Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e32342e302f32312d3231203d3e2033383136.roa
File: 3139302e31332e32342e302f32312d3231203d3e2033383136.roa (raw, json)
Hash identifier: h4r/Wvc/VoMWtvdzWdi161PAiX99bPnQAn+rAaPGXK0=
Subject key identifier: C4:AF:F2:B7:A8:00:D3:31:93:69:D4:71:C0:B7:05:C5:2B:C5:7B:AB
Certificate issuer: /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial: 3D3641F8F671288D4D4AAC0D065CF1EE76B09E3F
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e32342e302f32312d3231203d3e2033383136.roa
Signing time: Wed 10 Jul 2024 14:55:00 +0000
ROA not before: Wed 10 Jul 2024 14:50:00 +0000
ROA not after: Wed 09 Jul 2025 14:55:00 +0000
asID: 3816
IP address blocks: 190.13.24.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 11 Jul 2024 15:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:36:41:f8:f6:71:28:8d:4d:4a:ac:0d:06:5c:f1:ee:76:b0:9e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Validity
Not Before: Jul 10 14:50:00 2024 GMT
Not After : Jul 9 14:55:00 2025 GMT
Subject: CN=C4AFF2B7A800D3319369D471C0B705C52BC57BAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:88:5d:bd:8e:a0:53:56:b7:21:5e:40:2a:f5:
2e:11:e8:4b:8d:3c:c4:c7:0e:67:db:4c:b2:64:2b:
47:f1:32:33:8f:8f:6e:fd:f8:4e:bf:f2:a3:af:5e:
dd:da:9e:6e:37:14:6b:ff:92:64:a8:54:dc:44:a0:
48:47:0e:0d:6d:09:0e:30:69:4a:42:e8:d5:8a:cb:
c9:43:28:32:ce:21:40:87:78:08:80:71:fb:fd:36:
11:5a:3c:62:25:be:9b:49:4f:e7:cf:81:37:5f:27:
fd:f9:6c:e6:ef:65:b2:c7:ef:69:b8:d5:e5:d4:ca:
a4:66:77:fc:01:a6:b5:7d:37:5b:05:86:7b:15:99:
91:9f:15:e3:a5:f9:a3:bc:7e:e4:7b:5d:ff:a9:2a:
36:96:48:7c:57:84:87:45:ce:5a:13:e1:3a:7d:9d:
ec:65:18:51:3b:2f:b1:a1:07:0b:aa:ac:52:42:f3:
a3:0b:a0:22:5f:2c:d7:fd:9a:77:05:fa:da:51:77:
80:55:60:67:37:16:00:cd:82:3b:77:65:5a:bd:8e:
a8:a4:27:ce:12:62:79:c1:b8:61:66:5b:7b:f9:bf:
cd:f2:26:3c:72:c3:d3:9e:26:7f:02:86:b9:93:51:
a8:50:45:d3:08:36:85:54:75:5c:ae:c9:3a:37:c4:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AF:F2:B7:A8:00:D3:31:93:69:D4:71:C0:B7:05:C5:2B:C5:7B:AB
X509v3 Authority Key Identifier:
keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e32342e302f32312d3231203d3e2033383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.13.24.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:29:b8:20:b0:5f:b8:df:df:5d:f0:8d:7d:b9:cd:4a:5c:dd:
57:3a:bf:10:79:ca:08:a9:4d:96:94:af:29:14:35:5a:46:0d:
9e:24:d8:af:e5:b9:67:3b:6d:bd:55:1c:46:ae:25:1f:5c:b3:
5b:1f:09:15:70:1f:84:cd:4d:8c:16:f1:0f:fb:29:7d:8e:ca:
f9:1c:6b:bc:1c:89:e4:51:21:91:13:8e:f9:81:bb:fd:05:3d:
7a:67:2f:46:09:0f:0c:f7:d8:ec:12:9e:a5:bf:6f:7a:10:3a:
78:a3:63:57:fa:ad:ca:ac:04:3a:c2:a3:a8:9e:28:49:26:14:
06:28:90:ad:a2:cc:71:13:8d:33:95:f0:d5:0d:70:3a:3d:f3:
c0:22:8e:8c:8b:65:07:af:bc:a2:c4:05:26:5a:11:16:29:a4:
54:a7:4c:5d:01:37:2d:08:c4:9c:fc:8b:37:02:f7:8f:8c:b6:
00:99:6d:c2:5a:9b:36:1c:50:80:ef:07:bc:3e:d0:a3:bc:46:
93:5a:b0:b9:6b:4d:11:d2:34:66:ae:89:b6:ad:d6:fb:3a:f8:
5c:3f:24:63:27:9e:d5:1b:72:03:3c:ed:68:fb:42:66:e3:20:
a0:0b:95:af:a4:d9:e1:fb:2c:c9:7d:c2:53:23:f7:f8:15:07:
26:2f:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 18:11:41 2024 by rpki-client on console-ams.rpki-client.org