Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133322e302f32332d3234203d3e203532323333.roa
File: 3139302e38382e3133322e302f32332d3234203d3e203532323333.roa (raw, json)
Hash identifier: YFw7KV6MM0rM38kcrr2f/VfQz4dFkCoqVF3sqULZLr8=
Subject key identifier: 74:DE:C1:7F:36:E7:33:A4:15:C4:39:0A:75:78:03:F4:E7:C9:5F:59
Certificate issuer: /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial: 5BDCBA40804783458EAB789C8B3FBFBC4E723308
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133322e302f32332d3234203d3e203532323333.roa
Signing time: Wed 27 Nov 2024 14:10:00 +0000
ROA not before: Wed 27 Nov 2024 14:05:00 +0000
ROA not after: Wed 26 Nov 2025 14:10:00 +0000
asID: 52233
IP address blocks: 190.88.132.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 15:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:dc:ba:40:80:47:83:45:8e:ab:78:9c:8b:3f:bf:bc:4e:72:33:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Validity
Not Before: Nov 27 14:05:00 2024 GMT
Not After : Nov 26 14:10:00 2025 GMT
Subject: CN=74DEC17F36E733A415C4390A757803F4E7C95F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8f:f6:d7:2d:88:d5:5f:51:f7:a9:5b:38:17:
fd:75:54:b4:9f:fe:74:69:22:50:fb:c9:58:9a:ce:
4f:42:4a:2f:5b:ad:a7:92:6c:80:0a:6e:fe:5e:77:
f7:07:c3:07:af:3a:13:15:bf:4a:88:37:77:af:b3:
67:74:9a:e0:01:d7:33:1b:0b:a6:b1:c8:b9:d6:ee:
2f:59:2d:6b:20:da:4c:f7:e0:a1:35:19:22:0f:c2:
cd:65:6a:44:7e:d5:78:eb:8e:09:07:4e:d2:32:e1:
39:9a:f7:da:bd:e5:1c:f7:10:af:cd:79:e6:50:74:
7b:8a:61:da:1a:04:b0:46:a5:32:ee:57:6f:20:00:
d5:19:9a:9a:d8:df:07:7e:6c:d8:2f:d9:3c:a4:25:
31:0f:ae:03:2a:d8:a7:7d:14:00:0c:4b:fb:63:03:
cd:e4:3e:93:a2:d3:5d:9b:16:54:07:a9:3e:31:ff:
54:10:c8:3f:dc:1b:af:e8:df:8a:1b:82:24:4e:bd:
47:81:d0:e9:e1:45:a5:9d:65:fe:0b:a0:37:29:37:
50:9b:d1:c4:12:e6:d8:70:65:c3:c0:c3:12:d3:56:
4d:b4:d1:16:0f:6b:61:a5:5e:63:c7:31:6b:6c:27:
77:4f:58:c3:20:8b:d3:c0:cd:50:2a:71:c3:f0:b3:
d2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DE:C1:7F:36:E7:33:A4:15:C4:39:0A:75:78:03:F4:E7:C9:5F:59
X509v3 Authority Key Identifier:
keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e3133322e302f32332d3234203d3e203532323333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.88.132.0/23
Signature Algorithm: sha256WithRSAEncryption
97:ff:74:a8:3b:d2:74:0b:9b:86:95:ef:43:1c:29:a1:a2:7c:
1a:a5:29:cc:4e:80:96:03:26:f3:2a:26:0b:b6:14:03:40:ca:
03:77:82:8c:e6:71:18:1c:42:55:4c:18:7f:ad:aa:c4:66:c2:
59:a8:84:b9:a5:c0:81:ef:07:d6:90:8b:4b:82:61:4d:11:e0:
cd:1d:3c:5f:82:26:d8:ff:3e:d7:7b:05:be:b0:11:96:8e:c7:
3c:6b:d4:05:0e:5c:26:99:62:f8:65:9d:af:0e:d2:ac:ba:e7:
90:7e:e1:2f:ce:8e:2f:a3:5e:2f:46:cd:63:49:7d:7c:bb:f3:
65:fe:40:5a:38:36:2c:13:e4:d4:c4:c8:d3:24:80:44:fb:ba:
50:3d:15:48:e9:e2:d3:6d:41:0b:a4:8b:36:17:90:2a:70:7e:
e7:ef:17:ca:e2:ae:0c:ba:1f:0c:54:ee:f4:02:e5:b1:af:c6:
39:83:8d:a9:8c:69:bb:7b:f0:ca:52:39:9c:c8:84:27:d9:e3:
23:93:05:cb:8b:aa:66:8c:b9:ed:8e:71:d8:c6:18:c9:09:7b:
64:76:3a:6c:f4:65:a7:d4:dd:6b:1c:72:3d:dc:dd:ab:48:45:
e9:6c:23:95:ec:3d:d9:f5:51:09:ff:ef:88:ac:f6:49:06:97:
6a:98:69:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 18:01:30 2024 by rpki-client on console.sobornost.net