Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/120b5124a800140794fee8678ac5a531613896f6.roa
File: 120b5124a800140794fee8678ac5a531613896f6.roa (raw, json)
Hash identifier: qqXAOOre1URGdzO+x7TjtCgEAh92dNvtip/BexcXts8=
Subject key identifier: FE:2D:B4:A5:55:59:9E:C5:18:C2:99:FE:98:D6:D6:9A:47:FB:49:40
Certificate issuer: /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial: 197300
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/120b5124a800140794fee8678ac5a531613896f6.roa
Signing time: Tue 31 May 2022 14:47:58 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Wed 31 Dec 2025 03:00:00 +0000
asID: 27742
IP address blocks: 190.98.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1667840 (0x197300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Dec 31 03:00:00 2025 GMT
Subject: CN=120b5124a800140794fee8678ac5a531613896f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:52:bd:db:69:ed:b3:82:1d:1d:b3:0b:35:
ad:50:f5:19:a1:12:9c:13:a8:83:81:55:c7:6f:c4:
b1:74:64:30:0d:be:10:76:91:23:26:c9:87:ac:36:
99:23:7f:52:86:fb:4d:da:f4:3d:2b:b3:8f:ab:ac:
cd:cb:44:84:d2:f4:2d:d2:e4:47:dd:85:e7:02:a8:
fc:84:b7:8b:b5:54:7a:ac:83:34:80:8a:87:ad:69:
7f:09:db:98:94:7e:9e:dc:5e:8c:63:11:31:f5:45:
8d:08:b8:dd:f2:5f:59:d1:34:d0:c7:b0:4b:09:96:
29:7e:d9:d5:94:3e:a6:4c:87:29:48:39:05:2f:34:
11:1a:df:a9:67:d6:17:23:58:37:aa:b5:c5:09:22:
92:9f:e0:93:12:ff:75:86:42:e6:75:c1:ec:b9:56:
ee:83:f3:a0:46:5a:81:9c:32:f9:56:1f:10:36:84:
e0:99:af:84:d9:94:67:17:57:7c:29:a7:6d:c0:92:
fc:0a:e3:9e:ba:79:49:a8:08:57:78:d3:d2:37:6b:
93:03:d7:83:cd:91:e6:95:c0:a4:86:6d:b5:16:fd:
aa:63:f4:50:8c:a8:f4:58:b7:ec:a1:58:7c:44:7e:
98:2c:76:55:43:3f:fa:f3:37:83:d4:b0:b9:96:7d:
64:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2D:B4:A5:55:59:9E:C5:18:C2:99:FE:98:D6:D6:9A:47:FB:49:40
X509v3 Authority Key Identifier:
keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/120b5124a800140794fee8678ac5a531613896f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.98.139.0/24
Signature Algorithm: sha256WithRSAEncryption
12:1b:2e:ea:44:25:5e:ae:82:42:47:cc:d5:a5:a1:1d:89:10:
03:c8:4d:9f:18:c5:1e:59:62:4b:b5:64:a2:f4:5c:0c:e2:12:
2a:20:a5:e8:de:29:71:67:d9:c2:91:55:85:64:c3:85:98:48:
d1:7d:af:78:38:74:b1:aa:b3:71:80:06:69:16:36:12:f3:0c:
87:e1:5b:28:75:16:35:a5:f6:98:44:e3:29:ac:8e:29:b3:ea:
58:f8:dc:41:41:4a:3b:ba:3e:83:c5:1e:db:c5:74:89:bd:fd:
5f:78:5c:82:fd:9d:57:38:b2:3b:fb:e3:59:16:cf:71:6a:80:
67:c0:75:b2:6e:e4:9f:ec:42:ae:f5:0e:41:3d:65:d1:73:10:
66:86:7f:0e:5a:e7:2d:32:5d:fc:d2:4c:d7:8d:1d:8e:0f:f4:
8d:77:29:19:8e:e1:09:90:c6:73:fd:fb:fb:6f:e1:f7:cc:19:
a6:53:66:a0:1a:41:ba:d1:91:9a:90:fd:fa:de:ca:0d:82:19:
af:73:4e:f3:81:97:af:45:b1:86:95:fd:5c:97:ed:5b:31:8a:
8a:99:2f:9a:c0:ee:a3:50:84:9c:49:e5:08:f2:4e:aa:56:16:
a2:8b:91:80:d3:2b:8d:47:ab:a4:b7:46:c4:38:74:28:a1:89:
54:68:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:54 2023 by rpki-client on console-ams.rpki-client.org