Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230332e302f32342d3234203d3e20323731373733.roa
File: 3139302e31332e3230332e302f32342d3234203d3e20323731373733.roa (raw, json)
Hash identifier: ZxjEyLbHJS6aurGYgc7967Fa6iT+p/dXk1Utx2ST7po=
Subject key identifier: 4A:D7:49:81:63:58:EB:1C:C9:FB:E1:7F:08:BB:31:58:9C:4A:E9:85
Certificate issuer: /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial: 0C4262050C306D84AA29AD4ED42F7C44F4DE2F7D
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230332e302f32342d3234203d3e20323731373733.roa
Signing time: Tue 05 Mar 2024 17:41:17 +0000
ROA not before: Tue 05 Mar 2024 17:36:17 +0000
ROA not after: Tue 04 Mar 2025 17:41:17 +0000
asID: 271773
IP address blocks: 190.13.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 16:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:42:62:05:0c:30:6d:84:aa:29:ad:4e:d4:2f:7c:44:f4:de:2f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Validity
Not Before: Mar 5 17:36:17 2024 GMT
Not After : Mar 4 17:41:17 2025 GMT
Subject: CN=4AD749816358EB1CC9FBE17F08BB31589C4AE985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:ef:ff:84:f9:6a:ce:d1:06:74:3c:1b:01:
39:a9:45:b4:40:7c:ec:e4:94:71:52:53:8b:ec:02:
31:90:00:d9:a5:66:e6:48:38:c8:f5:36:f2:90:eb:
3f:4e:4c:79:45:3f:19:46:ea:40:04:0c:04:7b:c4:
85:cd:87:63:9a:29:61:1a:23:06:ab:93:3a:55:dc:
9d:db:31:d1:49:7c:86:47:39:90:e4:5d:c7:8f:f0:
76:9a:18:2e:9b:94:76:92:6d:78:0f:ff:97:84:87:
50:2e:b3:45:dc:a3:4f:96:d7:99:91:73:88:fb:11:
43:33:82:76:b3:8b:7f:84:9d:6a:a3:d2:41:f6:1c:
fa:5c:0a:af:4c:9b:44:36:19:90:6c:4d:18:7a:bf:
8f:bf:88:ee:ad:57:b8:68:68:af:46:78:57:8c:a5:
b8:c8:4d:22:af:a6:5c:6a:87:df:52:00:ac:90:fe:
88:e0:5f:74:1d:b1:ea:be:93:10:6c:4d:d9:43:60:
7e:96:52:cb:3b:dd:3f:ec:58:9a:70:f8:29:79:46:
96:20:a2:a7:58:9c:c7:2c:24:75:65:bc:14:6e:bf:
10:b2:a1:c7:cb:d5:d0:7e:07:8b:e8:45:67:71:51:
35:0a:e0:f9:21:be:53:f7:c8:7c:f1:7e:78:18:39:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D7:49:81:63:58:EB:1C:C9:FB:E1:7F:08:BB:31:58:9C:4A:E9:85
X509v3 Authority Key Identifier:
keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3230332e302f32342d3234203d3e20323731373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.13.203.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:77:1c:1c:47:84:f3:08:01:33:18:85:b9:39:4d:80:35:92:
61:ac:65:eb:10:0f:3c:a5:64:cf:f9:0b:fe:9a:99:a2:69:d9:
09:94:4f:5a:40:c9:6d:0b:7b:ba:f4:8c:bd:38:a0:2b:40:ee:
8f:57:4f:9b:17:87:23:e6:f4:74:9a:8e:5b:b0:de:0a:0f:78:
ba:fd:c4:a1:cc:87:34:3a:ef:60:d1:c3:14:83:cd:29:fc:23:
6a:75:3a:a4:3a:63:91:96:c3:6e:8c:92:c1:17:00:a5:63:b2:
ef:35:fe:d5:36:94:23:5e:91:a2:b0:45:8e:f3:70:11:25:17:
13:e3:69:97:4b:b4:c5:35:8a:61:c4:c6:d4:2d:e2:eb:65:ff:
62:8d:a9:30:95:50:b9:3d:16:9a:85:c1:dc:a1:11:08:64:3c:
78:b3:57:e9:53:0c:5f:87:db:df:1c:15:a1:d6:93:a7:61:84:
55:2d:fa:bc:8a:74:79:aa:c9:87:d1:dc:2e:d7:25:d5:79:3c:
b2:e7:b5:43:3d:9f:0e:b8:6c:0b:db:39:2a:4f:56:de:b3:38:
57:46:4e:12:85:e0:3a:f9:1e:c8:fd:fc:db:2d:1c:1d:85:94:
9f:ef:51:27:20:a7:12:9f:da:1b:7d:5b:6c:07:f1:16:93:00:
17:2b:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 20:12:23 2024 by rpki-client on console-ams.rpki-client.org