Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d80f7788b46343f5bedaf9440f4d66090f5beda2.roa
File: d80f7788b46343f5bedaf9440f4d66090f5beda2.roa (raw, json)
Hash identifier: rQPbbH94OXbZvX9R6EnwVOKj66yzNyRMejOa8l+/bok=
Subject key identifier: 47:E2:83:DA:63:96:A0:79:EA:CD:25:A1:53:26:07:D6:36:72:54:DD
Certificate issuer: /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial: 270C2A
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d80f7788b46343f5bedaf9440f4d66090f5beda2.roa
Signing time: Mon 06 Nov 2023 17:55:33 +0000
ROA not before: Mon 06 Nov 2023 17:55:33 +0000
ROA not after: Thu 06 Nov 2025 17:55:33 +0000
asID: 834
IP address blocks: 190.93.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2559018 (0x270c2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
Validity
Not Before: Nov 6 17:55:33 2023 GMT
Not After : Nov 6 17:55:33 2025 GMT
Subject: CN=d80f7788b46343f5bedaf9440f4d66090f5beda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:5a:a4:f8:0c:be:80:00:36:dc:c6:bd:34:
3a:bb:61:7e:8b:08:31:8c:0c:8e:1a:5b:23:a2:9b:
dc:7c:73:cb:39:a3:1a:fa:6e:21:85:5a:77:ee:9b:
ee:63:6c:5f:d5:69:f5:28:0a:a1:c5:77:19:0d:88:
ec:9d:78:1a:2f:9e:ef:83:ca:26:98:0f:93:8b:91:
86:c4:51:7a:19:82:92:bf:d2:cc:87:88:ce:c8:49:
36:be:2d:76:c6:21:b4:fb:83:96:d5:59:8a:82:6c:
07:0f:a4:cf:79:11:c0:4e:03:8e:bd:0e:d8:c5:51:
f2:77:c3:78:d7:16:f1:0a:1f:65:02:f2:97:3a:19:
52:18:04:72:db:cb:2b:76:26:fe:43:35:2f:92:53:
e2:67:0b:31:f9:57:74:15:d9:0c:8f:8b:10:0d:69:
87:1a:35:b9:c9:e4:48:ef:ba:6f:93:30:25:be:ce:
25:1c:f3:97:d9:eb:14:40:a3:0f:5c:6f:e7:66:42:
3e:82:8d:d9:df:ad:a1:ae:9a:ae:31:89:a4:fa:5f:
92:c5:e5:9f:1a:75:bd:0f:f9:36:92:e1:2d:d2:5b:
17:8a:7c:d3:80:fa:e5:16:14:a3:57:94:a8:40:f3:
3d:64:57:aa:49:fd:9b:13:86:5e:7d:d1:08:73:6b:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E2:83:DA:63:96:A0:79:EA:CD:25:A1:53:26:07:D6:36:72:54:DD
X509v3 Authority Key Identifier:
keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/d80f7788b46343f5bedaf9440f4d66090f5beda2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.67.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e3:57:42:23:0a:22:a2:b1:fd:0d:d4:82:35:c4:86:fb:15:
5f:cf:b4:3a:94:6a:c5:58:c5:3e:80:2c:a4:dd:1b:8e:12:2a:
2b:80:b2:a0:fd:42:c8:cb:20:51:ad:ec:db:b1:1a:9a:1f:6e:
5c:14:3e:62:5a:e8:66:94:e0:1d:80:e5:de:7b:99:03:30:40:
68:ad:a9:37:01:e8:81:90:b3:28:bf:82:cf:34:d9:32:a3:42:
2e:b9:e0:a8:ac:97:70:d4:4b:1a:ef:06:04:14:d6:1b:cc:35:
3f:d0:3e:e1:54:63:7a:d9:0a:f2:f4:7f:ed:0d:a1:56:78:56:
3e:48:58:0d:88:83:48:8e:61:76:25:bc:a2:7b:4f:4a:17:82:
fe:ce:97:16:f3:f1:b0:1e:18:a3:3a:04:f2:36:82:90:1a:ae:
eb:3a:b9:e9:ce:a4:e0:9f:16:09:f3:33:19:46:1c:6a:3e:f7:
1d:89:61:ab:6d:83:5f:81:f2:6d:2a:08:27:fb:5c:e9:83:9d:
89:02:43:9c:61:7e:e4:58:41:a6:b0:46:56:57:66:98:6e:76:
09:57:3a:31:2b:62:34:90:ce:d8:3e:54:51:57:17:40:3a:37:
43:24:b4:62:f4:27:ba:d0:bc:13:b0:52:3f:db:4e:43:81:32:
e5:25:ef:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 19:38:18 2023 by rpki-client on console-ams.rpki-client.org