Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ef402a4d4a6b23a003abdd1fd80e2afc74652be3.roa
File: ef402a4d4a6b23a003abdd1fd80e2afc74652be3.roa (raw, json)
Hash identifier: uU0FbpjUEXKT7ZVgbPQC9n5UXZ7K9czRozcAIiV84yw=
Subject key identifier: F5:9A:43:10:14:8C:07:45:AC:85:51:58:F4:31:26:B2:A9:D1:E2:6D
Certificate issuer: /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial: 2A83C3
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ef402a4d4a6b23a003abdd1fd80e2afc74652be3.roa
Signing time: Wed 14 Feb 2024 13:40:04 +0000
ROA not before: Wed 14 Feb 2024 13:39:34 +0000
ROA not after: Wed 14 Feb 2029 13:39:34 +0000
asID: 7029
IP address blocks: 190.93.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Mar 2024 20:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2786243 (0x2a83c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Validity
Not Before: Feb 14 13:39:34 2024 GMT
Not After : Feb 14 13:39:34 2029 GMT
Subject: CN=ef402a4d4a6b23a003abdd1fd80e2afc74652be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:51:df:24:fc:22:fe:45:0d:f6:a6:3a:ff:
68:b7:cd:0b:26:0a:cd:52:67:e9:fd:f5:08:71:1b:
06:56:89:3a:98:01:18:f3:63:16:4c:b1:0a:87:35:
d8:2f:78:a1:5e:d4:b0:1d:60:77:ca:e2:ea:f8:1e:
d8:94:d6:ba:e8:37:5b:2b:1a:e8:8d:c0:12:f5:e0:
a4:d5:66:56:f3:fc:01:c2:90:a6:4a:88:53:6e:94:
4e:9c:76:94:44:15:ff:96:df:3d:c5:22:89:b4:ce:
ec:af:4c:71:d2:0c:85:4b:0c:f9:de:6f:61:66:00:
78:56:4f:41:29:92:9d:41:ea:47:83:22:82:d6:f7:
09:8b:07:46:b3:40:66:e7:f3:c3:96:d0:4f:89:6c:
5e:e0:cb:f3:0d:6f:13:a3:68:b8:9c:bd:b6:50:76:
c4:a2:a7:b6:d4:6d:5b:4e:93:11:8f:14:c0:97:44:
22:d7:b1:e3:14:61:d7:09:75:cc:e7:5a:48:4f:f0:
51:2a:00:9a:1d:d8:76:f9:fa:4a:7d:20:cb:41:24:
ef:c0:ea:2f:82:1c:6b:ad:3f:a0:fd:0e:b1:2b:ce:
b5:52:b8:29:04:7e:66:b8:b4:c6:6f:f2:6b:a4:83:
0e:e4:17:81:11:de:ee:c4:0c:e0:aa:34:16:fa:5e:
c4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9A:43:10:14:8C:07:45:AC:85:51:58:F4:31:26:B2:A9:D1:E2:6D
X509v3 Authority Key Identifier:
keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/ef402a4d4a6b23a003abdd1fd80e2afc74652be3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.79.0/24
Signature Algorithm: sha256WithRSAEncryption
62:96:7d:dc:01:41:1a:0b:d1:6e:d7:77:30:68:ab:3b:05:9f:
2c:2d:d2:07:84:c7:a2:aa:fc:08:5c:53:69:8b:09:57:ff:e2:
ec:ec:b7:73:f1:92:e9:29:c8:8b:84:8d:9d:b6:0e:8c:0f:d9:
