3232203d3e203238313037.roa
File: 3139302e3132342e3234302e302f32322d3232203d3e203238313037.roa (raw, json)
Hash identifier: 4qAuGXjglBIVu0Ee2uOFmH1gHZZgl6VJHOaUagbu4uc=
Subject key identifier: 23:F9:CD:34:17:1E:86:E6:FA:9F:D0:47:54:7D:BD:A9:E2:56:81:93
Certificate issuer: /CN=FD904BAFA4FA5C7B4C609929AE21556B94AF8995
Certificate serial: 5EE249C6F28EB606DFE425533D02F5827879683E
Authority key identifier: FD:90:4B:AF:A4:FA:5C:7B:4C:60:99:29:AE:21:55:6B:94:AF:89:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3234302e302f32322d3232203d3e203238313037.roa
Signing time: Tue 05 Mar 2024 18:10:29 +0000
ROA not before: Tue 05 Mar 2024 18:05:29 +0000
ROA not after: Tue 04 Mar 2025 18:10:29 +0000
asID: 28107
IP address blocks: 190.124.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 09 Oct 2024 15:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e2:49:c6:f2:8e:b6:06:df:e4:25:53:3d:02:f5:82:78:79:68:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD904BAFA4FA5C7B4C609929AE21556B94AF8995
Validity
Not Before: Mar 5 18:05:29 2024 GMT
Not After : Mar 4 18:10:29 2025 GMT
Subject: CN=23F9CD34171E86E6FA9FD047547DBDA9E2568193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:39:5b:08:a6:2d:d2:be:00:8b:d6:12:23:d5:
dd:3d:8e:11:3b:7d:bf:ed:fc:f0:e2:e4:bd:01:48:
36:ee:a4:08:3c:73:24:4b:56:f8:13:65:cc:44:86:
df:bd:8d:52:3d:42:cf:3e:7a:01:76:8d:cc:63:18:
61:18:f5:91:94:e2:47:9b:0d:33:88:b4:7d:0e:91:
fa:0f:1b:d1:3a:8e:6c:29:61:83:f3:84:03:a1:f9:
80:3b:74:c2:21:83:aa:2b:4c:2a:59:11:9e:d7:c1:
72:9a:08:a5:bc:a4:70:1a:b1:65:1a:9e:0a:45:b4:
0e:16:84:75:df:25:61:8f:0f:be:2b:b8:48:cd:2b:
86:1a:33:7d:51:41:b1:56:f0:e1:9c:c7:aa:a8:76:
8e:33:34:25:61:35:f8:04:f3:cf:76:b9:e5:9b:b1:
46:cd:3b:7f:68:15:de:06:14:68:f7:24:0a:90:5f:
51:89:2e:4d:d3:dc:68:df:ca:20:f3:91:9b:d7:54:
3d:6c:f7:87:13:e9:e0:0e:f8:4e:15:00:a7:be:f5:
1e:2a:09:ef:e7:77:da:79:67:a9:c8:07:ab:5c:2c:
1a:90:41:9d:96:da:12:aa:b4:b7:b9:88:b9:c0:e4:
c2:c7:cd:81:74:04:eb:be:6f:42:03:7e:03:89:bf:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F9:CD:34:17:1E:86:E6:FA:9F:D0:47:54:7D:BD:A9:E2:56:81:93
X509v3 Authority Key Identifier:
keyid:FD:90:4B:AF:A4:FA:5C:7B:4C:60:99:29:AE:21:55:6B:94:AF:89:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD904BAFA4FA5C7B4C609929AE21556B94AF8995.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62C6F02D4ACFA3842D3C1601500EB0FF2C5B71AC9258730FAE798C68B8F362A8/0/3139302e3132342e3234302e302f32322d3232203d3e203238313037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:2e:75:96:db:26:6a:ce:c1:d2:3e:53:73:37:dc:bb:3d:24:
51:4a:5f:9d:68:8c:c3:95:1d:55:e7:3c:53:f4:2b:d0:d2:c8:
