Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0e8aff955587d4f89d08bad4a712f50fb7a76572.roa
File: 0e8aff955587d4f89d08bad4a712f50fb7a76572.roa (raw, json)
Hash identifier: YEFCyNK1FCzDswVJerPkNJKBScQPxlju+I8653/EYTg=
Subject key identifier: 4A:6A:58:CF:2C:22:F0:DC:F9:38:13:6C:BF:82:7A:63:1A:52:5B:0A
Certificate issuer: /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial: 2719DF
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0e8aff955587d4f89d08bad4a712f50fb7a76572.roa
Signing time: Tue 07 Nov 2023 18:26:17 +0000
ROA not before: Tue 07 Nov 2023 18:26:16 +0000
ROA not after: Fri 07 Nov 2025 18:26:16 +0000
asID: 834
IP address blocks: 190.93.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2562527 (0x2719df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
Validity
Not Before: Nov 7 18:26:16 2023 GMT
Not After : Nov 7 18:26:16 2025 GMT
Subject: CN=0e8aff955587d4f89d08bad4a712f50fb7a76572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:49:40:f8:82:75:f2:cd:c3:0c:5f:87:84:9e:
7d:3e:f0:b2:e8:ee:a6:81:ae:d8:4a:c8:36:5c:3b:
64:12:d6:0b:f2:56:f0:28:85:3b:9c:2f:be:8a:06:
2e:33:03:e1:c2:ed:46:22:f0:ac:e2:64:44:bc:a9:
1e:cb:b7:2f:4d:26:0b:29:cb:41:b2:e6:9a:16:0f:
91:9e:03:7b:7e:a0:82:ae:81:f5:79:7d:ee:eb:9c:
b0:f6:ce:43:a5:39:61:0b:9a:95:fa:6e:b5:de:af:
5b:d1:ca:77:58:3a:41:06:c4:95:e9:dc:a5:12:d5:
5c:3a:3c:38:f4:17:2d:76:9c:e1:dc:9b:7e:f7:e7:
63:63:54:59:12:76:af:fc:9c:87:91:ad:89:c5:d9:
29:87:17:74:5c:ee:3e:e3:fd:9f:4e:54:e4:56:a1:
e2:af:1f:e6:00:f6:42:e3:aa:e7:c9:0e:c0:0c:54:
b6:e0:eb:ed:5c:be:9c:28:13:18:7b:dc:98:77:92:
0c:bd:73:f3:62:96:c4:0f:8f:7a:c9:19:36:d5:09:
48:6b:22:b0:10:5b:32:b3:3a:ee:e9:f5:22:02:b0:
08:d2:74:c5:2e:97:f2:2d:2d:6f:28:1a:42:9b:ec:
ff:60:d8:6d:90:dc:02:ee:5b:cd:b6:19:c0:57:bc:
3a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:58:CF:2C:22:F0:DC:F9:38:13:6C:BF:82:7A:63:1A:52:5B:0A
X509v3 Authority Key Identifier:
keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/0e8aff955587d4f89d08bad4a712f50fb7a76572.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.64.0/24
Signature Algorithm: sha256WithRSAEncryption
75:0e:11:0c:c1:69:b2:b9:5a:51:d5:90:f7:09:6e:2f:3f:06:
d3:46:bd:1a:41:3b:24:34:46:e6:19:70:36:41:40:07:d8:2c:
db:30:06:b4:5e:b3:32:76:16:74:14:e2:7c:41:d2:6d:a6:89:
dc:43:bb:c1:10:14:91:c4:57:55:46:74:8f:03:a1:cc:ee:4a:
09:ae:86:61:c0:83:a9:71:01:34:f0:be:c2:7a:c7:4f:5e:17:
dc:45:c3:82:17:3d:9a:b7:e7:36:4f:82:fd:0d:31:8b:24:42:
e5:fc:c8:b4:51:43:07:a8:8b:f4:7a:0d:89:24:85:af:d1:8e:
e8:2f:44:c1:23:2f:e7:9e:17:d0:a9:a7:65:ed:c9:a9:f1:17:
92:64:9f:d0:1a:41:3a:9b:9a:c4:d0:46:30:ac:b0:50:8b:b8:
f0:06:e6:97:b1:23:d8:90:38:63:df:20:8c:16:52:16:79:c9:
48:ea:75:76:a3:7e:b6:69:0d:20:45:32:22:41:44:23:9a:c1:
ff:e4:6b:2c:e4:24:e4:24:29:08:8f:2d:13:c1:7f:77:06:db:
e8:c0:26:9c:7e:4e:1b:77:60:3f:2e:6f:62:ff:ad:c8:e3:fc:
17:64:03:54:f7:c2:39:f4:77:43:09:f6:b9:1d:64:02:d0:36:
90:bf:9b:dd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJxnfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
ZDg1Mzc4NTI2NjIxZmJkNDk1NmVmYTEwNDc4ZjkxMmYwODA3ZGIwHhcNMjMxMTA3
MTgyNjE2WhcNMjUxMTA3MTgyNjE2WjAzMTEwLwYDVQQDEygwZThhZmY5NTU1ODdk
NGY4OWQwOGJhZDRhNzEyZjUwZmI3YTc2NTcyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhElA+IJ18s3DDF+HhJ59PvCy6O6mga7YSsg2XDtkEtYL8lbw
KIU7nC++igYuMwPhwu1GIvCs4mREvKkey7cvTSYLKctBsuaaFg+RngN7fqCCroH1
eX3u65yw9s5DpTlhC5qV+m613q9b0cp3WDpBBsSV6dylEtVcOjw49Bctdpzh3Jt+
9+djY1RZEnav/JyHka2Jxdkphxd0XO4+4/2fTlTkVqHirx/mAPZC46rnyQ7ADFS2
4OvtXL6cKBMYe9yYd5IMvXPzYpbED496yRk21QlIayKwEFsyszru6fUiArAI0nTF
LpfyLS1vKBpCm+z/YNhtkNwC7lvNthnAV7w6cwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEpqWM8sIvDc+TgTbL+CemMaUlsKMB8GA1UdIwQYMBaAFBjyWuz3sMhn/mxf
oWHl66ymOasXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTVkODUz
Nzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdkYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzBlOGFmZjk1NTU4N2Q0Zjg5ZDA4YmFkNGE3MTJmNTBmYjdhNzY1NzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvZTVkODUzNzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdk
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dQDANBgkqhkiG9w0BAQsFAAOCAQEAdQ4RDMFpsrlaUdWQ
9wluLz8G00a9GkE7JDRG5hlwNkFAB9gs2zAGtF6zMnYWdBTifEHSbaaJ3EO7wRAU
kcRXVUZ0jwOhzO5KCa6GYcCDqXEBNPC+wnrHT14X3EXDghc9mrfnNk+C/Q0xiyRC
5fzItFFDB6iL9HoNiSSFr9GO6C9EwSMv554X0KmnZe3JqfEXkmSf0BpBOpuaxNBG
MKywUIu48Abml7Ej2JA4Y98gjBZSFnnJSOp1dqN+tmkNIEUyIkFEI5rB/+RrLOQk
5CQpCI8tE8F/dwbb6MAmnH5OG3dgPy5vYv+tyOP8F2QDVPfCOfR3Qwn2uR1kAtA2
kL+b3Q==
-----END CERTIFICATE-----
Generated at Wed Nov 8 15:11:48 2023 by rpki-client on console-ams.rpki-client.org