Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231352e302f32342d3234203d3e203532333339.roa
File: 3139302e3130372e3231352e302f32342d3234203d3e203532333339.roa (raw, json)
Hash identifier: ctIGqEK0GUf022DgCOFdLUlNEWSOmIdg05fgNGSihEU=
Subject key identifier: C3:5E:0D:C6:DD:57:51:71:98:A2:AA:5F:F1:7D:E9:4D:FE:D2:74:E9
Certificate issuer: /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial: 17F9A7BBD087AA037A0B57303C2EFAEFABCCD300
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231352e302f32342d3234203d3e203532333339.roa
Signing time: Sun 07 Jul 2024 02:55:00 +0000
ROA not before: Sun 07 Jul 2024 02:50:00 +0000
ROA not after: Sun 06 Jul 2025 02:55:00 +0000
asID: 52339
IP address blocks: 190.107.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jul 2024 22:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:f9:a7:bb:d0:87:aa:03:7a:0b:57:30:3c:2e:fa:ef:ab:cc:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Validity
Not Before: Jul 7 02:50:00 2024 GMT
Not After : Jul 6 02:55:00 2025 GMT
Subject: CN=C35E0DC6DD57517198A2AA5FF17DE94DFED274E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:06:58:9c:17:3c:4a:32:32:26:1a:93:ad:
dd:1a:20:03:c1:89:82:3a:d7:77:cc:ba:96:53:3f:
2b:29:a9:d5:3c:a6:ec:bd:8e:14:00:ef:1b:89:5f:
5e:45:85:06:0b:d4:f2:ea:cf:ff:e6:18:1f:fb:28:
da:40:dd:b8:5f:38:83:20:24:c6:f7:f9:9b:c5:bc:
43:1e:36:11:d7:79:79:a9:c2:45:d8:cd:87:bd:44:
76:28:3e:df:a2:d6:7d:03:bf:c5:85:65:54:dc:52:
ad:3c:8b:a3:fe:1e:ae:46:d4:99:3b:bb:8f:65:8f:
55:9f:a2:39:d6:26:35:1e:77:44:5f:b0:30:45:d8:
04:f3:39:ba:fc:de:7e:99:24:43:9b:f6:ca:84:f6:
bf:d6:45:45:e3:3b:fc:f2:14:5f:9d:15:1e:7b:ae:
bd:87:64:dc:94:25:8b:03:f6:e7:fd:94:a7:c8:ec:
a9:9a:2f:21:2a:68:57:6a:f3:a8:01:1b:ec:85:c1:
a8:e1:53:4c:79:d3:31:be:58:6d:22:7c:af:78:19:
06:17:93:2a:67:0f:ec:77:82:53:dc:ae:14:2a:74:
fa:e6:c1:7a:15:e0:31:b1:d8:18:76:43:4a:04:87:
86:67:5d:21:b9:4c:78:79:32:99:0d:13:ea:ab:f2:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5E:0D:C6:DD:57:51:71:98:A2:AA:5F:F1:7D:E9:4D:FE:D2:74:E9
X509v3 Authority Key Identifier:
keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e3130372e3231352e302f32342d3234203d3e203532333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.107.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:66:f9:d2:38:41:25:75:5d:c8:ba:3c:85:98:ff:b4:2f:e0:
0b:9a:07:79:f3:1c:a1:c0:63:b4:4c:7b:42:1c:fa:a4:1d:02:
74:1b:f9:20:a1:e6:b4:eb:87:2d:72:00:b5:73:22:43:a4:b2:
33:cf:f9:5a:e5:7c:23:5e:4a:84:e2:94:d0:58:c3:cc:1d:b7:
26:17:90:f7:46:99:1a:07:4a:d8:6a:f4:ea:66:2b:67:93:59:
c9:75:14:a5:fc:d8:f7:84:50:42:b0:8e:9e:42:11:2f:d3:14:
2f:59:1d:d4:c3:5f:43:a7:ff:0f:c0:30:28:72:ae:4d:93:cd:
3d:47:0b:2c:ca:17:f0:31:c9:42:e0:74:38:0f:ec:d0:ed:f7:
73:5f:d8:22:6a:84:53:77:34:94:b4:a4:95:23:4d:28:a6:80:
68:3b:d1:de:e4:3c:c5:5f:37:ae:7c:cb:a8:91:b6:b3:c0:81:
69:b0:10:4c:b3:2d:8e:b3:fe:d7:49:74:13:09:ec:44:c7:44:
78:9d:7d:7e:05:ef:55:ad:4c:bd:9f:6d:35:09:51:a7:60:a7:
f9:db:f4:63:e5:6b:89:1f:bb:8e:26:87:ee:af:95:0b:c7:cd:
e0:19:4c:3a:b9:8c:b4:c7:f7:15:50:08:56:86:b8:42:9a:af:
80:4d:a2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 23:09:22 2024 by rpki-client on console-fra.rpki-client.org