Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/ff78b93e28363b7814cc57265b85c034a023485f.roa
File: ff78b93e28363b7814cc57265b85c034a023485f.roa (raw, json)
Hash identifier: iQ9LnlqbNI6GHnX/4P7LCpvDgOHdigPbU5UenIrc65E=
Subject key identifier: B0:CA:DC:DD:E5:1E:22:28:BA:4B:8C:70:34:C6:0C:CD:F0:DE:A4:43
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 201172
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/ff78b93e28363b7814cc57265b85c034a023485f.roa
Signing time: Fri 20 Jan 2023 01:39:50 +0000
ROA not before: Sun 21 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 262589
IP address blocks: 190.90.148.0/24 maxlen: 24
190.90.207.0/24 maxlen: 24
190.90.208.0/23 maxlen: 24
190.90.235.0/24 maxlen: 24
190.90.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2101618 (0x201172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Mar 21 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=ff78b93e28363b7814cc57265b85c034a023485f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:8b:cb:2a:58:c8:91:1f:29:08:79:69:52:
4b:3a:38:98:9a:1a:01:c7:4c:8a:2d:3f:7f:d4:42:
c3:29:41:b4:8b:6b:88:53:f5:f4:7d:07:21:f1:14:
a4:f2:eb:28:af:c0:32:bc:d9:e5:f2:5c:87:55:2a:
69:7b:fe:c4:4d:72:7a:3e:c4:27:93:88:10:89:56:
f2:b0:5a:09:5d:ea:89:c8:23:f9:5a:c9:ff:3c:6b:
6b:4f:25:0a:95:df:0e:fc:fd:ab:6c:82:8c:e9:f9:
fe:9d:f8:60:3e:b9:9d:07:e3:7b:37:be:05:64:75:
7b:1b:ab:a3:c8:35:27:c2:f6:a4:1c:91:8b:22:67:
3f:52:fe:95:f4:98:3d:65:80:12:4c:18:0e:70:a6:
50:a8:81:72:50:eb:b8:de:d4:c3:78:e0:01:7d:2a:
f0:61:50:eb:73:e2:41:40:8f:f3:61:04:09:e0:37:
fa:e6:90:7f:cb:53:df:33:f4:a4:98:bf:72:59:68:
3d:06:71:98:07:d0:dd:00:03:20:65:5d:f7:4c:3a:
71:45:5b:f8:1b:60:7e:f8:61:40:84:eb:3d:1c:50:
3b:e8:80:e3:8c:c0:fa:19:a5:0c:5d:53:27:b2:d4:
1d:e0:10:a4:e4:2d:47:6f:ce:64:04:5a:76:9d:fb:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CA:DC:DD:E5:1E:22:28:BA:4B:8C:70:34:C6:0C:CD:F0:DE:A4:43
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/ff78b93e28363b7814cc57265b85c034a023485f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.148.0/24
190.90.207.0-190.90.209.255
190.90.235.0/24
190.90.245.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5b:45:5c:b2:b8:8c:d7:5f:da:89:4e:6c:e7:a5:23:d5:69:
12:6e:c2:d0:c6:c7:cb:60:29:bf:6e:99:6c:10:ce:0b:bb:4b:
bf:b2:35:91:ff:ff:83:63:5c:39:a8:6a:86:df:30:4e:4d:d4:
38:09:b8:f1:d5:96:53:fc:38:5f:54:9c:a0:de:3d:fd:86:5b:
0a:ad:95:74:b1:e7:f7:54:57:91:fe:06:7f:3d:ad:d2:7d:86:
41:d9:d4:8d:15:76:ad:90:9f:21:bc:f8:c0:75:cb:cc:bc:ab:
88:08:67:31:71:79:d7:22:b3:a9:0e:88:82:e4:e9:93:3b:af:
72:0a:a1:76:1f:e1:31:b9:c9:5a:86:e9:45:40:c2:80:d7:e6:
ae:6c:4d:0c:3e:b2:f3:53:90:c7:62:bf:76:64:88:fd:6d:14:
5a:2a:e4:b2:ce:1d:2b:e7:a3:53:00:27:d1:d4:bc:1f:4a:19:
64:29:97:91:e7:1a:d3:04:ad:27:dc:e5:13:d4:a1:72:2f:1d:
4c:75:11:0c:fb:85:78:b4:22:9f:4e:e9:5c:a1:29:61:2f:a3:
ba:c6:63:ab:b8:cc:b0:5a:0b:15:ad:9b:40:9e:5c:f7:9f:97:
14:f2:84:28:58:fb:74:ec:74:cf:8c:97:53:f4:82:94:c5:23:
34:cb:2f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org