Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/08e3799c6f68a2bbd6e92aed7d7807407a501b0d.roa
File: 08e3799c6f68a2bbd6e92aed7d7807407a501b0d.roa (raw, json)
Hash identifier: oiUsCRgcXZW8bkSJp8rszqvUJ6humy29dbBJNNExtI4=
Subject key identifier: 19:CD:41:8B:5C:00:3C:C6:FB:82:B9:3A:4B:A7:CB:C7:36:9C:F9:27
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 1D8F69
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/08e3799c6f68a2bbd6e92aed7d7807407a501b0d.roa
Signing time: Thu 17 Nov 2022 00:23:15 +0000
ROA not before: Tue 23 Mar 2021 14:35:22 +0000
ROA not after: Tue 24 Mar 2026 14:35:22 +0000
asID: 264646
IP address blocks: 190.90.138.0/24 maxlen: 24
190.90.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1937257 (0x1d8f69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Mar 23 14:35:22 2021 GMT
Not After : Mar 24 14:35:22 2026 GMT
Subject: CN=08e3799c6f68a2bbd6e92aed7d7807407a501b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d3:95:9b:f7:c3:a2:7c:f0:1d:3f:72:92:f6:
df:ab:fa:45:80:74:50:28:d4:00:c2:77:5f:1a:e9:
39:2f:62:4b:b1:72:dd:26:59:37:75:6d:12:4f:dc:
90:fb:c6:76:2f:7c:48:5c:db:fe:5b:f9:5c:6d:94:
14:bf:90:46:c4:a2:fd:48:78:09:ab:e3:dc:0b:16:
06:e3:a5:f3:1d:20:a7:9d:02:09:74:04:d2:3d:be:
4c:ed:ee:d3:5d:57:b6:64:f5:c9:08:64:56:18:bc:
15:1f:84:54:d2:9d:23:d5:37:9f:40:3f:19:d7:c3:
02:2f:8c:7b:36:97:ac:af:7e:0c:33:a2:b1:02:c0:
88:f0:b2:9e:c8:6b:52:bd:52:16:8f:15:c4:f2:08:
96:1b:c2:21:04:83:9c:01:07:ae:35:30:c5:fc:58:
80:bd:c4:8b:06:79:ea:b5:cd:78:a1:31:5e:07:40:
a9:c7:82:d0:51:3e:b3:84:6d:93:47:21:1a:9c:ba:
94:45:ff:0d:70:05:01:73:e7:12:b1:6a:5d:38:64:
fb:b7:a4:ce:c3:70:32:18:f3:be:65:ec:dc:7e:92:
d2:f9:46:90:e9:66:85:ce:41:c2:e5:a8:38:42:7e:
f9:c9:93:90:6d:2a:59:53:91:14:07:c6:c3:fe:5c:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CD:41:8B:5C:00:3C:C6:FB:82:B9:3A:4B:A7:CB:C7:36:9C:F9:27
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/08e3799c6f68a2bbd6e92aed7d7807407a501b0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.138.0/24
190.90.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bc:c7:67:dd:59:c1:57:ce:0f:72:a5:57:df:20:f0:af:2b:
5a:ab:04:2b:bb:09:21:a7:f0:ed:5c:84:6e:4a:6b:b9:3a:ab:
39:4b:14:11:e5:bb:a3:7e:96:28:c1:0c:31:fb:4e:a9:e2:57:
f8:a6:e7:21:9d:ff:43:e7:65:9a:5a:0d:ea:b3:87:09:6e:24:
d9:51:70:55:68:e1:f4:5f:89:5e:ee:ff:1b:32:b0:f1:7c:a0:
1a:f7:6b:c2:1f:7a:db:16:5b:4d:bb:a2:3d:04:50:10:e8:f7:
5d:06:7e:46:38:13:d6:3b:27:24:6b:81:33:af:17:19:3a:1e:
c6:42:1c:63:87:16:63:90:eb:16:a2:fe:39:b4:53:88:f4:94:
69:31:69:b2:b3:46:c6:45:34:f8:21:78:ab:de:7d:da:0d:41:
6e:77:16:7c:0f:e5:70:dc:b8:bb:45:b5:9a:04:ad:ee:bf:13:
4f:11:cc:db:97:f6:eb:d8:27:4f:00:b9:8e:f2:ce:a8:28:d9:
ca:1a:38:93:45:b0:82:f6:09:6c:c5:f9:ba:f7:3f:17:ea:79:
8f:1d:91:b6:3e:f3:a6:55:02:9e:eb:70:bb:ed:a5:77:de:e9:
83:da:0e:05:e1:10:e9:48:e5:fd:7a:bf:a4:1f:7d:3a:13:ec:
1a:39:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org