Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3a8f69965245cdb7f24fa6a9439630327cc28cc4.roa
File: 3a8f69965245cdb7f24fa6a9439630327cc28cc4.roa (raw, json)
Hash identifier: 314PCfzpPcCwfZJ03HJqpPu7IHbJYEQvHb9jXgjf1N0=
Subject key identifier: 21:33:B3:30:FC:E8:9B:9E:47:EF:19:D6:DB:E1:E7:62:CF:47:FF:9C
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 0D4A74
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3a8f69965245cdb7f24fa6a9439630327cc28cc4.roa
Signing time: Wed 24 Mar 2021 14:35:24 +0000
ROA not before: Wed 24 Mar 2021 14:35:22 +0000
ROA not after: Tue 24 Mar 2026 14:35:22 +0000
asID: 262195
IP address blocks: 190.90.11.0/24 maxlen: 24
190.90.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 871028 (0xd4a74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Mar 24 14:35:22 2021 GMT
Not After : Mar 24 14:35:22 2026 GMT
Subject: CN=3a8f69965245cdb7f24fa6a9439630327cc28cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:ca:fc:93:28:68:07:9d:43:c9:48:6a:51:
eb:c1:ed:d4:a7:02:37:a2:8e:30:e2:16:49:84:84:
c7:fc:14:65:30:5a:77:fe:42:90:60:46:0f:60:83:
5e:66:27:87:46:48:21:a4:ea:b2:f4:f0:a6:ae:91:
18:e6:0f:86:39:6d:c1:55:17:28:5d:65:30:bf:5d:
92:e8:46:7b:14:e8:31:03:86:70:fb:c5:43:72:d4:
35:e3:07:f0:37:fa:ac:55:d7:5d:62:34:01:ce:8f:
c0:a6:5c:13:bf:a4:8f:35:2f:1b:24:60:d0:bf:9e:
e7:42:28:46:e8:bf:92:35:46:91:9f:49:f6:44:08:
92:d8:48:b5:1f:4f:bd:b2:2a:f8:14:3b:a4:9c:d5:
e1:52:6f:e9:41:ad:ee:b8:45:73:09:f0:1e:3d:39:
f2:b3:82:95:47:71:56:94:4e:da:26:bf:25:da:ca:
57:b8:0a:a6:de:57:78:b1:c5:92:6d:5e:14:14:5b:
40:17:6c:c8:c1:b8:c3:15:1a:72:3b:ca:65:59:46:
44:a3:da:40:b7:4c:19:ac:64:af:67:ef:4b:fa:93:
b0:b3:a7:8d:c8:45:12:48:17:1f:75:04:4e:2f:b9:
8a:9a:c8:7d:5f:52:08:e1:b4:13:de:00:6f:e1:7c:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:33:B3:30:FC:E8:9B:9E:47:EF:19:D6:DB:E1:E7:62:CF:47:FF:9C
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3a8f69965245cdb7f24fa6a9439630327cc28cc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.11.0/24
190.90.120.0/24
Signature Algorithm: sha256WithRSAEncryption
04:39:0b:2e:57:b4:20:fb:4a:14:53:72:9b:7e:12:96:a5:d2:
63:80:2d:63:7f:7b:a4:da:4a:07:28:3d:77:42:e6:99:f3:65:
b4:cd:6e:d7:ef:4b:b9:64:e8:2e:f8:1d:1f:75:48:1a:12:4f:
83:76:bf:23:b0:93:64:22:09:4f:d7:ba:05:26:61:9e:41:c7:
c5:62:cb:33:4e:56:eb:4a:dc:b4:40:60:8a:0c:60:6d:3f:5a:
07:54:c2:a9:dc:97:ad:63:f8:8f:0f:6e:ac:0d:f0:41:a0:62:
6c:9a:d9:1d:5b:94:91:82:91:4a:43:17:87:36:e1:56:60:3b:
3f:6c:3b:a7:44:02:10:5f:ac:9c:71:5e:c1:fa:1d:66:f9:9b:
38:01:b2:84:2b:10:4d:82:ef:2a:e2:52:87:d8:58:99:35:38:
8a:93:46:db:35:57:31:9a:8a:ca:d7:2d:59:e0:ff:a8:81:13:
cb:6f:d8:80:74:7f:ce:f8:d6:e0:71:50:97:6f:fd:5f:d6:81:
3b:ac:c1:14:df:21:5d:d2:05:f8:21:f4:4b:46:e4:d7:40:72:
19:de:7e:2f:59:7d:36:ae:c7:29:f0:67:50:4c:66:b2:4f:7b:
92:5c:a5:de:69:2f:8f:13:b0:f6:45:e4:b1:bf:b9:45:bc:36:
26:6d:78:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org