Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/76e9f6d2f216484bd869b8d735ae8cc71fcbd85b.roa
File: 76e9f6d2f216484bd869b8d735ae8cc71fcbd85b.roa (raw, json)
Hash identifier: zpDf0meiAPInsJZlK5t9zu3LKwCS0fl3Rx691ohGujQ=
Subject key identifier: D0:7B:C5:5F:4B:DC:A6:0B:1E:51:BB:B7:6A:1D:88:A3:00:24:0B:5E
Certificate issuer: /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial: 281E9A
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/76e9f6d2f216484bd869b8d735ae8cc71fcbd85b.roa
Signing time: Mon 12 Feb 2024 15:10:29 +0000
ROA not before: Mon 12 Feb 2024 15:09:57 +0000
ROA not after: Mon 12 Feb 2029 15:09:57 +0000
asID: 27910
IP address blocks: 190.242.184.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 00:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2629274 (0x281e9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Validity
Not Before: Feb 12 15:09:57 2024 GMT
Not After : Feb 12 15:09:57 2029 GMT
Subject: CN=76e9f6d2f216484bd869b8d735ae8cc71fcbd85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:81:9d:eb:d9:1f:1e:9f:6e:64:4e:37:a0:60:
c3:01:f5:88:b3:04:fc:5f:22:75:13:e7:50:83:e7:
48:c3:ef:58:bc:ec:65:8c:8e:c8:b4:02:78:4c:e6:
0b:df:d8:b0:06:dc:c4:46:eb:7f:33:73:3f:0b:38:
db:08:b1:41:14:7c:42:62:32:46:d7:e4:91:56:be:
0c:80:f9:3e:b9:51:1c:df:63:82:d9:43:df:85:d6:
e3:81:66:f9:e7:19:de:5e:15:74:a1:98:93:35:40:
07:04:d6:c7:c8:e9:38:d1:0c:95:c5:55:5c:c4:bb:
2d:3b:73:05:b6:27:62:7a:b5:77:0a:ce:7e:5c:59:
ff:bc:f5:e6:da:df:a6:3c:91:58:bc:c7:34:6e:ce:
4d:fa:6c:ba:7f:08:d7:5f:aa:9a:ac:70:dc:52:6e:
11:9c:08:37:73:a2:25:5f:bb:34:31:b4:f5:10:f5:
c5:9b:e5:80:ec:30:cf:be:9b:54:63:a8:1b:59:74:
c2:65:3f:72:ca:8b:26:3c:e0:eb:ce:d6:71:e2:f4:
c0:1b:9f:a2:3c:7e:2a:99:c6:18:11:86:f5:65:69:
57:48:b4:dc:96:c6:8f:80:20:b2:a8:10:d4:a4:38:
56:6b:78:15:ec:09:83:24:61:54:6f:63:49:22:29:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7B:C5:5F:4B:DC:A6:0B:1E:51:BB:B7:6A:1D:88:A3:00:24:0B:5E
X509v3 Authority Key Identifier:
keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/76e9f6d2f216484bd869b8d735ae8cc71fcbd85b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.184.0/23
Signature Algorithm: sha256WithRSAEncryption
28:08:49:fd:66:ab:7c:1d:2c:33:a7:31:fa:cc:6b:21:7d:54:
41:28:8a:67:08:b8:6c:5a:e5:e5:a3:dd:e7:f1:36:1f:49:58:
7d:2a:ee:83:07:0e:78:47:5d:11:5f:71:1a:77:6e:c8:a0:6a:
45:7a:d6:16:3c:55:18:f9:b6:0e:17:4f:21:41:4d:42:4e:cd:
fd:01:42:02:cc:de:b3:a7:43:9f:af:5d:4a:30:86:a1:6a:0d:
21:ce:64:b1:50:9c:3e:65:3d:6c:8a:5c:5c:f9:42:84:b9:42:
fa:e0:c4:80:a7:44:b3:5b:75:50:99:05:d4:84:68:7c:a5:37:
65:fb:6b:ab:ef:55:b2:fd:38:60:56:d8:2e:65:2b:0e:56:fd:
09:c5:fb:a9:18:34:10:27:d8:d7:d7:db:6e:4e:bf:be:ce:08:
26:4c:c4:1f:fb:d7:a1:74:03:15:6a:b3:85:a5:5b:b4:2d:f0:
a0:90:f5:1c:d3:1c:2c:64:e6:4a:a8:76:53:80:8a:41:d9:e3:
ba:58:86:ab:fb:d9:e1:bd:c3:dc:19:45:3a:6e:32:5d:52:50:
79:95:0d:3c:fb:6d:90:33:02:66:ee:cb:d8:0b:71:f5:37:c8:
85:7e:68:ce:c3:f5:c5:3d:2a:88:8b:c2:96:cc:0a:23:89:6a:
17:9c:7e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 03:08:22 2024 by rpki-client on console-fra.rpki-client.org