Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d1d9ffc91ab02a3c535d7b64b8aa17821d07cf9e.roa
File: d1d9ffc91ab02a3c535d7b64b8aa17821d07cf9e.roa (raw, json)
Hash identifier: Hnd1ocG263ijvGZPlRxCxZm+ZaV00L+NA4Z5qJgv0Mk=
Subject key identifier: 35:16:B9:56:AD:D2:B5:03:1E:5B:65:BF:28:36:13:24:BE:D6:4D:00
Certificate issuer: /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial: 2AA982
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d1d9ffc91ab02a3c535d7b64b8aa17821d07cf9e.roa
Signing time: Wed 14 Feb 2024 13:40:24 +0000
ROA not before: Wed 14 Feb 2024 13:39:34 +0000
ROA not after: Wed 14 Feb 2029 13:39:34 +0000
asID: 200113
IP address blocks: 190.93.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 14:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2795906 (0x2aa982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Validity
Not Before: Feb 14 13:39:34 2024 GMT
Not After : Feb 14 13:39:34 2029 GMT
Subject: CN=d1d9ffc91ab02a3c535d7b64b8aa17821d07cf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ed:be:70:b0:76:e6:ac:a6:0d:70:b5:b6:fa:
20:8c:22:00:c5:43:5f:31:0c:3d:4f:64:c7:26:00:
fb:89:74:a4:f0:c4:42:a0:0e:ab:fb:4c:9c:c2:bc:
11:1a:e9:db:7b:97:1a:36:f1:4a:90:22:7c:dd:e2:
98:2e:bf:3c:24:6b:06:f9:5a:5b:c8:e5:f5:dc:7d:
a9:51:4f:3f:82:7e:4f:78:f4:03:31:d4:b8:42:03:
7c:d4:e8:a2:91:38:fc:a9:b4:6a:42:37:77:d0:0c:
1d:93:41:c7:69:1a:a4:6c:01:35:68:3a:74:ec:3e:
cb:c8:36:8d:5c:79:13:2e:4d:06:8e:52:ba:d9:20:
d9:5e:23:c4:b7:4a:7a:7c:e7:49:16:c5:e8:9d:12:
32:db:87:b3:8b:1e:9e:d8:94:e0:7e:23:e8:01:9f:
b5:53:c0:61:0e:e7:e8:77:df:0e:d4:48:c6:90:47:
87:d1:81:30:16:9b:98:ad:98:c9:fc:bc:b8:d5:52:
9b:c2:7f:38:8a:1e:8f:b5:6a:63:2e:57:74:d6:e2:
f7:06:db:a0:1a:8e:e5:4f:1e:0c:5b:24:1d:6a:7a:
13:63:0c:7d:f3:6d:ef:f2:a6:54:46:47:35:95:15:
93:53:b2:ca:20:98:b1:80:dd:08:b5:70:18:5b:7c:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:B9:56:AD:D2:B5:03:1E:5B:65:BF:28:36:13:24:BE:D6:4D:00
X509v3 Authority Key Identifier:
keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d1d9ffc91ab02a3c535d7b64b8aa17821d07cf9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.78.0/24
Signature Algorithm: sha256WithRSAEncryption
21:1a:86:d2:55:11:4d:1c:da:aa:9c:f3:dd:e9:94:62:18:9e:
f2:26:3d:62:1e:c8:7e:37:38:51:5a:04:1b:41:32:b8:96:41:
19:da:5a:6d:11:52:14:29:3f:d2:17:e5:8f:b4:d0:46:34:95:
54:86:f2:4a:69:72:38:5a:a9:10:26:a2:e0:39:eb:9a:60:79:
f2:85:3c:d4:7e:d8:06:66:fe:d5:b6:fc:5b:09:a1:e4:4a:06:
bb:52:95:61:ca:f8:f3:96:87:20:7f:f7:97:65:4f:8d:eb:9d:
76:54:6d:b4:95:45:63:cb:a5:b1:e0:82:08:16:da:ae:00:91:
5a:49:2b:2a:6d:10:bc:fc:6f:60:21:91:0a:d3:d8:3a:79:4b:
48:b2:0e:9c:77:02:23:0a:82:32:eb:00:dc:aa:93:e4:54:f5:
60:40:fa:79:f6:27:b3:a9:6d:00:ea:31:a9:64:06:53:36:50:
d6:ef:02:dd:ac:2b:c8:27:6c:cd:ed:ba:8c:b1:20:f5:98:e9:
17:9b:4b:e4:a5:3f:7e:fb:22:27:b3:f1:a3:a8:a0:91:6b:f2:
e6:e3:11:43:5c:7a:f0:07:17:8c:8f:42:21:99:6d:59:c1:78:
82:1a:7b:06:21:0c:f0:c3:15:43:a0:61:05:e3:09:cd:79:f0:
ea:52:a2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 19:59:46 2024 by rpki-client on console-ams.rpki-client.org