Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b704c16cc067d30478acc4b1e2671b95caac39c0.roa
File: b704c16cc067d30478acc4b1e2671b95caac39c0.roa (raw, json)
Hash identifier: mfNGPYiGwGqM94vgMMKxW+0Aiik/+gJChnRccC9MamU=
Subject key identifier: A4:83:6E:69:C8:1D:6D:08:5C:87:B2:C3:A5:2D:91:CA:5A:BD:E2:4E
Certificate issuer: /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial: 24FC86
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b704c16cc067d30478acc4b1e2671b95caac39c0.roa
Signing time: Wed 06 Sep 2023 19:12:26 +0000
ROA not before: Tue 05 Sep 2023 19:12:26 +0000
ROA not after: Sat 06 Sep 2025 19:12:26 +0000
asID: 834
IP address blocks: 190.93.73.0/24 maxlen: 24
190.93.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2423942 (0x24fc86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
Validity
Not Before: Sep 5 19:12:26 2023 GMT
Not After : Sep 6 19:12:26 2025 GMT
Subject: CN=b704c16cc067d30478acc4b1e2671b95caac39c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:95:6b:68:ef:2b:65:f0:76:31:5e:c7:3a:
ee:4b:a0:60:64:67:b8:66:87:b3:fb:45:7e:f2:b7:
5d:b5:09:be:62:a9:d2:b6:b3:d6:ea:54:42:0b:99:
e4:e2:2d:dd:0a:0f:21:8a:f9:c7:3b:0f:ae:99:ee:
37:76:9f:ca:9c:dd:bd:9d:3c:e0:5f:09:60:6a:c3:
a7:1d:69:83:4c:92:71:7a:4a:95:cb:c7:d5:85:cd:
23:ef:a7:93:9f:da:fc:52:d2:88:f2:8e:30:6e:da:
23:a8:b3:49:8a:aa:93:d4:12:4a:b7:a1:ac:da:4d:
b1:a4:f7:a0:4e:0f:54:37:c5:70:2e:bc:56:56:2e:
3a:73:c5:79:40:85:4f:53:28:8e:e0:77:9d:aa:6b:
a8:20:20:37:7d:4a:f7:ed:c5:58:30:75:9b:50:e4:
07:3d:aa:40:28:9a:d6:a5:0e:94:33:2f:da:5a:85:
9a:9f:8d:83:28:cb:7e:73:2f:97:e7:f7:7e:64:77:
f4:97:90:3a:4d:35:cb:75:15:4a:4f:d5:32:82:54:
cb:f6:f9:42:d8:c6:62:22:d4:ff:bc:23:7f:40:2c:
29:eb:f0:28:16:69:48:6e:fc:dd:ec:be:88:7d:c6:
40:45:2f:19:57:2d:49:66:2d:15:4f:ea:f7:59:7d:
e5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:83:6E:69:C8:1D:6D:08:5C:87:B2:C3:A5:2D:91:CA:5A:BD:E2:4E
X509v3 Authority Key Identifier:
keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/b704c16cc067d30478acc4b1e2671b95caac39c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.73.0-190.93.74.255
Signature Algorithm: sha256WithRSAEncryption
70:ee:db:51:ea:fb:55:2f:d7:02:1d:dd:6b:f0:cc:31:eb:c6:
23:b2:21:9b:35:1e:7a:6a:71:3e:a7:00:1d:f1:cf:c2:be:3c:
18:df:f4:98:33:fd:15:ab:5b:01:e9:75:c7:98:6f:6e:ed:96:
28:01:aa:21:a5:3b:2b:b0:72:ab:43:d9:40:45:f3:40:26:d5:
7e:e8:40:f2:4e:80:f2:21:9a:33:0c:a1:fd:36:bf:af:36:dc:
cc:2c:b5:f0:e9:36:71:67:23:b7:1e:f4:16:e9:8d:0c:a4:ff:
07:22:eb:bc:b1:3a:43:0d:00:39:66:1e:d8:71:c3:e4:fd:53:
1d:af:30:10:44:5b:2d:ed:83:5a:bd:4e:e4:e8:6c:ee:4d:6d:
8b:ba:11:17:6f:b9:07:8e:44:0e:e5:d6:e7:be:8c:5b:72:72:
01:a0:2d:27:5e:15:a0:fc:09:1d:e2:2e:cf:1e:d8:60:a5:74:
cc:65:5d:fd:82:fb:17:d8:33:39:83:23:99:16:3c:e8:b5:e0:
ce:bd:88:04:0b:d0:86:b1:42:3a:c9:d1:8b:5b:e9:49:6a:ad:
fc:f2:0f:9f:12:06:be:c2:6d:f9:85:04:88:a5:9d:0c:57:53:
32:da:bd:03:0c:b3:4f:68:26:fc:0f:13:16:38:1b:c4:01:0d:
9d:b5:a6:f1
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDJPyGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
ZDg1Mzc4NTI2NjIxZmJkNDk1NmVmYTEwNDc4ZjkxMmYwODA3ZGIwHhcNMjMwOTA1
MTkxMjI2WhcNMjUwOTA2MTkxMjI2WjAzMTEwLwYDVQQDEyhiNzA0YzE2Y2MwNjdk
MzA0NzhhY2M0YjFlMjY3MWI5NWNhYWMzOWMwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnsWVa2jvK2XwdjFexzruS6BgZGe4Zoez+0V+8rddtQm+YqnS
trPW6lRCC5nk4i3dCg8hivnHOw+ume43dp/KnN29nTzgXwlgasOnHWmDTJJxekqV
y8fVhc0j76eTn9r8UtKI8o4wbtojqLNJiqqT1BJKt6Gs2k2xpPegTg9UN8VwLrxW
Vi46c8V5QIVPUyiO4HedqmuoICA3fUr37cVYMHWbUOQHPapAKJrWpQ6UMy/aWoWa
n42DKMt+cy+X5/d+ZHf0l5A6TTXLdRVKT9UyglTL9vlC2MZiItT/vCN/QCwp6/Ao
FmlIbvzd7L6IfcZARS8ZVy1JZi0VT+r3WX3lIwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFKSDbmnIHW0IXIeyw6UtkcpaveJOMB8GA1UdIwQYMBaAFBjyWuz3sMhn/mxf
oWHl66ymOasXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTVkODUz
Nzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdkYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2L2I3MDRjMTZjYzA2N2QzMDQ3OGFjYzRiMWUyNjcxYjk1Y2FhYzM5YzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvZTVkODUzNzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdk
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAvl1JAwQAvl1KMA0GCSqGSIb3DQEBCwUAA4IBAQBw7ttR
6vtVL9cCHd1r8Mwx68YjsiGbNR56anE+pwAd8c/CvjwY3/SYM/0Vq1sB6XXHmG9u
7ZYoAaohpTsrsHKrQ9lARfNAJtV+6EDyToDyIZozDKH9Nr+vNtzMLLXw6TZxZyO3
HvQW6Y0MpP8HIuu8sTpDDQA5Zh7YccPk/VMdrzAQRFst7YNavU7k6GzuTW2LuhEX
b7kHjkQO5dbnvoxbcnIBoC0nXhWg/Akd4i7PHthgpXTMZV39gvsX2DM5gyOZFjzo
teDOvYgEC9CGsUI6ydGLW+lJaq388g+fEga+wm35hQSIpZ0MV1My2r0DDLNPaCb8
DxMWOBvEAQ2dtabx
-----END CERTIFICATE-----
Generated at Mon Sep 11 17:43:44 2023 by rpki-client on console-ams.rpki-client.org