Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1def5c3afd96269aa6bc6ec1066ac97db97d7b20.roa
File: 1def5c3afd96269aa6bc6ec1066ac97db97d7b20.roa (raw, json)
Hash identifier: 7/ABLtGHA3AWbsOnz4vkiQiyCdkCdlgFS8dEukLQ8q4=
Subject key identifier: C7:DA:32:43:D6:C5:48:BC:12:EB:9C:B9:D6:C6:2C:42:6A:47:25:10
Certificate issuer: /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial: 2A975E
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1def5c3afd96269aa6bc6ec1066ac97db97d7b20.roa
Signing time: Wed 14 Feb 2024 13:40:16 +0000
ROA not before: Wed 14 Feb 2024 13:39:34 +0000
ROA not after: Wed 14 Feb 2029 13:39:34 +0000
asID: 834
IP address blocks: 190.93.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 22:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2791262 (0x2a975e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Validity
Not Before: Feb 14 13:39:34 2024 GMT
Not After : Feb 14 13:39:34 2029 GMT
Subject: CN=1def5c3afd96269aa6bc6ec1066ac97db97d7b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:0e:2b:13:a5:0c:5b:b0:fa:ef:99:b1:23:
5c:82:64:fb:71:ac:90:0e:ac:4b:ea:3b:7c:c7:dc:
fe:50:82:45:9a:ea:a2:0d:71:20:8f:6f:be:ec:11:
f9:a6:6e:19:28:df:c2:8b:ad:26:83:49:80:5f:60:
d2:c3:62:fb:81:5f:62:79:02:dd:7a:57:ae:6d:f0:
3e:e3:60:70:fd:68:38:09:a5:b8:ca:18:be:2d:e8:
b1:b0:76:53:a9:f2:c3:1a:11:10:ba:54:b5:17:b1:
e5:31:99:d7:e6:28:bd:a4:2d:26:80:3d:69:78:e4:
16:eb:16:15:0f:e8:7e:7e:c6:99:d7:d5:80:8e:ff:
8e:95:a4:c2:bd:d6:f6:cd:f1:df:be:3a:ca:fa:4a:
52:91:2f:4a:af:ed:5e:5f:86:52:3b:c5:31:6b:70:
30:a1:2a:10:8e:e9:04:84:ec:5d:b8:25:0c:cd:a2:
bf:56:a9:5d:58:48:22:eb:89:9f:e3:93:e6:a7:48:
33:5f:1d:04:e4:10:01:98:f0:ad:7b:b0:ba:27:0b:
6d:58:91:98:47:b8:ad:ab:43:85:95:7e:a6:73:56:
ca:9b:4c:e8:2d:98:bf:03:64:4f:92:a6:f9:b5:22:
ba:48:5a:2a:d1:c5:d3:fd:f9:4b:63:55:5b:0a:4e:
8a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:32:43:D6:C5:48:BC:12:EB:9C:B9:D6:C6:2C:42:6A:47:25:10
X509v3 Authority Key Identifier:
keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/1def5c3afd96269aa6bc6ec1066ac97db97d7b20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.89.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9d:b5:6f:a9:70:b3:07:9a:c4:b9:6e:c6:fd:4a:2e:35:e8:
df:b6:9f:4c:06:b5:8c:64:be:70:59:5a:b8:94:31:ea:06:68:
43:ea:23:fa:0c:7e:70:d0:a7:ab:3f:72:bc:e4:60:2c:2b:bf:
35:d4:37:bd:a1:57:4a:57:65:45:66:23:a7:c1:3b:2d:ae:17:
f9:dc:5c:f3:a3:e8:fd:6c:b6:7e:3b:60:da:b9:fe:29:c1:46:
0b:3e:1f:eb:f8:46:dd:64:ce:22:cf:bb:a0:6c:61:24:93:50:
40:61:b1:66:d1:ee:cf:63:c6:41:32:2e:af:74:49:8a:3e:a2:
08:97:c7:67:c2:92:ad:b3:29:8c:94:9e:50:73:54:5b:40:ce:
f7:5f:fc:e3:bb:da:ac:5e:90:5f:a6:21:6d:35:c3:10:19:ba:
3c:06:7d:1f:7c:75:38:c5:f7:e3:02:c8:ea:64:db:b0:24:87:
a4:d9:f2:82:a6:57:62:c1:af:47:cf:18:ff:08:f2:8b:0a:aa:
73:e6:b9:56:e5:7b:84:e2:7f:52:a4:22:8c:b0:c9:31:1e:be:
3c:29:99:5f:c6:6b:64:a6:b4:06:bb:0f:6e:6b:fe:e7:7c:53:
96:18:75:03:9f:13:23:8e:39:48:78:ec:c5:ba:59:c5:80:e7:
bf:34:81:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 00:56:47 2024 by rpki-client on console-ams.rpki-client.org