Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/8a3f6990428009c54f94a17175be55d10f97b5e2.roa
File: 8a3f6990428009c54f94a17175be55d10f97b5e2.roa (raw, json)
Hash identifier: NBYXUQv9rD3De8/zkWINClw3aaBjbKQB33DQZkxhA5g=
Subject key identifier: 90:AD:DD:DC:5F:21:0A:47:CF:C9:38:FC:41:F9:27:D2:5A:9D:EF:F8
Certificate issuer: /CN=e7910aba265e3d6933bffbf4bb39ed43b03a2ffb
Certificate serial: 216BE1
Authority key identifier: 95:A7:49:5D:DB:4D:A4:77:AD:D6:61:D7:05:CB:ED:C0:4B:54:26:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/8a3f6990428009c54f94a17175be55d10f97b5e2.roa
Signing time: Thu 31 Aug 2023 13:34:29 +0000
ROA not before: Wed 30 Aug 2023 13:34:29 +0000
ROA not after: Sun 31 Aug 2025 13:34:29 +0000
asID: 52295
IP address blocks: 190.211.244.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2190305 (0x216be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7910aba265e3d6933bffbf4bb39ed43b03a2ffb
Validity
Not Before: Aug 30 13:34:29 2023 GMT
Not After : Aug 31 13:34:29 2025 GMT
Subject: CN=8a3f6990428009c54f94a17175be55d10f97b5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:06:36:01:68:a2:ff:56:21:1d:ff:94:6f:a6:
5b:2f:19:5b:92:7f:2b:fa:d4:4e:d1:e2:cf:7a:ba:
a7:27:e9:d9:fc:58:e7:36:d2:2c:75:ab:44:ed:a6:
c2:08:02:d6:8d:a4:b0:0e:ec:a0:77:f6:fc:47:58:
c4:27:d1:f6:32:41:a5:1c:57:32:f5:20:dc:37:e8:
e2:90:14:f0:d4:c0:1c:1b:8e:94:43:83:70:4f:d9:
20:bb:45:85:04:4b:12:a2:e0:aa:39:94:e1:e2:08:
5e:c6:03:b3:30:0b:7e:f2:b1:ba:b5:29:b8:3c:c3:
df:28:c3:2f:65:51:37:39:b6:c3:38:f7:05:76:06:
c7:7d:0b:f3:57:06:fe:96:86:f6:e0:69:53:35:df:
21:c2:7d:98:c7:f0:04:6e:bd:df:4c:58:bf:fd:a2:
64:c1:54:76:40:0c:54:37:4d:d4:da:83:b5:8a:a5:
93:9a:26:53:aa:cb:fc:5b:79:59:c6:3e:99:af:d7:
34:42:b9:49:87:77:65:92:9a:0d:55:ec:86:63:19:
29:e2:e0:06:37:56:38:7b:99:61:13:4f:74:cf:bf:
f5:61:9b:5b:19:04:30:47:90:92:1f:04:cd:7e:f4:
18:16:bf:b6:37:1d:59:15:00:04:f7:5b:76:8d:08:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AD:DD:DC:5F:21:0A:47:CF:C9:38:FC:41:F9:27:D2:5A:9D:EF:F8
X509v3 Authority Key Identifier:
keyid:95:A7:49:5D:DB:4D:A4:77:AD:D6:61:D7:05:CB:ED:C0:4B:54:26:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/8a3f6990428009c54f94a17175be55d10f97b5e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.211.244.0/22
Signature Algorithm: sha256WithRSAEncryption
23:1b:f7:c1:13:66:8b:b7:8f:8e:09:5b:a8:17:0d:52:9a:d0:
51:3b:48:c3:32:2d:0f:19:92:3a:c2:07:80:33:8b:be:2d:af:
ff:a5:35:20:1f:d8:e7:34:a4:ed:3f:98:eb:68:ce:65:70:5c:
f2:ea:c3:28:58:8a:b1:a5:f8:54:b7:c0:5e:71:d3:b0:60:5e:
4a:f1:6d:f7:d9:0f:bd:a1:0b:9c:95:56:f0:50:d3:40:c3:e4:
df:a7:e8:67:21:3d:07:6b:c7:3e:15:1c:91:ac:36:d8:e9:ef:
09:56:8b:5c:09:ac:b0:36:a4:6b:9f:b0:93:1b:ee:fa:f0:6d:
b8:0a:5b:35:53:a7:2c:43:8b:9f:dc:f6:ae:56:e2:8a:17:f3:
c7:64:2f:d0:1d:5e:e9:f8:a4:ab:1b:3f:5a:18:0a:df:2e:36:
07:95:2b:13:07:0a:05:9b:89:4a:8e:3e:76:53:a5:e2:c4:a7:
41:5a:b3:d2:e6:1b:28:8b:66:b6:b9:05:60:3b:e1:ab:b0:35:
b9:f9:0c:11:2d:0e:27:be:1f:af:30:61:55:0b:c6:d5:52:ca:
48:3e:62:f2:c8:8c:f9:4b:76:6e:47:a2:63:b8:cb:fa:07:d6:
2b:1a:54:9e:84:55:55:52:5b:2a:d3:bb:b3:ec:14:0a:97:38:
45:44:88:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 16:12:00 2023 by rpki-client on console-fra.rpki-client.org