7b:ac:a4:42:e4:0a:0d:9c:01:f7:79:4d:61:65:24:e6:63:c2:
bd:b7:de:87:0a:d3:0e:15:e7:c1:f1:32:db:a9:3e:61:d5:ab:
9d:3f:65:37:3c:1e:68:d9:5a:a2:01:6d:2e:14:94:c2:c8:ed:
8e:c4:7f:86:ec:ab:aa:c8:1b:b3:e1:a5:1b:da:ef:e9:05:79:
f5:e0:2c:76:23:cd:b8:db:b5:92:5c:92:7a:3a:28:63:25:5e:
9a:8e:73:e4:82:ae:ae:5b:00:44:87:49:f2:08:9a:97:47:fb:
0c:87:4f:92:68:83:6d:39:e1:15:de:97:7c:3d:e0:d0:87:27:
33:af:95:8c:d9:b1:3a:b2:30:ca:65:b7:08:84:b9:48:3e:51:
ac:d5:4c:7c:24:85:2d:86:47:a5:c3:ac:2b:27:04:ef:b0:9f:
b9:81:4f:bc:7b:06:2c:32:a3:49:b8:4c:ad:32:f1:f6:9a:1d:
f6:2c:d1:01:6f:71:e4:a6:d5:6d:a8:d3:82:c6:ec:c1:dd:a1:
a2:f1:45:55:ae:58:3b:07:56:73:56:45:a0:56:dc:dd:d1:9f:
0c:80:18:55
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXuJJxvKOtgbf5CVTPQL1gnh5aD4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkQ5MDRCQUZBNEZBNUM3QjRDNjA5OTI5QUUyMTU1NkI5
NEFGODk5NTAeFw0yNDAzMDUxODA1MjlaFw0yNTAzMDQxODEwMjlaMDMxMTAvBgNV
BAMTKDIzRjlDRDM0MTcxRTg2RTZGQTlGRDA0NzU0N0RCREE5RTI1NjgxOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbOVsIpi3SvgCL1hIj1d09jhE7
fb/t/PDi5L0BSDbupAg8cyRLVvgTZcxEht+9jVI9Qs8+egF2jcxjGGEY9ZGU4keb
DTOItH0OkfoPG9E6jmwpYYPzhAOh+YA7dMIhg6orTCpZEZ7XwXKaCKW8pHAasWUa
ngpFtA4WhHXfJWGPD74ruEjNK4YaM31RQbFW8OGcx6qodo4zNCVhNfgE8892ueWb
sUbNO39oFd4GFGj3JAqQX1GJLk3T3GjfyiDzkZvXVD1s94cT6eAO+E4VAKe+9R4q
Ce/nd9p5Z6nIB6tcLBqQQZ2W2hKqtLe5iLnA5MLHzYF0BOu+b0IDfgOJv3cjAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUI/nNNBcehub6n9BHVH29qeJWgZMwHwYDVR0j
BBgwFoAU/ZBLr6T6XHtMYJkpriFVa5SviZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkM2RjAyRDRBQ0ZBMzg0MkQzQzE2MDE1MDBFQjBGRjJD
NUI3MUFDOTI1ODczMEZBRTc5OEM2OEI4RjM2MkE4LzAvRkQ5MDRCQUZBNEZBNUM3
QjRDNjA5OTI5QUUyMTU1NkI5NEFGODk5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRDkwNEJBRkE0RkE1QzdCNEM2
MDk5MjlBRTIxNTU2Qjk0QUY4OTk1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJDNkYwMkQ0QUNGQTM4NDJEM0MxNjAxNTAwRUIwRkYyQzVCNzFBQzky
NTg3MzBGQUU3OThDNjhCOEYzNjJBOC8wLzMxMzkzMDJlMzEzMjM0MmUzMjM0MzAy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4MzEzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvnzw
MA0GCSqGSIb3DQEBCwUAA4IBAQCgLnWW2yZqzsHSPlNzN9y7PSRRSl+daIzDlR1V
5zxT9CvQ0sh7rKRC5AoNnAH3eU1hZSTmY8K9t96HCtMOFefB8TLbqT5h1audP2U3
PB5o2VqiAW0uFJTCyO2OxH+G7KuqyBuz4aUb2u/pBXn14Cx2I82427WSXJJ6Oihj
JV6ajnPkgq6uWwBEh0nyCJqXR/sMh0+SaINtOeEV3pd8PeDQhyczr5WM2bE6sjDK
ZbcIhLlIPlGs1Ux8JIUthkelw6wrJwTvsJ+5gU+8ewYsMqNJuEytMvH2mh32LNEB
b3HkptVtqNOCxuzB3aGi8UVVrlg7B1ZzVkWgVtzd0Z8MgBhV
-----END CERTIFICATE-----
Generated at Wed Oct 9 20:37:42 2024 by rpki-client on console-fra.rpki-client.org