Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e302e39362e302f32302d3234203d3e203238303338.roa
File: 3139302e302e39362e302f32302d3234203d3e203238303338.roa (raw, json)
Hash identifier: jIqAA8i7696HGKjPB7RrUTdX6x9i0VHNKJnn7HdU6bk=
Subject key identifier: 77:4F:2E:85:1E:86:EF:E0:2E:68:FD:7E:32:2D:77:6D:72:3A:C0:1B
Certificate issuer: /CN=CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8
Certificate serial: 70A6E4E33CC9130CF0B76980D1C9C493F287F25A
Authority key identifier: CB:3D:66:30:5F:CD:8F:19:74:E1:E4:AD:92:D8:D4:F1:87:BA:51:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e302e39362e302f32302d3234203d3e203238303338.roa
Signing time: Tue 05 Mar 2024 18:02:35 +0000
ROA not before: Tue 05 Mar 2024 17:57:35 +0000
ROA not after: Tue 04 Mar 2025 18:02:35 +0000
asID: 28038
IP address blocks: 190.0.96.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 20:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:a6:e4:e3:3c:c9:13:0c:f0:b7:69:80:d1:c9:c4:93:f2:87:f2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8
Validity
Not Before: Mar 5 17:57:35 2024 GMT
Not After : Mar 4 18:02:35 2025 GMT
Subject: CN=774F2E851E86EFE02E68FD7E322D776D723AC01B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:d6:54:6e:f2:64:e6:34:2f:de:e4:09:89:
c7:d3:26:a2:58:0c:68:48:ac:40:1b:e9:94:17:79:
bc:22:18:ac:54:70:ce:47:a6:df:3a:8b:5d:47:64:
66:86:e9:82:67:80:9b:bd:2f:71:62:32:d0:30:a9:
c3:86:a3:53:67:d5:a2:b9:4d:e7:49:91:03:f1:d6:
9c:17:40:96:56:1b:04:04:a5:20:a9:44:4d:92:65:
a2:52:ce:66:92:88:32:43:48:2c:23:4b:f2:52:6e:
29:f9:65:69:8b:2a:5b:65:f4:15:ab:2d:1d:45:55:
36:63:e6:1d:1d:07:dc:ad:ff:54:2a:1e:06:d7:07:
75:fb:6d:0d:f3:7b:5b:7d:ec:dc:46:da:76:e0:06:
39:ac:e4:c4:ea:ab:e5:c2:19:af:6b:8a:19:fa:c5:
3b:89:87:fb:9d:bf:75:d1:e9:b5:6b:5b:02:44:7a:
c1:a8:69:dd:67:62:37:ba:75:02:57:4a:38:2f:28:
c8:54:43:68:0f:12:cb:eb:00:13:a5:f4:d1:21:31:
1f:21:81:58:35:b2:fe:76:b3:81:b7:e0:2b:e1:81:
14:ca:eb:18:d9:a3:d6:9a:36:41:e8:67:a1:f0:7f:
79:6f:88:4a:90:c7:70:25:62:04:95:11:69:03:1a:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4F:2E:85:1E:86:EF:E0:2E:68:FD:7E:32:2D:77:6D:72:3A:C0:1B
X509v3 Authority Key Identifier:
keyid:CB:3D:66:30:5F:CD:8F:19:74:E1:E4:AD:92:D8:D4:F1:87:BA:51:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3139302e302e39362e302f32302d3234203d3e203238303338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.0.96.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:a2:e6:4e:8f:7b:87:ae:57:bb:67:82:ab:7c:d8:b0:d4:50:
9d:e1:92:32:16:3e:46:a2:d8:21:f5:6f:ae:2f:dd:53:66:a2:
58:b6:96:ca:3c:07:56:28:d6:f9:bf:15:68:84:a4:2e:73:2a:
1d:fa:1c:86:cc:eb:33:3e:f9:e1:15:b4:c1:6c:6f:77:aa:ee:
d5:b1:dd:b0:05:a0:64:5a:41:21:51:8d:bd:56:6b:09:8b:e7:
b3:60:c6:f0:7b:fd:1d:9c:42:28:e5:ab:dc:85:f3:ca:2c:63:
90:cf:3f:f5:bf:5c:0d:b0:17:da:02:69:5c:5f:c1:05:38:f5:
5f:03:87:1e:46:ec:d8:30:1a:07:29:17:92:d5:55:67:74:53:
68:26:4e:95:c4:08:92:e0:bf:98:a2:d9:14:5c:65:54:ef:33:
a1:86:62:71:6d:36:b7:66:22:a6:79:a5:c6:44:f9:94:51:79:
17:12:f4:20:0d:79:f0:36:a5:b0:ae:ee:92:05:8b:43:c3:56:
65:da:3e:b5:ee:09:24:32:1e:45:df:e9:7b:b0:94:6a:38:31:
64:a5:e4:b0:58:08:ee:ca:c2:92:61:56:75:4d:51:3d:bb:6f:
28:29:c8:9a:c2:ac:ba:19:a9:c2:8e:35:c3:3e:cc:d0:09:bf:
d3:e0:ad:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 22:11:22 2024 by rpki-client on console-fra.rpki-client.org