Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/e8c2bd036591468b9d75c6cd5ff9433feffede11.roa
File: e8c2bd036591468b9d75c6cd5ff9433feffede11.roa (raw, json)
Hash identifier: IzEhBDqRCq6K3zQ8s5XnfBq3D82aJSeWNxIHa/7Ebt0=
Subject key identifier: 1A:35:CF:B1:81:9F:CD:D2:A3:95:44:B6:36:3C:82:77:51:3E:61:A3
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 20993D
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/e8c2bd036591468b9d75c6cd5ff9433feffede11.roa
Signing time: Sun 22 Jan 2023 22:28:34 +0000
ROA not before: Sun 21 Mar 2021 14:35:22 +0000
ROA not after: Tue 24 Mar 2026 14:35:22 +0000
asID: 27837
IP address blocks: 190.90.40.0/21 maxlen: 24
190.90.48.0/22 maxlen: 24
190.90.65.0/24 maxlen: 24
190.90.66.0/24 maxlen: 24
190.90.87.0/24 maxlen: 24
190.90.122.0/24 maxlen: 24
190.90.123.0/24 maxlen: 24
190.90.124.0/24 maxlen: 24
190.90.195.0/24 maxlen: 24
190.90.196.0/24 maxlen: 24
190.90.197.0/24 maxlen: 24
190.90.228.0/24 maxlen: 24
190.90.246.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136381 (0x20993d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Mar 21 14:35:22 2021 GMT
Not After : Mar 24 14:35:22 2026 GMT
Subject: CN=e8c2bd036591468b9d75c6cd5ff9433feffede11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:6f:92:fc:b4:57:b8:be:6a:6e:b6:81:71:
70:46:76:8a:89:76:3f:91:3e:81:02:c4:46:9c:1e:
52:ae:6a:70:87:cb:19:35:35:00:16:48:f3:83:b6:
02:f3:8b:07:6b:51:e3:71:71:b6:79:35:7a:99:3a:
0c:6a:5b:8a:db:54:86:79:a0:93:a6:56:4a:d6:6d:
5f:4a:5c:db:a1:f4:5c:38:43:e7:e5:2a:dd:b5:b4:
20:ae:eb:48:3a:af:29:0f:8f:72:47:64:c7:a1:12:
f6:c3:0d:30:56:7b:19:5c:4c:c8:84:dc:74:79:c4:
d8:c4:ec:8a:98:ed:a8:13:98:46:69:34:dc:ce:65:
2f:11:75:97:9c:64:c1:cf:f9:2c:db:40:05:47:ca:
18:78:32:b8:35:9a:bd:4c:00:10:e1:35:df:76:61:
82:9c:a0:8c:41:6b:b0:51:71:45:ea:79:1b:54:27:
b9:a9:66:0c:f7:b7:b0:3b:ed:df:a9:e6:39:fa:29:
07:9b:22:c7:3b:4f:72:6e:38:71:33:4b:98:15:a1:
49:8a:bd:a6:a4:9c:70:e1:83:15:26:f6:8e:75:b5:
7c:cf:f8:f2:9b:bf:00:77:32:58:93:1e:a0:cf:ab:
a4:b8:ca:c3:73:3a:ab:36:3a:ca:9a:80:51:e5:f7:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:35:CF:B1:81:9F:CD:D2:A3:95:44:B6:36:3C:82:77:51:3E:61:A3
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/e8c2bd036591468b9d75c6cd5ff9433feffede11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.40.0-190.90.51.255
190.90.65.0-190.90.66.255
190.90.87.0/24
190.90.122.0-190.90.124.255
190.90.195.0-190.90.197.255
190.90.228.0/24
190.90.246.0/23
Signature Algorithm: sha256WithRSAEncryption
22:38:10:2b:10:3a:c1:f1:b3:7e:9d:bf:b8:99:b2:07:3f:ad:
f0:b7:b3:b0:67:54:06:75:be:54:a8:38:2a:b7:51:11:19:72:
7d:4d:c5:a7:9a:c0:94:37:5a:af:44:cd:23:bb:24:c2:78:69:
bf:7c:06:ba:45:c8:30:8f:14:9f:c5:e7:86:92:01:b3:cb:30:
4b:45:ec:da:31:f1:a5:05:c4:e5:de:9e:8a:27:80:8d:d9:c6:
b1:22:a8:66:f7:59:4a:a8:6b:54:ec:e3:30:a6:65:f3:68:ce:
5f:ef:a6:47:26:0e:2b:4c:3d:aa:77:fc:32:22:fe:43:14:5e:
2e:bc:d2:16:77:02:6a:17:44:92:d6:62:11:63:f0:f7:0f:a5:
dd:a6:92:a5:be:bd:da:ff:6a:57:01:6c:3b:3d:f2:cd:13:81:
ab:1c:71:a4:89:2f:f0:a1:ea:ba:6f:cc:02:a4:99:a1:48:85:
6e:73:02:32:28:2b:90:0c:33:8c:d2:a2:9e:1a:2c:17:60:14:
b9:e6:b1:f8:ce:fa:c6:0d:94:a5:a9:74:4d:2d:51:8a:bb:2a:
92:6a:fc:9a:9c:c9:b6:2b:e8:e9:d8:5f:69:5e:7f:6a:55:6f:
05:9a:e7:c5:5e:5b:c1:7c:24:2c:03:e4:0a:66:f2:76:7c:c5:
df:c9:3f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org