Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/c3a6a6d55f6cd6041db5ae2866526b87d825d63e.roa
File: c3a6a6d55f6cd6041db5ae2866526b87d825d63e.roa (raw, json)
Hash identifier: EheL+zKvc/ATa0fzKTZe4KzslVA69aRrEqJxG+9M0Cw=
Subject key identifier: D8:D5:13:DF:7A:5B:2F:A9:38:86:54:6B:AD:46:8A:BE:49:2E:0A:97
Certificate issuer: /CN=74935393919dd2a404caa7ccadf12085d19ef35d
Certificate serial: 0E3E64
Authority key identifier: 5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/c3a6a6d55f6cd6041db5ae2866526b87d825d63e.roa
Signing time: Wed 24 Mar 2021 14:32:23 +0000
ROA not before: Wed 24 Mar 2021 14:32:23 +0000
ROA not after: Tue 24 Mar 2026 14:32:23 +0000
asID: 264669
IP address blocks: 168.90.252.0/23 maxlen: 23
168.90.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933476 (0xe3e64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74935393919dd2a404caa7ccadf12085d19ef35d
Validity
Not Before: Mar 24 14:32:23 2021 GMT
Not After : Mar 24 14:32:23 2026 GMT
Subject: CN=c3a6a6d55f6cd6041db5ae2866526b87d825d63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:90:cf:96:7b:a2:8a:22:04:d6:f3:f1:3a:
3d:d5:74:74:84:c7:4d:e4:49:26:da:b7:95:30:fb:
8a:ba:71:5b:54:b6:77:be:9c:c7:0e:81:6d:ac:bd:
23:ad:49:2e:ff:9a:17:86:65:6e:47:4b:80:17:e9:
53:e4:03:49:da:af:21:8c:03:a8:f1:30:c7:80:2f:
68:e2:8c:f0:a7:d3:65:94:5b:56:f9:ec:94:a6:4d:
db:71:5c:a2:20:72:94:58:d4:6d:fc:3e:06:c3:7f:
56:f4:a0:42:34:46:7c:6f:ae:ab:f6:51:ae:e2:d1:
93:56:44:49:5f:80:1d:69:30:0f:35:69:95:55:56:
99:75:62:50:f8:2b:e7:7d:31:22:4e:32:b5:23:56:
77:37:79:74:36:39:e8:74:02:98:a4:f4:e1:5e:91:
01:98:68:a8:f4:03:88:86:0a:41:1a:e3:14:b8:97:
f8:e4:a3:ff:65:3c:05:43:93:c6:cb:82:aa:f0:7e:
a1:98:7f:02:0f:6b:3a:49:63:49:b6:45:c8:b0:cb:
5d:2e:41:62:3c:eb:82:ae:ca:91:ed:da:50:b0:d1:
65:b5:66:2e:12:d2:2d:9e:34:9b:a4:1e:b2:67:d8:
23:0c:85:f1:9d:b3:ea:04:7a:5e:6b:e1:a9:e4:ff:
1c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D5:13:DF:7A:5B:2F:A9:38:86:54:6B:AD:46:8A:BE:49:2E:0A:97
X509v3 Authority Key Identifier:
keyid:5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/c3a6a6d55f6cd6041db5ae2866526b87d825d63e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/74935393919dd2a404caa7ccadf12085d19ef35d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.252.0-168.90.254.255
Signature Algorithm: sha256WithRSAEncryption
56:cc:ef:51:f9:10:2d:30:0c:23:83:a1:78:99:38:df:93:31:
03:4c:d8:c0:f5:22:98:49:22:32:59:a3:79:84:be:16:11:87:
35:f6:d0:6d:5a:f6:b1:5e:8b:e6:f9:d4:11:fa:66:19:6c:9c:
c1:95:08:2a:26:98:0a:5c:60:b0:b3:da:ae:dc:95:e9:af:97:
70:5f:2c:69:1c:db:83:57:ca:e7:f2:b7:f0:63:35:2d:49:a7:
92:c9:00:80:0d:dd:79:e7:9b:16:2e:e9:11:6b:16:a8:07:21:
57:83:25:a1:88:92:ea:bc:bf:05:fc:42:0f:5f:4d:eb:7e:b2:
16:56:23:6e:05:1a:eb:54:4e:e2:c9:ab:92:37:b4:6d:74:28:
aa:c3:5d:f7:1b:bb:d1:3a:ac:60:b1:63:9a:15:65:7d:14:af:
1f:40:de:c4:e9:8c:57:fa:d5:99:ab:ad:b8:4e:98:d5:aa:60:
47:cf:3c:2c:6c:72:f3:e4:29:73:63:6b:f7:ae:97:3d:05:23:
ce:47:9c:5d:e7:4f:bd:24:1c:a1:97:56:a9:88:a8:d5:f9:d5:
61:d0:9b:b2:7b:fc:f3:6c:68:ca:b3:95:90:f5:75:cb:69:f3:
c3:96:dd:f1:35:f4:46:22:af:62:95:1a:f6:0e:7e:74:a0:0f:
8f:c3:c0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org