Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/e9c1105fa6dd8a7d3d9af78c07a3eea88cc118f8.roa
File: e9c1105fa6dd8a7d3d9af78c07a3eea88cc118f8.roa (raw, json)
Hash identifier: T7VpKhOgtlAGTopM6LDGpL7NvJcxin3XoN0OUiUcRHk=
Subject key identifier: 2F:8F:59:1E:4A:E8:A5:87:E8:4C:57:EC:04:6A:B8:E4:B3:A7:F5:D4
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 1F956F
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/e9c1105fa6dd8a7d3d9af78c07a3eea88cc118f8.roa
Signing time: Thu 19 Jan 2023 10:03:52 +0000
ROA not before: Mon 22 Mar 2021 03:00:00 +0000
ROA not after: Fri 24 Mar 2023 03:00:00 +0000
asID: 18678
IP address blocks: 190.90.101.0/24 maxlen: 24
190.90.13.0/24 maxlen: 24
190.90.14.0/24 maxlen: 24
190.90.15.0/24 maxlen: 24
190.90.151.0/24 maxlen: 24
190.90.152.0/24 maxlen: 24
190.90.16.0/24 maxlen: 24
190.90.192.0/24 maxlen: 24
190.90.193.0/24 maxlen: 24
190.90.202.0/24 maxlen: 24
190.90.204.0/24 maxlen: 24
190.90.221.0/24 maxlen: 24
190.90.222.0/24 maxlen: 24
190.90.223.0/24 maxlen: 24
190.90.242.0/24 maxlen: 24
190.90.38.0/24 maxlen: 24
190.90.68.0/24 maxlen: 24
190.90.7.0/24 maxlen: 24
190.90.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2069871 (0x1f956f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Mar 22 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2023 GMT
Subject: CN=e9c1105fa6dd8a7d3d9af78c07a3eea88cc118f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ef:d4:41:e0:46:8c:a5:2c:cc:c6:b0:82:d2:
3a:12:e9:b8:ff:bc:46:fb:00:ea:8e:80:0c:de:cb:
c3:78:b4:3f:dd:24:07:0a:f1:9f:32:9f:eb:6c:85:
5d:94:0c:07:b2:ef:22:e7:32:1f:83:eb:49:6e:a0:
a8:0f:2d:72:ae:ed:d7:28:e7:31:76:6a:85:75:3f:
70:f3:cc:e6:ee:9a:0b:44:94:82:18:3c:31:59:60:
b4:25:39:a1:62:5c:97:bb:4e:9f:1b:70:da:ca:97:
a5:3b:f3:e0:27:7f:ef:d4:2b:07:e3:16:98:d5:fb:
70:d1:9d:36:6f:59:38:2d:ea:8f:53:53:ee:b5:fe:
8d:11:69:68:be:8d:40:cc:94:c5:e9:91:9e:ec:b9:
2d:07:7d:89:94:29:c1:58:29:85:47:57:cc:ba:77:
fa:cd:0d:e5:f6:70:44:98:be:c2:b9:4f:57:3f:6e:
94:5a:3f:d5:5f:db:66:5f:c5:1c:ec:0f:8e:b8:c6:
51:43:fc:9c:29:8e:e1:b2:ed:40:af:c8:04:df:d0:
2b:55:e0:28:15:f7:2e:20:0a:f2:f8:50:ad:9b:e9:
c3:9c:d7:34:06:99:fe:24:d6:d3:90:86:69:fe:14:
de:eb:3f:b3:41:87:38:3a:2a:0f:bc:7f:e5:85:1b:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8F:59:1E:4A:E8:A5:87:E8:4C:57:EC:04:6A:B8:E4:B3:A7:F5:D4
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/e9c1105fa6dd8a7d3d9af78c07a3eea88cc118f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.7.0/24
190.90.13.0-190.90.16.255
190.90.38.0/24
190.90.68.0/24
190.90.79.0/24
190.90.101.0/24
190.90.151.0-190.90.152.255
190.90.192.0/23
190.90.202.0/24
190.90.204.0/24
190.90.221.0-190.90.223.255
190.90.242.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d9:ff:8d:ce:97:0f:3a:a7:b6:f8:c9:c1:64:16:fb:8f:7a:
9c:19:c6:d6:c7:60:31:33:10:89:34:00:21:dd:c6:21:f6:d2:
87:e6:e5:b5:cf:2f:68:2d:33:a5:36:5d:74:15:ed:01:07:74:
34:9b:91:4b:e8:2d:92:e9:ff:f5:16:ef:a1:ff:09:67:ce:c2:
23:f9:5f:be:5b:33:5d:7c:f9:50:77:de:f6:14:ff:d2:12:a5:
83:5a:30:00:26:46:ff:05:ba:fd:6e:db:b9:7b:d6:2c:bd:91:
c4:37:78:de:b2:e5:5e:c3:9e:44:9f:0b:e1:ad:62:e1:75:59:
c2:dd:9a:72:38:dc:06:8e:55:ce:70:c6:d9:18:90:d0:2c:8e:
24:c2:16:a7:bd:fa:bc:8e:09:fc:2f:a6:3d:d1:ec:93:56:d6:
02:98:f2:15:d2:57:91:70:77:33:fa:e1:df:30:83:71:41:62:
53:c4:5c:ce:a3:e7:47:31:ca:13:e6:b5:a6:1b:6c:9b:d3:7b:
ae:2c:70:4e:f2:43:6c:f1:7d:f2:4d:6c:0a:83:e1:cf:25:49:
b7:d8:6c:97:72:88:30:07:ca:2e:9a:33:03:98:96:94:0f:d8:
50:3e:77:83:2f:2c:94:87:8b:41:61:7a:bf:b3:25:97:fa:60:
5a:a5:03:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org