Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/f9b2e750f6634137358a20101a89b148aa9dad5b.roa
File: f9b2e750f6634137358a20101a89b148aa9dad5b.roa (raw, json)
Hash identifier: Z2FeNwqX2WYjMMW8tq3RVfHuVK+6BtHRVpGghiDTqCE=
Subject key identifier: 90:A8:89:E9:E7:80:0E:4C:D5:8E:4F:3A:50:BF:57:BB:3A:38:A1:38
Certificate issuer: /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial: 287AC4
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/f9b2e750f6634137358a20101a89b148aa9dad5b.roa
Signing time: Thu 21 Dec 2023 13:34:06 +0000
ROA not before: Thu 21 Dec 2023 13:34:06 +0000
ROA not after: Sun 21 Dec 2025 13:34:06 +0000
asID: 43289
IP address blocks: 190.93.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 12:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2652868 (0x287ac4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
Validity
Not Before: Dec 21 13:34:06 2023 GMT
Not After : Dec 21 13:34:06 2025 GMT
Subject: CN=f9b2e750f6634137358a20101a89b148aa9dad5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:7d:d9:0d:11:7b:40:63:8a:19:e6:17:8e:
3a:bd:d6:ae:3d:22:d6:90:dc:9b:89:a6:61:71:ac:
10:2c:ee:1e:2f:c1:46:3c:18:0d:8b:b1:b9:df:19:
4e:ec:58:72:25:24:16:78:80:ee:df:05:4f:49:8c:
00:4f:02:1a:a9:16:13:7f:b2:81:7c:b2:8c:ef:8f:
bb:ec:8d:28:2c:1d:31:42:c2:c4:2e:81:4a:14:c8:
c9:3d:b9:6e:9a:88:c0:39:95:67:34:b7:38:0f:11:
6e:e6:b4:20:27:49:c0:f9:ab:e8:8a:8b:44:33:0c:
58:0f:29:39:12:91:b3:76:07:2b:5d:55:b9:e9:24:
6c:ba:f6:78:e6:c1:ff:03:ec:4c:60:2e:7b:ae:eb:
a5:e0:87:a3:ca:f4:77:ed:87:b2:89:af:80:85:44:
b6:11:17:da:c9:07:3a:91:47:6b:96:c5:a3:68:3b:
43:73:74:b0:8b:f4:51:41:b3:35:84:36:71:61:bb:
a9:21:bc:d5:5e:07:0b:f6:5f:9b:a8:d0:5a:1c:0f:
2b:75:88:45:c8:16:cb:45:2a:3a:5e:11:43:5a:a6:
48:54:25:fc:6b:bc:04:a9:2f:0f:86:a3:55:c1:38:
24:5e:50:b7:5c:09:bf:8a:5b:a7:52:64:0a:49:a1:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A8:89:E9:E7:80:0E:4C:D5:8E:4F:3A:50:BF:57:BB:3A:38:A1:38
X509v3 Authority Key Identifier:
keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/f9b2e750f6634137358a20101a89b148aa9dad5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.71.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c8:e0:a4:bc:ef:3e:37:5f:ae:1a:28:b8:5e:50:53:9e:3b:
d7:3c:0a:cc:49:3f:f4:e5:33:59:4d:c4:9b:ca:aa:72:e4:d9:
c3:dd:0e:ae:a9:31:1f:9f:e7:47:ca:2e:a7:87:a9:fc:c0:19:
64:55:61:7d:f7:04:4b:91:df:7c:1c:15:1d:26:20:da:8c:7c:
ba:98:e1:88:c3:3e:be:97:81:47:79:29:a9:b4:7e:ed:0c:a3:
4e:63:3b:45:ca:7d:5f:76:21:4f:24:c5:a8:a3:3f:3e:27:2a:
c7:d0:df:29:bf:c4:20:f0:0c:36:d4:58:56:96:20:4c:44:e8:
f5:26:c0:3e:e3:c5:cc:88:66:2a:1b:0e:97:61:ae:3c:69:09:
bb:26:4e:17:c9:ba:c3:4e:82:37:a7:98:23:f8:6c:c6:b6:6e:
68:3a:47:e2:6c:d2:3f:7a:13:36:e5:e3:9b:ce:76:6d:19:36:
7a:c2:a2:89:c9:af:53:2d:92:13:ea:be:52:c2:10:12:dc:e7:
1a:e5:cd:41:a5:ee:e0:3f:ba:8a:92:61:7f:25:b5:17:78:f1:
45:b3:ac:08:67:d2:f7:2c:e4:17:e6:6e:07:35:66:84:42:22:
6c:03:11:f6:7c:cc:9e:dc:41:f0:a8:d6:a3:19:c2:5b:e4:69:
1f:66:79:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 21 15:33:33 2024 by rpki-client on console-fra.rpki-client.org