Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/036a5eb3e1807c1770be3481c5144b90c65512c7.roa
File: 036a5eb3e1807c1770be3481c5144b90c65512c7.roa (raw, json)
Hash identifier: Fiv1CpPyCWmADtKgs+fKUnJLWiz6RFNVr7IFmRfS/l0=
Subject key identifier: 0F:CA:56:88:3D:F5:21:18:28:2D:49:7F:E9:4A:ED:87:99:4A:36:F1
Certificate issuer: /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial: 2A6EB4
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/036a5eb3e1807c1770be3481c5144b90c65512c7.roa
Signing time: Wed 14 Feb 2024 13:39:53 +0000
ROA not before: Wed 14 Feb 2024 13:39:34 +0000
ROA not after: Wed 14 Feb 2029 13:39:34 +0000
asID: 269070
IP address blocks: 190.93.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 11:55:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2780852 (0x2a6eb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Validity
Not Before: Feb 14 13:39:34 2024 GMT
Not After : Feb 14 13:39:34 2029 GMT
Subject: CN=036a5eb3e1807c1770be3481c5144b90c65512c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f1:3a:ec:4b:8f:9f:05:f1:a5:26:6e:2e:92:
d1:72:4f:73:ea:7f:e1:b9:5b:30:4e:cb:36:8b:55:
21:90:3e:47:cc:83:db:1a:3a:55:43:3d:66:52:ac:
ed:26:5a:62:21:a7:b9:b4:47:5e:16:cc:bc:22:1d:
af:ec:8f:f7:40:7e:38:06:67:f7:51:e6:17:bb:c5:
ff:42:45:60:85:3e:6c:b9:90:a6:86:db:d8:06:bf:
94:5a:97:86:c6:0b:07:1f:8a:0f:20:8c:85:7a:1b:
ea:ed:7e:78:ed:83:fc:8e:46:ad:d4:f3:b1:88:9a:
c8:ee:5c:0e:cb:ae:6e:fa:06:89:0e:12:d4:bf:71:
7b:6e:2b:3e:31:d2:4b:9d:88:6e:d3:a1:d6:94:50:
8f:8f:9d:2b:33:8d:66:ab:e4:ce:fa:13:af:d6:1c:
13:8c:2d:a0:79:10:c1:ee:5b:2c:13:8e:01:77:77:
ce:b6:7c:85:73:f6:64:42:0f:89:7b:72:05:3b:91:
92:c5:7f:25:e6:5b:78:45:87:7f:22:49:51:ea:75:
3c:43:de:a9:05:8c:ab:21:39:20:1e:9c:06:95:17:
29:40:39:13:79:2a:0f:01:30:e2:9d:a5:77:0e:47:
30:31:44:85:d1:d6:f7:27:ce:a1:e4:74:c1:52:48:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CA:56:88:3D:F5:21:18:28:2D:49:7F:E9:4A:ED:87:99:4A:36:F1
X509v3 Authority Key Identifier:
keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/036a5eb3e1807c1770be3481c5144b90c65512c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.67.0/24
Signature Algorithm: sha256WithRSAEncryption
37:9e:54:b2:d6:9e:f6:b6:a8:8f:fa:7f:f1:c0:95:ca:d7:8e:
28:71:f5:97:1d:6b:49:1d:b7:d1:54:6b:5b:de:20:71:80:6e:
79:dd:24:6b:fe:f8:0e:ae:74:d7:4d:97:a7:82:22:ce:ab:8b:
d2:1f:a9:97:83:90:38:43:60:b9:b4:50:c6:0b:fb:cf:8f:44:
af:2c:0a:b8:0e:6e:41:9e:29:1c:85:db:e5:1a:55:9d:66:9d:
05:4a:de:da:9d:e1:f7:45:55:e0:44:33:61:cf:f5:f7:5c:62:
97:0f:de:92:de:8d:31:9d:38:e3:dc:5d:55:cc:6a:4c:c7:35:
1d:91:22:0b:f6:02:5a:40:5e:a5:de:bf:b3:32:35:65:ec:74:
56:56:33:5c:dc:3c:44:6e:72:ce:f0:c7:07:aa:0a:ee:07:c0:
9a:f6:6d:b4:7b:6e:4c:c7:1c:83:58:d2:4e:36:cb:9c:15:46:
bf:e5:e6:44:3e:f4:62:84:68:5b:36:22:26:b6:0b:42:f5:6b:
cf:3c:09:de:29:79:a5:05:86:64:de:ef:5c:50:3f:89:7e:92:
e9:ac:0c:93:fa:33:82:31:5b:41:e3:72:bb:cf:e5:58:aa:f2:
f5:22:e7:48:48:55:3a:f4:c0:60:44:27:1f:77:16:cf:7f:b8:
78:6b:75:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 14:28:25 2024 by rpki-client on console-fra.rpki-client.org