Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/40f91bacd970025ca4ad0458c69f1a3d2701b0f5.roa
File: 40f91bacd970025ca4ad0458c69f1a3d2701b0f5.roa (raw, json)
Hash identifier: St5RVDnHn3pqzUuSf7Cd9FyfaAeIhvrjvkwndylQc9M=
Subject key identifier: 36:97:2D:84:9F:A6:AC:A1:C7:AB:04:DB:04:E8:66:F8:62:76:23:00
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 20C3AF
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/40f91bacd970025ca4ad0458c69f1a3d2701b0f5.roa
Signing time: Tue 24 Jan 2023 13:19:33 +0000
ROA not before: Mon 23 Jan 2023 13:19:21 +0000
ROA not after: Fri 24 Jan 2025 13:19:21 +0000
asID: 18678
IP address blocks: 179.1.85.0/24 maxlen: 24
190.90.0.0/23 maxlen: 23
190.90.3.0/24 maxlen: 24
190.90.4.0/23 maxlen: 24
190.90.6.0/24 maxlen: 24
190.90.8.0/23 maxlen: 24
190.90.18.0/24 maxlen: 24
190.90.29.0/24 maxlen: 24
190.90.64.0/24 maxlen: 24
190.90.130.0/24 maxlen: 24
190.90.212.0/23 maxlen: 24
190.90.215.0/24 maxlen: 24
190.90.234.0/24 maxlen: 24
190.90.240.0/24 maxlen: 24
190.90.243.0/24 maxlen: 24
190.90.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2147247 (0x20c3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Jan 23 13:19:21 2023 GMT
Not After : Jan 24 13:19:21 2025 GMT
Subject: CN=40f91bacd970025ca4ad0458c69f1a3d2701b0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cc:78:3c:fe:aa:41:79:60:4f:ef:5c:6e:34:
a6:10:2e:38:fe:9d:5d:7b:82:6b:5c:e9:9a:7d:ed:
16:db:96:0e:8e:ed:6e:fa:dc:25:4c:3f:4c:27:9e:
33:4a:64:28:76:0f:5d:79:54:5d:fe:02:72:f1:91:
4c:00:96:89:49:de:7d:fc:a2:5b:23:65:c1:a4:1b:
f9:24:cc:b3:0d:40:43:fc:37:40:f9:1a:74:3c:38:
a5:5e:42:e8:97:a9:5c:a4:0f:80:b3:bc:ad:91:0b:
04:d5:40:29:48:2f:fa:0b:91:c4:47:c8:d5:2c:71:
c5:4f:bf:1e:db:f4:75:cb:dd:65:b6:a8:37:69:ea:
e7:de:6f:22:46:d2:71:8b:58:b3:08:b5:de:dc:83:
64:8e:32:c7:e8:d2:d9:59:56:58:9b:70:18:26:21:
9f:e6:e2:6b:ca:aa:47:67:64:23:c9:6a:87:8b:30:
c7:6c:e9:c9:4b:43:a4:93:b6:20:74:ea:1d:09:a1:
fe:57:0c:01:21:aa:e0:10:28:73:26:cd:41:57:3c:
58:42:54:25:c2:d5:18:f9:45:33:35:be:b0:17:67:
1d:9d:40:47:08:51:c7:c4:9e:9b:32:1e:bf:5c:0d:
b0:34:71:11:41:82:a0:fa:b7:2d:00:17:eb:3b:dd:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:97:2D:84:9F:A6:AC:A1:C7:AB:04:DB:04:E8:66:F8:62:76:23:00
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/40f91bacd970025ca4ad0458c69f1a3d2701b0f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.1.85.0/24
190.90.0.0/23
190.90.3.0-190.90.6.255
190.90.8.0/23
190.90.18.0/24
190.90.29.0/24
190.90.64.0/24
190.90.130.0/24
190.90.212.0/23
190.90.215.0/24
190.90.234.0/24
190.90.240.0/24
190.90.243.0/24
190.90.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d2:b2:8c:00:67:65:53:42:4b:5b:d2:9f:d1:a8:eb:f4:aa:
66:5e:a7:9f:5c:bc:99:48:a5:a7:7d:08:e0:2c:e2:a2:e6:b9:
f4:aa:73:07:ca:de:d5:18:41:86:14:90:ab:a3:e0:d2:aa:75:
5c:63:d6:46:ed:35:a0:bc:6d:9d:b7:f2:1b:8b:63:1e:42:db:
e7:4a:88:8e:d5:5c:9e:1f:06:be:11:61:4d:23:91:08:5f:8c:
0e:01:1b:2d:68:42:55:e8:9a:e0:b3:2f:b4:78:03:1a:9c:a0:
43:83:f1:98:da:af:64:cb:d0:d6:cc:1c:d1:9c:a3:e3:22:0d:
a8:70:4e:b1:2d:22:b0:99:1d:68:f6:33:ba:67:21:f1:98:fa:
7f:3f:b1:72:bc:c3:b4:1a:97:11:a5:bd:29:eb:89:27:48:eb:
cf:f9:89:ec:67:f3:b3:40:95:db:8a:d8:b0:89:58:47:2e:c4:
45:53:ce:f9:41:98:26:e7:ac:f8:0b:34:34:c2:60:7f:8d:b8:
e8:4a:b4:51:30:e0:ab:8d:7b:ae:26:ea:90:ea:ad:be:d9:e0:
13:7b:8d:06:db:a2:79:58:53:43:f6:fe:1d:03:76:6f:a4:eb:
e4:3c:65:0a:01:2a:d7:73:1b:74:2d:2b:c6:fa:45:9f:a0:7c:
3a:2f:b9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org