Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/cf5f0f99bce46d466bf80ffa4b072f0d65e91c7c.roa
File: cf5f0f99bce46d466bf80ffa4b072f0d65e91c7c.roa (raw, json)
Hash identifier: BFKCDt0KKIP2tkSNa3IlnkcfbOBKk1R6I4I84gXZW98=
Subject key identifier: 4B:3D:CF:07:58:FF:7A:7E:29:1C:1E:5E:2A:54:41:19:C4:04:F0:FA
Certificate issuer: /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial: 235645
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/cf5f0f99bce46d466bf80ffa4b072f0d65e91c7c.roa
Signing time: Wed 23 Aug 2023 18:47:31 +0000
ROA not before: Tue 22 Aug 2023 18:47:26 +0000
ROA not after: Sat 23 Aug 2025 18:47:26 +0000
asID: 16990
IP address blocks: 190.54.6.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 14:29:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315845 (0x235645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Validity
Not Before: Aug 22 18:47:26 2023 GMT
Not After : Aug 23 18:47:26 2025 GMT
Subject: CN=cf5f0f99bce46d466bf80ffa4b072f0d65e91c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1a:dc:6a:78:4a:5e:73:7f:d3:4a:f9:56:65:
6b:e1:ca:89:52:61:4c:65:5b:95:84:fa:e9:79:77:
14:bc:8b:e7:7a:6c:a8:68:35:77:65:58:0f:e7:3c:
c6:7d:37:7f:a5:cb:ef:21:d4:27:e9:ef:97:23:aa:
d0:a7:36:71:68:02:3c:5a:5c:3e:a5:00:5d:03:da:
ff:63:37:79:ee:2e:f8:20:bc:8a:98:d1:c1:a8:dd:
6d:89:fb:16:d1:3d:ec:42:d6:09:75:f2:a9:74:8d:
ac:8f:ea:07:ea:23:44:ab:e6:5a:88:6b:77:1e:70:
66:1b:b7:2e:dc:b6:f6:b3:51:99:4f:ad:f1:65:e9:
a2:9b:76:17:e6:6b:89:7e:c3:4a:a2:d2:03:19:4d:
54:19:19:ee:39:10:dd:f4:34:d0:b3:41:cc:0c:cd:
31:64:0d:50:8d:8b:02:f1:1c:fe:74:da:b1:ac:32:
eb:32:31:be:f1:41:f3:be:1d:23:3c:ff:8c:2c:74:
a3:62:ee:81:ca:0e:55:93:69:7c:76:db:39:1b:72:
03:fb:31:4b:45:ed:89:b4:64:78:d4:e6:e1:a0:a6:
6e:6e:8d:82:1e:84:b2:1c:17:f0:44:4e:15:3a:f7:
f2:ef:27:00:7d:40:ef:e5:61:11:d7:cf:c0:7e:c0:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3D:CF:07:58:FF:7A:7E:29:1C:1E:5E:2A:54:41:19:C4:04:F0:FA
X509v3 Authority Key Identifier:
keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/cf5f0f99bce46d466bf80ffa4b072f0d65e91c7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.54.6.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:67:12:41:fe:29:b5:b6:8e:40:9c:86:40:b6:ee:e7:ff:78:
28:49:09:5d:7a:f7:14:94:19:50:68:c4:15:ae:c7:fa:7c:dc:
b6:c7:d6:b1:4d:85:31:cd:c8:c2:da:a8:3c:03:ce:25:ef:c2:
b3:75:1d:d0:54:0a:13:d8:02:f9:ff:b6:83:a5:ff:ee:cf:99:
58:c5:c8:f1:cf:76:e8:dc:33:ab:21:f9:3e:44:a7:2c:50:55:
85:81:f6:84:16:e7:16:60:c7:4e:47:79:0b:b7:dc:0a:6f:9c:
e4:fe:71:02:d2:5e:5e:fa:cb:35:70:8f:fd:61:8b:fe:af:ee:
0f:bf:0f:a9:c9:6c:10:ae:93:f9:dc:62:65:6f:2b:96:be:98:
14:72:14:a8:57:3a:ea:15:d2:e0:02:7e:c1:b7:71:35:3c:a6:
aa:44:90:e7:9c:96:54:3c:ce:31:26:31:fd:7b:1a:07:b8:28:
5c:68:36:8b:1e:99:45:cb:6c:91:84:4e:7c:a8:eb:ee:b5:ab:
17:72:f1:22:4f:dc:e8:db:6a:b1:ec:c0:cc:ed:46:3b:90:cc:
47:78:29:bf:0e:20:18:26:6f:df:0f:91:ed:f5:b7:20:95:92:
d7:83:65:11:c1:f5:de:b4:91:eb:65:65:87:88:16:ff:5d:16:
37:39:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 19:44:54 2024 by rpki-client on console-ams.rpki-client.org