Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/767794b7ff889ee84682aa65c3605b91bd0127d8.roa
File: 767794b7ff889ee84682aa65c3605b91bd0127d8.roa (raw, json)
Hash identifier: gUMkR50f0efbdWiXHJSzEewVE8SWDAlNEe4swtzn4ng=
Subject key identifier: BB:70:90:C2:57:97:A1:99:EE:0B:AF:DB:10:E9:63:E9:8B:07:41:63
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 0ECA2A
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/767794b7ff889ee84682aa65c3605b91bd0127d8.roa
Signing time: Tue 11 May 2021 06:10:12 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Fri 24 Mar 2023 03:00:00 +0000
asID: 18678
IP address blocks: 190.90.10.0/24 maxlen: 24
190.90.101.0/24 maxlen: 24
190.90.13.0/24 maxlen: 24
190.90.14.0/24 maxlen: 24
190.90.15.0/24 maxlen: 24
190.90.151.0/24 maxlen: 24
190.90.152.0/24 maxlen: 24
190.90.16.0/24 maxlen: 24
190.90.192.0/24 maxlen: 24
190.90.193.0/24 maxlen: 24
190.90.202.0/24 maxlen: 24
190.90.204.0/24 maxlen: 24
190.90.210.0/24 maxlen: 24
190.90.221.0/24 maxlen: 24
190.90.222.0/24 maxlen: 24
190.90.223.0/24 maxlen: 24
190.90.242.0/24 maxlen: 24
190.90.38.0/24 maxlen: 24
190.90.68.0/24 maxlen: 24
190.90.7.0/24 maxlen: 24
190.90.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 969258 (0xeca2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2023 GMT
Subject: CN=767794b7ff889ee84682aa65c3605b91bd0127d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6c:ae:7b:9c:ec:20:6d:18:13:00:7d:5e:09:
0b:a4:3e:fc:be:18:c5:9c:51:31:51:d4:24:42:df:
23:ec:88:47:e3:25:85:bb:d4:f1:1c:62:82:a4:b6:
c1:0e:de:79:43:af:55:21:d0:be:9d:4d:eb:10:e4:
84:59:96:11:e4:be:cc:47:ae:e1:14:37:07:65:c8:
1d:a7:ad:8d:11:b8:62:3f:ad:08:a3:89:6f:e7:49:
eb:52:2e:60:f4:5c:e1:76:26:20:d6:2b:ff:42:ae:
8e:51:dd:08:dc:65:c8:cd:fe:8a:f7:d2:2e:a6:c2:
9d:92:d8:d7:7f:d7:ea:a9:84:53:1a:23:2a:25:ce:
5d:5a:c9:05:a0:ce:37:ae:90:f0:c6:d5:d9:af:e9:
3a:38:a4:b7:ea:8f:7a:54:9a:02:b5:55:7c:b8:73:
5f:9e:f2:76:fc:10:db:a8:4a:14:02:3b:17:59:c3:
7a:ee:58:53:11:79:0e:27:94:37:5b:00:24:73:1c:
6c:b4:28:7a:d2:4f:61:17:bd:db:1f:2c:aa:35:06:
09:19:89:10:27:12:23:a6:38:a2:ec:53:31:e5:b7:
9d:8b:f8:95:5c:a0:a6:6a:41:1c:6c:dd:8c:d3:90:
a6:47:7d:3b:cb:fe:82:b3:76:16:ff:7b:45:81:8c:
49:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:70:90:C2:57:97:A1:99:EE:0B:AF:DB:10:E9:63:E9:8B:07:41:63
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/767794b7ff889ee84682aa65c3605b91bd0127d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.7.0/24
190.90.10.0/24
190.90.13.0-190.90.16.255
190.90.38.0/24
190.90.68.0/24
190.90.79.0/24
190.90.101.0/24
190.90.151.0-190.90.152.255
190.90.192.0/23
190.90.202.0/24
190.90.204.0/24
190.90.210.0/24
190.90.221.0-190.90.223.255
190.90.242.0/24
Signature Algorithm: sha256WithRSAEncryption
15:3e:5a:93:d3:02:99:b1:56:28:41:c7:c0:b7:1e:ee:f6:c4:
b9:b8:d7:1c:61:0f:f3:8e:5b:b0:c8:bd:5f:60:e4:7e:6a:d2:
4b:9f:b2:3b:65:32:e8:17:8f:48:7c:f0:f3:6c:9f:87:4c:c4:
d6:af:09:f6:41:18:75:18:af:99:41:c1:ff:e7:87:0f:9e:f6:
e3:57:f7:8f:f3:99:0c:f7:40:a8:18:a7:8c:be:8a:c2:62:ba:
55:86:a7:88:78:69:b2:47:96:77:4e:68:6b:07:7b:85:13:be:
70:52:e8:8f:78:e9:7e:3c:69:a6:19:d9:06:f3:69:26:e5:7a:
56:5e:95:9b:e9:f7:3e:6c:b7:55:5f:04:8c:0d:61:c5:85:6b:
fe:53:44:7b:42:23:32:5f:a1:19:80:73:97:9b:64:da:64:72:
03:a1:4f:9d:fd:2f:69:78:9e:61:bc:27:1c:ad:d6:86:70:a5:
df:4f:ab:40:f9:ac:24:8c:b3:7c:6b:8d:79:9b:44:10:05:c4:
a8:13:8c:cb:7d:10:28:ba:55:17:3d:9d:64:b6:00:61:0b:a1:
75:94:5d:77:bb:7e:fd:5c:bf:1e:80:96:59:ea:e7:84:ea:7d:
6e:b2:5f:f0:ce:c3:da:64:4e:eb:57:9f:72:ae:40:24:fc:19:
1e:a3:ed:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org