Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/a4e02bf6e2e586fdca721cfe5b5127c5f2b5a5bc.roa
File: a4e02bf6e2e586fdca721cfe5b5127c5f2b5a5bc.roa (raw, json)
Hash identifier: pNl63ENBwAbfRRYoKKx0PVWIz2xhNhC7JqjleSYuJRk=
Subject key identifier: 15:83:1D:78:D1:19:A1:C6:C7:22:B9:FD:34:96:55:89:81:CF:16:07
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 1B2EA2
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/a4e02bf6e2e586fdca721cfe5b5127c5f2b5a5bc.roa
Signing time: Mon 05 Sep 2022 20:47:21 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Fri 24 Mar 2023 03:00:00 +0000
asID: 18678
IP address blocks: 190.90.10.0/24 maxlen: 24
190.90.101.0/24 maxlen: 24
190.90.13.0/24 maxlen: 24
190.90.14.0/24 maxlen: 24
190.90.15.0/24 maxlen: 24
190.90.151.0/24 maxlen: 24
190.90.152.0/24 maxlen: 24
190.90.16.0/24 maxlen: 24
190.90.192.0/24 maxlen: 24
190.90.193.0/24 maxlen: 24
190.90.202.0/24 maxlen: 24
190.90.204.0/24 maxlen: 24
190.90.210.0/24 maxlen: 24
190.90.221.0/24 maxlen: 24
190.90.222.0/24 maxlen: 24
190.90.223.0/24 maxlen: 24
190.90.242.0/24 maxlen: 24
190.90.38.0/24 maxlen: 24
190.90.68.0/24 maxlen: 24
190.90.7.0/24 maxlen: 24
190.90.79.0/24 maxlen: 24
179.1.4.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1781410 (0x1b2ea2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2023 GMT
Subject: CN=a4e02bf6e2e586fdca721cfe5b5127c5f2b5a5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:c2:17:4d:90:9b:95:6d:83:44:5c:19:20:
47:ef:da:03:e1:1e:09:35:92:b0:5c:fa:e6:be:9b:
f0:b8:9d:2b:2e:2d:07:ce:7d:61:74:2e:2d:25:be:
1f:39:88:c8:5d:16:80:df:e7:78:5f:00:c8:94:b3:
57:79:fa:5b:23:ea:87:2d:f1:57:c7:68:05:50:53:
60:71:b3:e2:3e:20:ab:ff:ae:c2:1a:4e:75:56:be:
b3:f3:bf:98:32:b3:cd:a2:2b:c5:11:08:2a:51:ef:
ff:a7:97:65:a5:be:28:e7:ba:f2:7b:aa:50:04:41:
5e:ad:04:18:20:b6:ed:32:bb:94:ab:ea:e7:8e:12:
34:52:a2:b4:2a:31:7e:5c:93:90:8e:b4:c1:c3:47:
a2:c7:ab:b8:97:6e:d7:d9:70:d8:74:a6:d3:e4:95:
69:0d:8d:0c:04:ad:1e:bb:bf:84:bd:67:b8:ce:31:
29:ac:d2:7d:41:0d:15:12:58:63:f8:84:ef:91:ec:
b9:92:73:31:78:cc:eb:fd:dd:3b:af:1c:a2:55:c2:
70:81:b7:ee:bb:23:c5:e8:14:a5:37:f9:f1:9a:10:
30:a6:79:63:49:52:44:88:1f:b2:a3:e8:81:0e:95:
3f:26:78:bb:87:35:47:c9:24:81:fc:c2:92:38:0a:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:83:1D:78:D1:19:A1:C6:C7:22:B9:FD:34:96:55:89:81:CF:16:07
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/a4e02bf6e2e586fdca721cfe5b5127c5f2b5a5bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.1.4.0/23
190.90.7.0/24
190.90.10.0/24
190.90.13.0-190.90.16.255
190.90.38.0/24
190.90.68.0/24
190.90.79.0/24
190.90.101.0/24
190.90.151.0-190.90.152.255
190.90.192.0/23
190.90.202.0/24
190.90.204.0/24
190.90.210.0/24
190.90.221.0-190.90.223.255
190.90.242.0/24
Signature Algorithm: sha256WithRSAEncryption
14:40:f0:37:c7:66:ac:a4:17:1d:3c:58:ae:95:dd:46:b1:a5:
9d:a1:a7:6b:eb:12:71:22:fd:ac:0f:3e:27:ae:e6:f8:8b:58:
f6:30:7d:d8:74:1c:29:24:76:a9:bd:8c:cf:a6:f2:c7:51:15:
9d:7b:4b:20:d4:2e:0e:d0:72:e9:4a:21:16:b1:66:45:d1:87:
a9:82:1d:6c:a0:08:34:91:d2:91:1c:2a:de:34:cc:22:21:35:
f3:39:e1:26:e6:8b:a8:db:22:b4:2d:90:b3:e3:9d:3b:29:28:
e9:e3:5c:1d:ed:fe:1b:7c:94:2f:8b:91:e3:38:5a:f3:9d:ea:
f7:8e:f1:f9:1a:ba:84:bd:db:9d:78:a5:ad:a3:c7:48:bc:49:
2a:12:42:48:cd:b8:ab:72:1d:07:9f:1b:49:2c:eb:6c:db:d1:
4b:2d:53:10:52:19:b3:54:90:f0:80:01:df:a6:b9:d8:a2:58:
aa:64:18:00:c0:9c:01:12:41:25:5e:d1:c1:c1:55:8e:b7:30:
55:15:53:a6:a2:eb:b0:17:91:62:e9:69:e2:e2:fb:f1:e9:bf:
70:2d:d8:7e:01:67:af:c3:cf:dc:ed:a1:f9:5a:e7:28:ba:79:
f6:04:a0:93:a3:a6:3f:db:a5:bc:76:13:80:96:6a:81:7b:ba:
2b:72:0d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org