Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e66469df8be412fcb6e5e25d90b4a2717806f60e.roa
File: e66469df8be412fcb6e5e25d90b4a2717806f60e.roa (raw, json)
Hash identifier: lW9rroGWjtnRa+7s4QUZJX4kyyUs+46R4WgXMOcdi7A=
Subject key identifier: 6D:97:68:09:42:DE:EF:A3:21:C5:A3:97:40:F5:42:5F:A7:CC:B6:A7
Certificate issuer: /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial: 2A0DB4
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e66469df8be412fcb6e5e25d90b4a2717806f60e.roa
Signing time: Fri 09 Feb 2024 12:05:10 +0000
ROA not before: Fri 09 Feb 2024 12:05:09 +0000
ROA not after: Mon 09 Feb 2026 12:05:09 +0000
asID: 834
IP address blocks: 190.93.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Feb 2024 21:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2756020 (0x2a0db4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
Validity
Not Before: Feb 9 12:05:09 2024 GMT
Not After : Feb 9 12:05:09 2026 GMT
Subject: CN=e66469df8be412fcb6e5e25d90b4a2717806f60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d3:e3:b9:a5:9e:45:09:63:a5:a1:f2:e2:ec:
26:6d:3b:68:14:28:ab:cc:66:ff:2c:c6:4d:3f:e0:
31:1c:ae:d3:45:d7:b2:0c:cb:6a:6a:47:60:da:56:
d0:27:9e:e3:2a:6c:32:87:3b:56:b1:c7:f0:ea:4f:
d0:1e:db:29:64:e2:ed:d9:e3:e0:6b:f3:c1:74:b7:
91:67:18:1f:fe:7e:1b:46:ba:32:a5:57:fe:65:0a:
3b:a8:bd:1e:8c:88:aa:dd:f1:df:41:2a:ff:6c:ff:
7a:a3:cc:52:5f:16:e3:aa:8f:51:f0:52:c9:19:94:
6c:c9:c5:af:1b:8d:7c:8e:bd:cb:17:63:8f:15:fe:
01:f7:76:73:60:82:1d:74:17:9b:f0:f1:2d:95:b4:
59:a9:c7:c5:d0:ad:5c:c5:34:c2:30:ba:46:d1:a0:
66:81:10:4a:02:7b:47:1e:3b:a8:ef:5d:2a:53:29:
02:65:b7:d8:8a:44:97:18:af:ac:49:03:86:3e:14:
60:74:8e:16:83:3e:a6:4e:5b:f5:35:f9:f5:ef:db:
33:69:75:3f:d8:4e:93:9c:c0:ce:0a:4f:4a:cb:2d:
e5:e9:8a:46:37:d3:54:9e:d8:7d:e3:04:3d:a5:ea:
d4:20:e4:0f:27:e7:52:18:a7:73:b8:b3:22:d9:2f:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:97:68:09:42:DE:EF:A3:21:C5:A3:97:40:F5:42:5F:A7:CC:B6:A7
X509v3 Authority Key Identifier:
keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e66469df8be412fcb6e5e25d90b4a2717806f60e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.78.0/24
Signature Algorithm: sha256WithRSAEncryption
00:61:ed:4d:9f:51:3f:a4:81:d2:f5:28:ef:5d:78:83:b5:09:
8f:04:ba:97:0c:22:fb:5e:5c:37:68:7b:cc:7f:5d:c4:c6:5d:
0b:43:7b:f6:d9:79:16:26:22:ae:b9:d4:36:6b:ff:d7:78:c0:
5a:6f:8f:d4:03:f4:de:01:d5:ce:82:26:ba:5f:7c:43:7e:b0:
f8:10:84:25:a8:af:eb:59:27:7b:18:c5:96:e2:54:90:96:2c:
37:69:0e:85:47:dd:e9:9c:92:47:96:36:94:2a:71:0e:07:4a:
54:41:4e:c1:3f:c9:ef:e5:bd:3d:06:69:da:c5:f1:21:af:f9:
f9:cd:51:5c:5d:92:82:9e:fe:53:bf:46:5c:34:54:a8:e5:dd:
34:3f:9d:7e:9b:e2:ce:38:77:2b:50:d4:ed:d7:e8:79:7a:29:
99:b8:2f:2c:74:8d:ae:15:fb:81:f0:61:bf:4a:a8:69:70:6f:
61:e0:0a:2b:56:3c:f6:2a:7d:10:4d:04:97:68:ff:aa:b2:00:
d0:00:ce:70:c6:80:2e:a7:e0:f1:3a:73:c0:a3:41:d6:fa:43:
9d:55:0b:2f:09:b0:17:82:05:af:ef:67:87:97:63:d4:1b:04:
e8:57:ec:dc:53:e9:27:59:2d:73:98:3e:7f:58:a0:55:22:eb:
f2:2f:ee:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 23:20:34 2024 by rpki-client on console-fra.rpki-client.org