Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/e074bb9967d1c69a846907f62052e8706e36d118.roa
File: e074bb9967d1c69a846907f62052e8706e36d118.roa (raw, json)
Hash identifier: N5PfD78ALhY39BxdnCYC55p2LhkuWsC0StjipgUCm74=
Subject key identifier: 14:0E:A7:FC:EC:BF:BB:BF:F0:17:43:6C:24:12:5A:94:86:8F:A3:89
Certificate issuer: /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial: 21BF2F
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/e074bb9967d1c69a846907f62052e8706e36d118.roa
Signing time: Tue 04 Jul 2023 08:30:22 +0000
ROA not before: Mon 03 Jul 2023 08:30:22 +0000
ROA not after: Wed 02 Jul 2025 08:30:22 +0000
asID: 263173
IP address blocks: 190.54.112.0/23 maxlen: 24
190.208.8.0/24 maxlen: 24
2800:3b0:2000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2211631 (0x21bf2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Validity
Not Before: Jul 3 08:30:22 2023 GMT
Not After : Jul 2 08:30:22 2025 GMT
Subject: CN=e074bb9967d1c69a846907f62052e8706e36d118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:05:44:15:7e:eb:52:02:a7:8e:fa:71:9b:
d0:82:62:3b:64:e1:f2:0d:36:d2:2a:aa:35:c9:57:
76:c8:34:bc:c5:14:df:89:c7:43:be:c9:75:58:2b:
4b:0a:02:89:0a:5f:a4:b8:ea:da:f0:e9:c1:e8:d8:
17:09:92:87:08:75:c9:84:10:92:8a:5c:06:8c:1b:
d7:7c:d7:28:00:86:27:3f:54:74:76:12:3a:b4:20:
6c:20:8c:c0:8e:2c:81:0b:3b:bd:5c:b2:a6:b2:cf:
55:dd:3e:72:13:db:65:91:2b:f3:ad:9a:e0:ee:68:
6f:8a:a1:5b:ff:8d:26:0b:fd:1d:a3:0c:92:d3:1f:
d9:7c:6a:26:95:52:8a:43:f1:e1:13:d0:58:6f:80:
bf:be:c3:90:dc:9f:24:3d:27:78:83:37:cb:07:c7:
5b:ce:b1:57:bb:2a:d0:03:0c:0f:e2:e7:39:79:df:
12:c4:04:9e:42:52:3d:03:e2:b7:0b:27:19:c3:dd:
6d:0c:26:11:cb:4d:fc:c0:f0:b0:da:51:4e:f1:1b:
a6:39:91:94:dd:84:73:55:e0:a2:eb:3c:70:3f:8a:
f4:82:bb:df:dd:c3:a7:6a:6b:0a:57:cd:a8:c4:93:
17:2b:55:3f:2a:18:46:4a:8c:cc:e8:36:b3:fd:fc:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0E:A7:FC:EC:BF:BB:BF:F0:17:43:6C:24:12:5A:94:86:8F:A3:89
X509v3 Authority Key Identifier:
keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/e074bb9967d1c69a846907f62052e8706e36d118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.54.112.0/23
190.208.8.0/24
IPv6:
2800:3b0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
13:16:b6:12:34:9e:8b:d0:23:36:1c:35:58:41:63:e7:39:15:
05:26:51:6c:a3:4e:55:96:c4:92:26:13:d3:80:4e:5a:02:71:
50:5f:02:66:98:06:6b:38:f9:25:76:9b:a0:aa:e6:ae:1c:f6:
f8:28:c0:d5:df:3d:e6:c8:6d:3b:83:19:10:cb:b5:a7:f8:80:
2c:cc:30:57:ae:ba:89:a9:ac:09:4f:9a:bf:bf:8c:df:2b:46:
c0:d4:e5:02:d9:22:53:c0:2b:45:8d:36:fc:71:a7:af:0a:01:
de:55:83:43:83:af:36:a7:21:d0:f2:31:92:7b:8f:45:8a:37:
a1:42:4f:58:54:8e:7a:54:b5:b9:2e:f1:b4:c2:87:fc:1b:dd:
52:00:32:30:7e:72:f2:1b:73:17:f9:99:d1:f5:c5:29:d0:ad:
b9:51:70:a3:10:9b:2b:4e:18:21:83:50:a7:21:d4:ff:7a:8b:
bb:f8:d7:04:59:09:98:3a:2b:05:08:31:de:bc:44:6e:b1:f2:
27:58:d8:df:4d:31:bf:4f:2c:d9:01:75:79:8e:1b:a7:44:e8:
fe:c5:6e:53:3f:0c:78:b0:57:21:eb:d3:51:d4:30:2c:f8:37:
0f:a4:c2:08:e7:0a:74:ce:77:b0:5c:40:11:dd:4b:c0:fc:06:
dd:cc:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 19:55:09 2023 by rpki-client on console-fra.rpki-client.org