Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/fcaa6e38a08a1584a3b3ae1bcfc8925f16b76d4c.roa
File: fcaa6e38a08a1584a3b3ae1bcfc8925f16b76d4c.roa (raw, json)
Hash identifier: F5mqBexXSpsSbaLq4YzVU+m7wyd8qh4oWakRdytAt84=
Subject key identifier: EC:DC:18:02:A1:20:B6:43:8A:04:EC:7D:8C:2E:87:0B:6E:8C:3A:0A
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 1FD7D3
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/fcaa6e38a08a1584a3b3ae1bcfc8925f16b76d4c.roa
Signing time: Thu 19 Jan 2023 11:31:44 +0000
ROA not before: Sat 20 Mar 2021 03:00:00 +0000
ROA not after: Fri 24 Mar 2023 03:00:00 +0000
asID: 18678
IP address blocks: 190.90.63.0/24 maxlen: 24
190.90.68.0/24 maxlen: 24
190.90.79.0/24 maxlen: 24
190.90.101.0/24 maxlen: 24
190.90.151.0/24 maxlen: 24
190.90.152.0/24 maxlen: 24
190.90.192.0/24 maxlen: 24
190.90.193.0/24 maxlen: 24
190.90.202.0/24 maxlen: 24
190.90.204.0/24 maxlen: 24
190.90.221.0/24 maxlen: 24
190.90.222.0/24 maxlen: 24
190.90.223.0/24 maxlen: 24
190.90.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2086867 (0x1fd7d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Mar 20 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2023 GMT
Subject: CN=fcaa6e38a08a1584a3b3ae1bcfc8925f16b76d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:82:b6:17:26:7c:6a:c0:6a:86:ba:3c:78:a2:
5a:88:3a:3d:f6:5b:c4:28:91:31:94:81:64:d6:d9:
31:3c:4c:68:dd:df:b6:83:d3:3b:0f:d2:6a:0a:ae:
dd:c7:d5:25:05:93:e6:9b:c9:ba:93:86:86:49:ed:
f8:ba:40:86:cc:2b:96:5d:df:b7:1a:2f:a7:e5:ee:
14:d8:fd:b8:76:04:66:b3:d4:88:ff:04:42:07:0a:
86:dc:9c:24:47:aa:62:f0:dd:85:75:b5:72:f4:97:
6e:61:a0:57:dd:67:58:45:69:66:6a:93:de:68:9a:
89:6a:cf:d6:b7:13:23:5f:d4:dd:c3:53:cc:2f:cc:
13:80:b3:d7:f2:db:8a:3d:dc:97:df:80:ee:1f:f4:
ec:05:06:1c:b6:f0:df:15:7e:79:ca:36:ff:47:e3:
85:1d:e3:9d:35:e1:db:e3:1d:c8:ce:b3:64:c4:31:
17:d3:3e:dc:b6:50:f0:8d:47:d7:b3:d5:a4:4c:95:
0a:7a:3c:4e:f1:06:79:21:5b:38:ba:2b:50:66:ba:
c6:08:9f:ee:34:36:64:70:d1:bc:e7:f6:72:2e:ff:
bd:0e:41:b8:5d:db:4b:9a:ea:62:04:30:9b:97:20:
cd:64:6a:49:4b:ee:7e:64:a4:f2:b7:66:30:46:62:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DC:18:02:A1:20:B6:43:8A:04:EC:7D:8C:2E:87:0B:6E:8C:3A:0A
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/fcaa6e38a08a1584a3b3ae1bcfc8925f16b76d4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.63.0/24
190.90.68.0/24
190.90.79.0/24
190.90.101.0/24
190.90.151.0-190.90.152.255
190.90.192.0/23
190.90.202.0/24
190.90.204.0/24
190.90.221.0-190.90.223.255
190.90.242.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b9:43:31:b0:3d:81:1a:8a:bb:ef:ab:08:19:90:93:7a:50:
bf:d2:c7:b9:5e:dd:cb:00:36:b9:bb:df:10:bd:b5:2b:0a:a1:
e4:ba:75:fd:7a:cb:10:2a:ec:4d:0a:9a:99:c2:57:4a:18:16:
11:b3:dc:ee:64:69:d5:22:34:2c:f3:6e:ae:96:70:b8:db:ed:
0a:af:64:ba:bd:e5:6e:a2:15:ac:a1:4b:04:d1:38:d6:db:80:
6f:46:58:9b:36:08:83:11:a6:05:47:58:3d:bc:7c:87:bb:ae:
d5:3f:f9:01:4a:e5:a7:d1:8f:99:e3:a0:11:e2:5c:4f:5c:65:
fc:8f:f2:40:4c:4d:fc:69:c3:8b:11:6c:76:f7:84:25:85:4b:
67:8f:ef:99:c1:18:e7:90:0f:d7:dd:87:87:87:ec:d0:5b:de:
be:e1:99:3c:53:27:99:cd:ab:1d:2b:dd:48:a0:5a:4c:02:91:
d8:ca:41:4e:1f:d0:ed:54:32:5b:bc:4d:d8:0f:60:60:9d:39:
be:dc:f5:b1:31:62:02:7a:22:9a:d2:18:41:64:53:bb:24:dd:
d4:23:9b:a3:6d:58:f1:6e:aa:eb:e3:84:d5:4d:51:04:3f:d9:
22:f6:9c:26:a8:ad:bc:5a:45:6f:9f:1c:24:18:5a:8a:7e:a6:
d4:91:dc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org