Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/a3621843e453cd76ace629865e5391c9b4ed497f.roa
File: a3621843e453cd76ace629865e5391c9b4ed497f.roa (raw, json)
Hash identifier: u1t0URetFd1uvU2WJh//OOraDuO4mhImQswULkIMLEo=
Subject key identifier: 3D:8A:0E:10:37:F0:96:87:A2:46:D9:A8:CB:B5:ED:0B:E4:FB:5A:29
Certificate issuer: /CN=74935393919dd2a404caa7ccadf12085d19ef35d
Certificate serial: 231A81
Authority key identifier: 5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/a3621843e453cd76ace629865e5391c9b4ed497f.roa
Signing time: Fri 23 Jun 2023 08:21:29 +0000
ROA not before: Thu 22 Jun 2023 08:21:29 +0000
ROA not after: Mon 23 Jun 2025 08:21:29 +0000
asID: 264669
IP address blocks: 168.90.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2300545 (0x231a81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74935393919dd2a404caa7ccadf12085d19ef35d
Validity
Not Before: Jun 22 08:21:29 2023 GMT
Not After : Jun 23 08:21:29 2025 GMT
Subject: CN=a3621843e453cd76ace629865e5391c9b4ed497f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:06:92:00:ff:f1:e3:82:92:1b:40:df:cb:
c8:46:a5:ea:df:cf:d2:60:ca:b4:8e:76:fe:92:de:
7b:72:99:fc:88:49:d8:80:b2:f1:fa:61:28:97:92:
2d:a5:3d:0e:70:74:4d:a4:1a:00:b2:2b:6c:76:f3:
79:f5:98:0e:a6:02:e2:05:d0:d5:b1:b9:cf:4e:ae:
00:2e:96:4c:e3:4d:d0:13:c5:9d:5d:f3:2c:b9:9b:
9f:5d:37:fa:10:ce:a9:7d:69:dd:f0:8c:62:81:45:
d7:7c:93:67:3b:46:a1:6f:9d:5c:68:d5:93:b2:ec:
34:d0:65:d1:8f:c0:9f:b9:09:85:fe:ad:a7:e3:02:
f6:54:34:10:09:86:b7:d4:f8:d0:42:9d:8c:c1:07:
61:d5:68:2f:74:5f:19:ab:8e:b5:1f:84:95:88:cf:
96:94:9a:1d:57:19:e4:d6:50:c6:8a:2e:89:3b:18:
36:f5:dd:e9:62:e9:31:fa:7b:f0:c1:2c:48:a6:15:
9a:14:34:04:08:de:13:60:b9:72:c2:2f:53:6b:d5:
0a:56:ee:65:c1:ff:2e:7e:bb:8c:bf:2c:39:1d:83:
ee:9f:97:0c:7b:b6:ba:6f:3a:79:06:d8:64:98:b0:
20:04:07:cf:0e:db:a5:3d:fb:8a:7e:4c:cd:3a:48:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8A:0E:10:37:F0:96:87:A2:46:D9:A8:CB:B5:ED:0B:E4:FB:5A:29
X509v3 Authority Key Identifier:
keyid:5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/a3621843e453cd76ace629865e5391c9b4ed497f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/74935393919dd2a404caa7ccadf12085d19ef35d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.252.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:53:63:dc:0f:38:ae:0d:e5:73:9b:07:96:7d:20:2f:5e:14:
ac:5e:5d:a2:b0:10:db:67:a4:2b:a7:fb:71:5d:43:33:6b:c3:
85:cf:2d:8e:89:3f:ff:cd:12:b0:d5:5c:e4:89:f2:a7:d4:85:
79:7a:0d:fb:a4:0f:4f:ce:4e:4f:84:9f:5a:0f:a6:81:f2:bc:
01:3a:1c:2b:92:e1:b6:0a:c3:fc:8a:cc:f4:df:77:3b:64:80:
51:21:8a:1c:78:c9:23:96:ff:a8:f8:fa:7c:ad:f8:1d:65:cf:
50:2f:db:62:dd:a9:05:2b:45:05:93:12:17:a4:32:ed:b7:3b:
b4:8a:79:db:31:30:82:bd:ad:3f:0e:0d:64:d3:a2:df:13:66:
56:c3:ca:dd:6d:1f:5f:92:86:3f:8d:40:e9:d7:c0:7e:28:f4:
41:91:95:a0:2f:37:08:97:88:53:21:5c:32:c6:da:f8:0b:e4:
d9:65:08:f6:f7:86:cd:7a:bc:c3:85:c7:08:73:3d:21:f1:b6:
f4:36:44:56:24:2f:29:46:17:83:2f:69:91:b5:19:69:2c:b0:
b9:fa:67:58:f8:f5:c6:78:fe:f2:3a:08:56:a0:42:eb:37:5b:
88:30:00:d5:59:40:01:64:bd:66:bc:4b:d5:02:77:14:ab:d4:
4d:5f:3e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 18:09:12 2023 by rpki-client on console-ams.rpki-client.org