Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/eb5a2a23e9e21e41f95633cb6d31a44c71be20e6.roa
File: eb5a2a23e9e21e41f95633cb6d31a44c71be20e6.roa (raw, json)
Hash identifier: 6cmmn+z2VMWM2Gpcg1pVSpM9igAhovxZQ7sCLdXT/Wg=
Subject key identifier: 0A:2A:A3:22:84:D0:F9:B4:DA:FE:9A:B3:11:1A:DB:7B:F7:3F:22:C2
Certificate issuer: /CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Certificate serial: 22A1D2
Authority key identifier: 0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/eb5a2a23e9e21e41f95633cb6d31a44c71be20e6.roa
Signing time: Fri 21 Jul 2023 19:13:36 +0000
ROA not before: Thu 20 Jul 2023 19:13:36 +0000
ROA not after: Mon 21 Jul 2025 19:13:36 +0000
asID: 262589
IP address blocks: 190.211.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 20:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2269650 (0x22a1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Validity
Not Before: Jul 20 19:13:36 2023 GMT
Not After : Jul 21 19:13:36 2025 GMT
Subject: CN=eb5a2a23e9e21e41f95633cb6d31a44c71be20e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bd:6e:ed:c8:0c:db:58:9f:a0:4a:aa:ed:f2:
9f:75:3c:ea:5b:13:8d:0f:44:c7:83:8e:c6:64:4f:
8b:7d:fa:43:ea:05:19:1e:b4:1b:26:28:5d:e5:8e:
c9:5c:38:d0:74:c3:8f:6b:3c:e7:07:8d:5d:3c:2d:
34:fa:84:90:b1:34:b9:10:fd:77:4c:dd:5c:1f:4f:
f1:a0:3b:e8:35:47:2d:80:20:dd:16:c6:df:96:7d:
e7:d5:b8:2a:de:0a:a3:11:f6:bd:63:2c:2b:0e:f8:
6c:b6:1f:bb:24:b3:74:1a:29:3f:39:0c:fc:40:6d:
83:b1:b2:21:c1:8b:c1:5c:b3:77:40:d9:c5:84:4e:
11:bb:b4:53:54:b2:d7:68:c0:1d:b8:d5:20:f8:49:
2a:1a:0d:af:6c:2f:84:34:f5:94:64:fc:8f:17:75:
8d:12:a5:f5:6c:3d:69:b6:5b:7f:03:b2:da:5c:fd:
ea:4a:e5:14:c7:59:41:c7:26:c1:1b:e2:70:99:82:
47:c3:f8:1d:2c:a2:f4:5e:e7:23:6e:ea:f0:d3:b7:
71:b5:cd:f7:7d:a0:90:7b:02:f9:a1:dd:1c:be:e9:
1e:bd:ef:34:d4:1b:52:bb:09:00:db:79:b5:a2:6b:
d4:df:61:9f:ad:49:79:80:57:73:e3:2e:b9:e7:08:
62:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2A:A3:22:84:D0:F9:B4:DA:FE:9A:B3:11:1A:DB:7B:F7:3F:22:C2
X509v3 Authority Key Identifier:
keyid:0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/eb5a2a23e9e21e41f95633cb6d31a44c71be20e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/44abde35adbcf04fb85f8b032b43e458648b74b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.211.173.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:34:87:83:58:7d:6f:fa:c7:5e:03:e5:2b:4b:d4:f9:d8:c1:
ed:54:c7:e3:ca:55:3a:24:82:e7:3e:aa:b2:09:d0:ce:14:f1:
a5:4b:c5:ed:cd:00:51:02:2b:7f:15:02:1d:72:2d:11:fb:60:
53:9c:b8:18:e9:22:5c:8c:6f:e5:80:c5:65:51:26:99:eb:57:
31:e3:14:28:4b:c6:9b:d9:ff:5e:dd:37:32:c8:1c:06:dc:f0:
0b:10:19:74:57:25:48:72:b4:93:fe:e6:be:f9:2d:46:3e:73:
d4:13:fb:c9:b9:18:bc:49:b2:8f:57:ed:fc:eb:5a:1a:36:3e:
10:f2:74:8c:4a:4f:b0:e7:93:88:54:22:85:61:75:12:0c:05:
66:eb:52:4a:09:2a:2c:ab:ad:51:1b:5c:97:94:eb:6d:e5:7c:
7f:a7:e7:24:0a:c4:76:eb:75:75:f4:b9:8f:ff:3d:ca:de:95:
ef:88:c0:1d:c8:b2:03:2c:bf:4b:81:9a:11:30:88:8e:28:24:
4d:33:45:2c:01:7a:a2:46:78:f1:e1:6e:05:e2:ff:7b:1a:16:
be:2e:c3:7e:9b:a0:95:b1:05:c5:d3:8a:f4:8d:3b:46:53:03:
35:b7:5c:17:ce:ce:c5:4e:71:c8:a9:09:a5:01:b7:3d:47:d1:
56:d3:09:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 23:12:10 2024 by rpki-client on console-fra.rpki-client.org