Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/cf27b9e85001e512957901d3f8d3f9c149476f54.roa
File: cf27b9e85001e512957901d3f8d3f9c149476f54.roa (raw, json)
Hash identifier: WYOit3f8s+1zc3ESKUSNuqSx1YPb0uVKbUKK4CbCrNA=
Subject key identifier: 81:98:DA:51:41:1B:94:51:4D:A6:E8:23:99:BF:BA:DD:8A:EE:6F:EA
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 1FDF31
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/cf27b9e85001e512957901d3f8d3f9c149476f54.roa
Signing time: Thu 19 Jan 2023 11:32:56 +0000
ROA not before: Mon 22 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 262589
IP address blocks: 190.90.84.0/24 maxlen: 24
190.90.98.0/24 maxlen: 24
190.90.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088753 (0x1fdf31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Mar 22 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=cf27b9e85001e512957901d3f8d3f9c149476f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:be:f5:8d:c8:82:ed:68:59:23:2c:80:51:84:
2d:75:84:c1:87:ec:7c:ee:b3:af:5e:04:67:b4:a2:
23:8f:ee:d7:fd:09:91:af:2a:33:4d:c8:fe:cb:41:
96:05:ca:3d:2c:22:ea:d6:41:70:13:87:16:e9:d8:
8b:5f:d8:93:de:e4:82:51:fb:13:14:b8:23:ec:55:
e6:da:a6:95:fd:cb:8f:c7:72:56:b1:27:d9:b2:7a:
0a:e4:c4:c0:1b:a9:36:a1:4e:34:39:91:4a:37:97:
3d:11:5f:9c:b3:9e:7e:73:68:a6:75:a2:4a:92:bd:
b6:06:29:f2:5a:dd:8b:b9:dd:65:2c:1e:55:3c:f4:
b3:94:17:70:29:20:44:c0:bf:06:16:a3:6c:b5:f6:
89:40:00:b3:f6:8e:6a:e6:37:2d:05:e3:55:3b:47:
07:f3:60:fc:ea:b2:f9:1d:ef:0e:71:3e:72:c2:25:
52:c6:19:06:b0:fb:b7:8b:1b:bb:03:28:2f:a4:3b:
40:4f:b4:65:60:41:b4:bc:b7:3b:83:cd:8b:49:d0:
91:0a:5d:98:10:2c:49:e7:d7:15:69:e4:62:6b:ac:
9f:69:9d:b2:97:e7:af:31:d3:82:63:d6:58:cc:d4:
87:cb:b6:e1:94:a0:24:bd:f5:79:41:36:df:59:12:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:98:DA:51:41:1B:94:51:4D:A6:E8:23:99:BF:BA:DD:8A:EE:6F:EA
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/cf27b9e85001e512957901d3f8d3f9c149476f54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.84.0/24
190.90.98.0/23
Signature Algorithm: sha256WithRSAEncryption
46:4b:53:80:b9:27:6a:82:8d:ea:a1:6d:9d:52:90:ac:9e:ba:
b5:01:39:cf:51:a7:89:a7:0b:cd:cd:db:2b:e6:d5:9f:76:af:
90:3c:07:d0:d4:5f:a2:65:15:d5:d6:26:06:e7:ab:f9:8c:ae:
ab:de:06:c9:f1:4d:c3:09:bc:88:87:07:d1:62:ee:87:aa:01:
4d:e6:fc:f2:37:e1:1a:2c:7a:a3:94:e3:14:21:a1:e3:bc:2f:
81:15:ec:d8:e4:82:41:e8:d1:09:04:14:d7:bc:3f:f9:76:25:
10:9a:42:5e:b5:c0:ec:9a:b8:b4:84:02:8a:7c:71:8f:54:82:
43:99:c0:17:b5:62:52:38:75:45:8d:7f:92:e0:ed:20:fa:e2:
00:9e:ed:c5:51:ec:f7:ae:8d:5c:5c:28:f9:45:5a:2d:f5:40:
fe:a3:97:39:7f:a1:ee:af:bb:57:cd:94:37:f1:d8:4c:e6:3c:
bf:15:58:cb:9c:75:a5:b5:82:30:c4:51:71:16:f3:d1:e5:c7:
63:d4:0f:25:c3:91:b8:ee:f0:b7:f0:ef:cf:4c:80:ec:51:22:
d3:7a:16:3f:59:c8:82:b8:b5:66:1b:de:3c:2e:e6:aa:00:b7:
b5:b6:03:bb:e0:49:d0:79:e7:7f:40:16:b8:af:b8:a6:94:96:
57:1b:f3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org