Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/3dbfeb51a44c8554e4c7096b4005d0a2484d1ec1.roa
File: 3dbfeb51a44c8554e4c7096b4005d0a2484d1ec1.roa (raw, json)
Hash identifier: maj06WiYNCwPMaMXRQdLpZo09o/YdunRVO6sM9rvWLg=
Subject key identifier: C1:C8:30:58:37:66:6D:68:FE:A8:4E:F6:1C:2F:BC:4E:3F:29:21:A2
Certificate issuer: /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial: 2AA34B
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/3dbfeb51a44c8554e4c7096b4005d0a2484d1ec1.roa
Signing time: Wed 14 Feb 2024 13:40:22 +0000
ROA not before: Wed 14 Feb 2024 13:39:34 +0000
ROA not after: Wed 14 Feb 2029 13:39:34 +0000
asID: 834
IP address blocks: 190.93.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 12:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2794315 (0x2aa34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Validity
Not Before: Feb 14 13:39:34 2024 GMT
Not After : Feb 14 13:39:34 2029 GMT
Subject: CN=3dbfeb51a44c8554e4c7096b4005d0a2484d1ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:26:12:3f:3c:09:2d:b6:af:71:8d:6f:2c:
0d:e3:f3:fe:aa:67:2d:dc:fa:da:3d:4f:be:e4:44:
6f:99:f9:ad:ac:dc:c6:f2:d5:d9:b2:18:9f:8f:0d:
80:8a:ac:7c:83:62:47:07:85:db:96:8f:62:fa:3c:
6d:21:19:56:85:23:fe:f9:29:00:39:21:c4:a8:56:
2f:1b:a0:92:80:ca:59:a6:96:07:dd:19:2d:1f:ae:
12:55:d2:e2:65:ab:d3:5f:f1:b5:a4:a3:ce:43:51:
b8:8a:30:ab:32:32:7d:08:fa:3d:61:c9:40:25:cf:
1a:e5:5b:72:a3:af:ee:59:d1:ec:00:68:fb:28:57:
99:cc:05:85:d3:69:a0:b5:67:61:28:c1:c6:00:9f:
41:6f:a9:76:e7:55:77:db:27:99:37:8d:37:8b:72:
df:47:a8:26:1b:6a:62:97:70:da:bd:85:c1:c7:f4:
7d:b7:7d:09:bc:fe:cc:9a:0b:9f:c2:ac:52:0f:2e:
8b:f3:a5:cb:ed:df:0d:27:ee:39:aa:ed:68:1f:2a:
b1:b1:25:91:ec:e4:e9:f0:82:2b:ee:cd:76:63:5b:
bb:cc:57:45:e4:73:fd:63:a1:78:1d:c5:2e:dd:99:
e6:6d:db:4d:44:d0:99:fe:b4:b6:ff:3d:15:79:ed:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C8:30:58:37:66:6D:68:FE:A8:4E:F6:1C:2F:BC:4E:3F:29:21:A2
X509v3 Authority Key Identifier:
keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/3dbfeb51a44c8554e4c7096b4005d0a2484d1ec1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.87.0/24
Signature Algorithm: sha256WithRSAEncryption
10:80:02:a9:51:53:b6:f2:08:6f:7b:7f:20:bd:59:e1:37:ca:
8c:d2:86:5e:12:06:83:47:53:11:9d:11:6e:b0:8a:97:f0:bd:
20:b7:a6:d5:f3:0a:26:c7:15:0f:02:e3:d9:dc:b7:8f:50:53:
56:ac:0d:ba:18:2f:93:43:c0:fb:36:04:59:59:5a:8a:f5:15:
7b:dd:11:a2:9a:ff:6e:41:0e:ca:8e:65:3c:14:0e:d1:eb:41:
60:86:88:d5:ba:dd:d7:2f:8c:b4:35:59:07:0d:65:e5:a8:17:
7a:cf:11:96:35:17:f9:ba:7e:8b:88:79:d8:a9:2c:c7:22:65:
56:f1:db:52:5d:53:a2:9c:4d:9e:68:aa:99:92:3f:3c:ef:62:
71:cd:08:a3:c1:d5:2b:48:1f:0a:ad:29:af:31:c6:f6:48:f3:
bd:6e:a7:05:9b:f0:bc:4f:b8:1e:ff:a3:af:06:58:63:b6:c0:
2c:97:ec:29:6f:e6:25:64:40:0f:5e:b0:d7:6e:af:ad:c2:44:
de:44:a0:45:df:67:c2:16:06:33:5d:db:1e:c2:48:c1:07:c3:
4d:bf:b3:26:99:78:48:b8:74:8e:77:75:e2:f8:78:4b:d1:4d:
31:f7:1c:15:c3:ca:f9:7a:07:b3:27:01:ab:e1:9c:66:c6:91:
65:ca:3e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 16:26:39 2024 by rpki-client on console-ams.rpki-client.org