89:07:f1:a3:de:39:fe:c6:0c:c7:70:2d:4e:70:f9:8c:45:a0:
e5:0f:66:07:76:aa:bc:ae:e1:85:4a:c4:b7:45:b0:e3:a1:51:
71:a4:54:76:46:0f:67:d9:40:b7:81:15:28:01:73:3e:e8:c1:
33:b5:d0:25:bb:1f:90:07:96:a3:cf:06:81:c3:02:07:7e:16:
c2:f6:36:62:ba:35:94:c9:cd:1c:22:00:f0:00:9f:ad:17:1f:
e2:7b:f9:92:4c:aa:04:f6:bb:84:4b:08:53:55:19:67:c2:57:
24:7a:d7:a6:e5:41:7e:29:11:e4:ac:86:66:43:70:2d:f5:78:
83:f1:2b:57:42:dd:a6:26:97:9e:43:e8:cc:3a:d9:6f:2a:73:
a4:5b:f2:04:49:f2:81:b5:25:01:38:16:56:c7:45:d4:4b:75:
6c:37:5b:59:de:d2:0c:09:09:8a:d0:82:76:89:96:60:1a:e8:
bc:19:07:a9:c1:2d:07:e7:55:36:00:a0:a7:17:bf:f3:4b:f9:
b7:d5:90:e4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKoPDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
ZmI1Y2Q5OTNkMzQ4MjVkY2ExYWZjNGNhZGVhZjg0OTNkYmRiZGQwHhcNMjQwMjE0
MTMzOTM0WhcNMjkwMjE0MTMzOTM0WjAzMTEwLwYDVQQDEyhlZjQwMmE0ZDRhNmIy
M2EwMDNhYmRkMWZkODBlMmFmYzc0NjUyYmUzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzRhR3yT8Iv5FDfamOv9ot80LJgrNUmfp/fUIcRsGVok6mAEY
82MWTLEKhzXYL3ihXtSwHWB3yuLq+B7YlNa66DdbKxrojcAS9eCk1WZW8/wBwpCm
SohTbpROnHaURBX/lt89xSKJtM7sr0xx0gyFSwz53m9hZgB4Vk9BKZKdQepHgyKC
1vcJiwdGs0Bm5/PDltBPiWxe4MvzDW8To2i4nL22UHbEoqe21G1bTpMRjxTAl0Qi
17HjFGHXCXXM51pIT/BRKgCaHdh2+fpKfSDLQSTvwOovghxrrT+g/Q6xK861Urgp
BH5muLTGb/JrpIMO5BeBEd7uxAzgqjQW+l7EnQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPWaQxAUjAdFrIVRWPQxJrKp0eJtMB8GA1UdIwQYMBaAFPt84Eo2/gXQEbvk
w1q2h+jw4qG8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTlmYjVj
ZDk5M2QzNDgyNWRjYTFhZmM0Y2FkZWFmODQ5M2RiZGJkZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2L2VmNDAyYTRkNGE2YjIzYTAwM2FiZGQxZmQ4MGUyYWZjNzQ2NTJiZTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvYTlmYjVjZDk5M2QzNDgyNWRjYTFhZmM0Y2FkZWFmODQ5M2RiZGJk
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dTzANBgkqhkiG9w0BAQsFAAOCAQEAYpZ93AFBGgvRbtd3
MGirOwWfLC3SB4THoqr8CFxTaYsJV//i7Oy3c/GS6SnIi4SNnbYOjA/ZiQfxo945
/sYMx3AtTnD5jEWg5Q9mB3aqvK7hhUrEt0Ww46FRcaRUdkYPZ9lAt4EVKAFzPujB
M7XQJbsfkAeWo88GgcMCB34WwvY2Yro1lMnNHCIA8ACfrRcf4nv5kkyqBPa7hEsI
U1UZZ8JXJHrXpuVBfikR5KyGZkNwLfV4g/ErV0LdpiaXnkPozDrZbypzpFvyBEny
gbUlATgWVsdF1Et1bDdbWd7SDAkJitCCdomWYBrovBkHqcEtB+dVNgCgpxe/80v5
t9WQ5A==
-----END CERTIFICATE-----
Generated at Sat Mar 2 21:50:46 2024 by rpki-client on console-ams.rpki-client.org