Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131342e302f32342d3234203d3e203531323032.roa
File: 3139302e31332e3131342e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier: lUmVaSbQSgLDdfxP6Ps/dKaf/Qp2kOmtjzEGaHNhrLQ=
Subject key identifier: B7:71:93:3E:FB:44:41:C0:20:0F:38:7D:5D:6B:CF:CF:2A:B0:CC:26
Certificate issuer: /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial: 27385D3E3796EF16F83F98D6B191318DD08BDC8A
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131342e302f32342d3234203d3e203531323032.roa
Signing time: Mon 08 Jul 2024 00:20:00 +0000
ROA not before: Mon 08 Jul 2024 00:15:00 +0000
ROA not after: Mon 07 Jul 2025 00:20:00 +0000
asID: 51202
IP address blocks: 190.13.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:38:5d:3e:37:96:ef:16:f8:3f:98:d6:b1:91:31:8d:d0:8b:dc:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Validity
Not Before: Jul 8 00:15:00 2024 GMT
Not After : Jul 7 00:20:00 2025 GMT
Subject: CN=B771933EFB4441C0200F387D5D6BCFCF2AB0CC26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:99:14:9f:57:d3:31:98:6e:62:df:74:1a:
62:9e:00:0e:42:4b:40:48:32:f8:37:28:25:0a:91:
cf:72:4b:ee:6f:91:8e:b8:dc:08:b6:24:4e:7f:5c:
22:c3:a8:dd:72:f3:46:6b:0d:6f:a1:a5:a9:65:7c:
cf:49:20:f2:9f:26:97:6e:18:0b:69:07:0d:5a:6f:
c3:d4:7e:86:aa:b4:b3:b8:5d:8c:1b:7b:2f:ae:b3:
dc:bb:4d:65:73:e9:b5:39:9a:ba:aa:b6:fa:a7:3b:
e0:6c:68:c9:76:bc:c6:4b:a4:1c:bb:ff:5b:cb:6e:
44:df:69:5e:f6:96:94:20:fb:e1:d1:09:a6:72:3f:
66:98:2f:80:17:5e:7f:0d:3b:3f:4e:e1:a6:fc:ad:
a0:fc:40:ca:c5:64:a4:4b:a4:22:36:8b:9f:f0:72:
bb:d2:e7:22:e1:e1:e1:15:ce:68:33:d3:d4:1a:67:
82:90:2a:f1:a9:f9:2e:c3:0d:98:f4:d6:da:34:e9:
16:21:02:35:2f:c0:7c:e1:28:c1:12:17:be:36:0c:
73:46:31:96:86:41:8b:78:ec:a7:cd:f4:b0:7b:3a:
dc:5f:25:2b:49:d7:99:05:ea:2f:f9:af:ec:db:71:
17:38:cd:fe:9a:79:07:61:a7:17:82:73:6c:bc:d9:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:71:93:3E:FB:44:41:C0:20:0F:38:7D:5D:6B:CF:CF:2A:B0:CC:26
X509v3 Authority Key Identifier:
keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3139302e31332e3131342e302f32342d3234203d3e203531323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.13.114.0/24
Signature Algorithm: sha256WithRSAEncryption
30:61:46:67:29:a1:7b:44:17:aa:68:70:ed:8f:d2:aa:f9:35:
90:d8:ee:f2:f5:29:e7:df:84:3c:ac:4c:ae:6a:ff:13:67:b6:
41:a2:3e:8b:ec:41:a8:48:3d:7f:5c:b8:ef:1c:cb:0b:53:f7:
33:d1:d3:93:ac:21:d7:47:c1:7b:a6:82:83:68:f8:29:59:04:
68:98:28:7c:6e:91:66:23:3f:d9:f1:1c:1e:77:96:d8:12:66:
24:99:7b:8a:70:2e:45:87:40:1c:d1:25:13:44:83:97:be:53:
57:51:51:25:97:87:d9:14:50:e9:63:d9:d7:70:f8:a5:02:ac:
fe:2c:78:1e:18:7a:0a:2b:de:34:60:47:e0:46:26:00:42:44:
a1:24:43:b6:4f:a1:1a:e4:ee:e4:b4:04:bb:5f:44:d2:68:27:
b9:de:db:19:0a:42:80:02:2d:f5:58:70:5b:e3:0b:42:4c:66:
2d:bc:00:66:9d:da:bb:7e:4a:c8:6d:e3:27:c2:ea:4e:e6:78:
42:b6:e3:c9:f3:1d:dc:aa:79:52:b0:1a:9f:3a:fa:4d:72:26:
9f:98:d4:7e:e8:c5:32:c8:7a:0b:7d:b8:8a:8e:a0:a6:08:af:
34:eb:e7:d8:3a:f5:01:a7:03:e7:eb:5d:f0:a0:a8:07:c2:b5:
5c:fb:bf:0f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJzhdPjeW7xb4P5jWsZExjdCL3IowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDgwMDE1MDBaFw0yNTA3MDcwMDIwMDBaMDMxMTAvBgNV
BAMTKEI3NzE5MzNFRkI0NDQxQzAyMDBGMzg3RDVENkJDRkNGMkFCMENDMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8ZkUn1fTMZhuYt90GmKeAA5C
S0BIMvg3KCUKkc9yS+5vkY643Ai2JE5/XCLDqN1y80ZrDW+hpallfM9JIPKfJpdu
GAtpBw1ab8PUfoaqtLO4XYwbey+us9y7TWVz6bU5mrqqtvqnO+BsaMl2vMZLpBy7
/1vLbkTfaV72lpQg++HRCaZyP2aYL4AXXn8NOz9O4ab8raD8QMrFZKRLpCI2i5/w
crvS5yLh4eEVzmgz09QaZ4KQKvGp+S7DDZj01to06RYhAjUvwHzhKMESF742DHNG
MZaGQYt47KfN9LB7OtxfJStJ15kF6i/5r+zbcRc4zf6aeQdhpxeCc2y82erHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUt3GTPvtEQcAgDzh9XWvPzyqwzCYwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzkzMDJlMzEzMzJlMzEzMTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMTMyMzAzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL4NcjAN
BgkqhkiG9w0BAQsFAAOCAQEAMGFGZymhe0QXqmhw7Y/Sqvk1kNju8vUp59+EPKxM
rmr/E2e2QaI+i+xBqEg9f1y47xzLC1P3M9HTk6wh10fBe6aCg2j4KVkEaJgofG6R
ZiM/2fEcHneW2BJmJJl7inAuRYdAHNElE0SDl75TV1FRJZeH2RRQ6WPZ13D4pQKs
/ix4Hhh6CiveNGBH4EYmAEJEoSRDtk+hGuTu5LQEu19E0mgnud7bGQpCgAIt9Vhw
W+MLQkxmLbwAZp3au35KyG3jJ8LqTuZ4QrbjyfMd3Kp5UrAanzr6TXImn5jUfujF
Msh6C324io6gpgivNOvn2Dr1AacD5+td8KCoB8K1XPu/Dw==
-----END CERTIFICATE-----
Generated at Mon Jul 8 21:27:26 2024 by rpki-client on console-fra.rpki-client.org