Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/bd279312e620aa6fd6926d06939f1b95866a813b.roa
File: bd279312e620aa6fd6926d06939f1b95866a813b.roa (raw, json)
Hash identifier: qaRNK6gean1wOHddTUFe2RDl5WM3eUReWsTZ/4dSQd8=
Subject key identifier: 3F:8E:75:94:A8:D1:9B:CF:35:6C:D8:AE:22:C8:30:44:0C:D5:3E:7D
Certificate issuer: /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial: 20E4DC
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/bd279312e620aa6fd6926d06939f1b95866a813b.roa
Signing time: Wed 12 Apr 2023 20:29:53 +0000
ROA not before: Tue 23 Mar 2021 14:39:07 +0000
ROA not after: Tue 24 Mar 2026 14:39:07 +0000
asID: 22724
IP address blocks: 190.15.139.0/24 maxlen: 24
190.15.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155740 (0x20e4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
Validity
Not Before: Mar 23 14:39:07 2021 GMT
Not After : Mar 24 14:39:07 2026 GMT
Subject: CN=bd279312e620aa6fd6926d06939f1b95866a813b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0e:29:3b:99:fd:f1:95:49:7f:27:a8:ad:62:
08:e0:0a:4a:d0:63:2d:01:7d:44:a1:63:ce:bb:3f:
12:84:34:f1:3f:2e:2b:a8:8d:ca:77:d1:49:4b:51:
c9:c1:d3:9c:65:74:ac:7a:49:d5:ce:f4:cd:de:3c:
6a:11:29:e7:0d:d6:3d:5a:38:67:8d:2d:f7:95:0f:
a0:db:03:57:2b:ec:5d:d7:e6:8f:a2:96:cd:ed:7d:
a9:4b:0f:e1:44:d0:8b:83:1e:16:73:59:10:fb:8a:
53:90:6b:e8:86:4b:94:f3:0d:1d:9f:a5:49:59:64:
26:17:e8:a8:66:11:14:a7:e2:b2:fd:6b:de:d1:af:
6b:94:b6:22:26:57:69:96:9f:43:ac:34:6d:b6:65:
a5:9d:19:19:59:fa:31:89:3d:a4:24:7b:71:13:ec:
74:9e:0c:17:84:b5:c5:fc:e7:83:84:fd:07:6e:77:
4d:af:82:77:bb:b1:a3:38:4a:7f:ce:69:7c:61:a5:
82:81:6e:8c:91:04:91:a4:ff:e8:75:c6:75:7e:3c:
09:ac:fd:c9:77:57:2d:11:51:0f:d9:60:c6:65:04:
14:e8:4b:d9:4d:a6:24:2c:88:e1:f0:1b:91:da:38:
67:b1:30:75:8f:6a:01:2d:a6:cb:e7:82:61:3f:1a:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8E:75:94:A8:D1:9B:CF:35:6C:D8:AE:22:C8:30:44:0C:D5:3E:7D
X509v3 Authority Key Identifier:
keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/bd279312e620aa6fd6926d06939f1b95866a813b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.15.139.0-190.15.140.255
Signature Algorithm: sha256WithRSAEncryption
1d:39:4c:f0:b0:12:d8:04:99:7f:0b:a9:5d:38:ad:31:9d:ea:
e6:fc:22:d4:58:57:f5:dd:c9:07:dd:03:7a:9e:b3:59:05:f8:
81:a9:c4:a3:1f:83:b4:cd:5d:e7:3f:da:1c:6d:2d:0d:3c:0e:
84:66:fe:02:af:c9:81:40:73:3d:cf:e9:de:37:92:53:96:c4:
4d:14:e5:bc:f5:0a:64:65:10:4f:7d:06:15:95:e5:e3:84:bb:
90:32:46:2f:82:e7:7a:97:0c:71:05:f6:ab:81:92:3d:06:8b:
ae:89:ee:cc:18:2e:4f:0d:f1:2b:84:bc:bd:06:c4:57:02:b0:
bc:de:73:4a:b0:28:b5:05:8a:bc:25:fd:27:6b:a7:e5:8b:c6:
6e:c5:dd:be:44:1f:4e:c1:a4:60:63:c7:79:1b:94:01:b6:40:
ad:f4:e3:bf:7f:10:5a:e6:79:06:a8:73:67:51:47:71:a8:67:
3c:c2:42:d7:02:73:45:e4:50:92:1b:e5:d0:5e:58:5c:ff:05:
1d:0a:a6:a2:12:b6:cb:52:b5:ef:bd:fe:c2:06:11:f2:53:28:
b4:d7:be:9c:d0:0d:18:14:c7:ec:f9:42:47:5d:ac:a2:2d:17:
d0:96:8e:c8:a9:0e:ac:f5:f8:d0:25:93:30:82:9a:d6:0f:41:
c2:e2:e7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-ams.rpki-client.org