Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/b370a187b4257f73940aa5c8c1d3529d09da7a56.roa
File: b370a187b4257f73940aa5c8c1d3529d09da7a56.roa (raw, json)
Hash identifier: J9f31fE/ACaDmfTNFIkUy/cF/Fkw1XE8oRh2RWeH6zc=
Subject key identifier: DD:E7:28:C9:E5:D4:F7:D5:45:5D:80:E2:6B:8C:27:7A:2E:26:E2:E8
Certificate issuer: /CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Certificate serial: 206BC2
Authority key identifier: 76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/b370a187b4257f73940aa5c8c1d3529d09da7a56.roa
Signing time: Fri 12 May 2023 08:30:03 +0000
ROA not before: Thu 11 May 2023 08:30:03 +0000
ROA not after: Sat 10 May 2025 08:30:03 +0000
asID: 27742
IP address blocks: 190.53.32.0/21 maxlen: 24
190.53.40.0/24 maxlen: 24
190.53.42.0/23 maxlen: 24
190.53.44.0/23 maxlen: 24
190.53.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124738 (0x206bc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Validity
Not Before: May 11 08:30:03 2023 GMT
Not After : May 10 08:30:03 2025 GMT
Subject: CN=b370a187b4257f73940aa5c8c1d3529d09da7a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:4f:77:e6:16:0f:ac:71:68:e9:6b:08:12:
aa:d4:bb:99:c6:3d:cc:23:4e:b6:0a:7e:f0:16:09:
8b:13:c4:51:5e:f2:8a:e1:57:5a:17:b7:3f:41:fb:
4d:20:a9:07:da:a7:81:21:5d:f0:f2:3b:9a:bd:bf:
9a:96:32:d4:60:05:62:60:fb:fa:43:d2:6c:0d:71:
2b:54:39:d3:bb:39:7e:74:e6:70:0c:c9:26:7e:3b:
c3:7f:6f:79:f2:9a:f3:e5:63:79:fe:83:5f:01:6d:
32:8d:38:53:6b:39:7c:fc:e8:6a:c5:58:9e:94:5d:
57:4c:55:37:88:be:1e:9c:ba:dc:e3:ff:3d:fd:32:
aa:e0:36:18:33:e3:f1:d2:56:f5:a6:8e:b7:5a:05:
14:19:ca:ea:ea:e7:6f:a6:52:08:cc:c6:c4:2f:00:
1d:34:ed:a7:cf:7a:86:b6:37:5b:aa:57:77:ad:38:
16:4b:48:1d:70:db:4d:50:a2:09:31:71:24:2a:c5:
4f:bb:bb:bd:ab:0f:fa:df:af:86:01:05:2d:1d:48:
01:15:2f:a7:e5:8c:56:83:32:f0:c6:33:c1:f7:b5:
7d:19:62:8d:0f:df:92:04:1b:58:13:3a:99:e5:e8:
f0:6e:d3:d8:63:62:cc:e5:bd:69:f0:24:3a:dc:b5:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E7:28:C9:E5:D4:F7:D5:45:5D:80:E2:6B:8C:27:7A:2E:26:E2:E8
X509v3 Authority Key Identifier:
keyid:76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/b370a187b4257f73940aa5c8c1d3529d09da7a56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/eb6de066f1c70b82f75b54d19209c0e03f1f0279.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.53.32.0-190.53.40.255
190.53.42.0-190.53.46.255
Signature Algorithm: sha256WithRSAEncryption
6b:bc:fb:97:6b:53:81:3b:73:6f:82:19:ab:ff:85:c2:94:2a:
c9:3b:34:4c:c8:9a:5b:db:76:30:6a:38:17:e1:fd:27:dc:ed:
66:32:b1:4d:d9:0d:aa:08:d7:20:7d:c6:a2:63:c0:09:bd:c2:
07:bf:f8:0d:db:06:94:6f:c2:0c:62:f6:66:0f:d8:d4:c9:ca:
4a:b1:41:f5:a7:8a:8b:71:9e:cc:dc:bb:ff:64:b4:4e:be:6b:
cd:be:b4:26:b6:b0:55:47:80:21:d8:e9:21:95:44:a2:e3:f1:
1f:f5:0d:9c:83:95:e0:57:a0:6b:77:f3:08:b5:c5:5a:ed:f4:
e5:43:b9:0e:20:aa:ef:b8:f0:67:0b:83:a4:a1:d6:9e:dc:e3:
0d:b2:02:37:f8:ac:ca:51:91:8b:3d:06:da:54:11:83:c8:7e:
9f:68:39:6e:b0:15:2d:63:9b:26:12:4d:c2:11:d5:a6:66:af:
3c:d0:68:bd:00:9c:e2:90:51:2a:90:a3:ba:2a:cf:fa:29:9e:
a1:21:5e:1c:09:f0:c4:da:35:5c:0f:00:10:02:8a:f0:b3:12:
d2:cf:ce:24:87:a5:73:ff:5b:4e:20:6f:c5:58:0b:36:02:39:
e1:53:06:44:09:46:bd:b4:82:4c:dc:a3:ff:8c:ed:0d:ce:0f:
10:7b:6d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org