Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/7f9753d8663ade82f6b14f350a626f0714180ab7.roa
File: 7f9753d8663ade82f6b14f350a626f0714180ab7.roa (raw, json)
Hash identifier: 4BaTurdueUVZCdAZlXZC2T38LTUNBszk1q0hcQ7dXPQ=
Subject key identifier: 1D:A1:31:1C:30:7B:89:C5:01:56:EE:B0:15:3F:DA:9D:BA:66:55:3F
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 20284B
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/7f9753d8663ade82f6b14f350a626f0714180ab7.roa
Signing time: Fri 20 Jan 2023 14:54:49 +0000
ROA not before: Wed 28 Apr 2021 03:00:00 +0000
ROA not after: Thu 11 May 2023 03:00:00 +0000
asID: 262589
IP address blocks: 190.90.0.0/21 maxlen: 21
190.90.8.0/21 maxlen: 21
190.90.16.0/21 maxlen: 21
190.90.24.0/24 maxlen: 24
190.90.28.0/22 maxlen: 24
190.90.33.0/24 maxlen: 24
190.90.34.0/24 maxlen: 24
190.90.36.0/22 maxlen: 24
190.90.52.0/22 maxlen: 24
190.90.60.0/22 maxlen: 24
190.90.64.0/20 maxlen: 24
190.90.80.0/20 maxlen: 24
190.90.96.0/20 maxlen: 24
190.90.112.0/21 maxlen: 24
190.90.128.0/20 maxlen: 24
190.90.208.0/21 maxlen: 24
190.90.252.0/24 maxlen: 24
190.90.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2107467 (0x20284b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Apr 28 03:00:00 2021 GMT
Not After : May 11 03:00:00 2023 GMT
Subject: CN=7f9753d8663ade82f6b14f350a626f0714180ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:c4:c8:dc:c8:4e:64:05:32:20:27:a1:e6:
9a:26:98:03:c3:74:05:bc:6b:9e:2d:a1:13:e2:bd:
f8:fb:c6:ed:0d:7f:60:e3:f1:35:61:ed:6a:d4:63:
a5:bc:19:b6:bf:e6:30:36:50:fe:a9:f5:94:0e:be:
6e:11:09:a4:3a:f6:a4:a8:a3:8e:b8:8f:dc:0a:19:
37:e2:27:63:b3:b5:a6:f5:4e:2a:79:92:e3:57:54:
52:1e:c6:e1:3c:0e:fe:a5:26:8a:c9:bd:72:e5:9a:
fa:bd:9c:7d:59:d7:bb:bc:c6:3b:fc:90:99:62:d0:
b4:97:41:7d:71:d3:66:47:e8:45:34:51:5e:f5:5d:
d0:c1:1e:70:46:a7:85:48:ac:b8:e2:1e:d9:f7:40:
2b:e9:b7:a5:37:6b:37:7f:52:66:fe:11:5d:83:ae:
d1:31:a6:9b:ef:20:5b:66:e0:2d:da:03:ac:e3:e8:
20:a6:e4:c4:e5:42:ee:fa:52:87:88:23:5c:28:63:
9b:2d:58:fe:1f:d1:c3:ce:2d:9d:33:df:c8:40:33:
cc:9b:4a:92:f2:ea:bd:a0:1d:75:86:3e:4e:0e:4d:
10:2a:31:f6:92:4f:e6:c9:eb:6f:7f:51:15:7f:a9:
16:e0:9c:c4:a4:ce:ce:27:b5:1a:dd:ef:8a:ae:10:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A1:31:1C:30:7B:89:C5:01:56:EE:B0:15:3F:DA:9D:BA:66:55:3F
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/7f9753d8663ade82f6b14f350a626f0714180ab7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.0.0-190.90.24.255
190.90.28.0/22
190.90.33.0-190.90.34.255
190.90.36.0/22
190.90.52.0/22
190.90.60.0-190.90.119.255
190.90.128.0/20
190.90.208.0/21
190.90.240.0/24
190.90.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:13:b1:d4:79:3a:ba:7e:25:f6:9e:2d:9d:9f:f0:75:4c:9b:
20:16:79:02:d3:82:e6:c0:02:3c:33:6c:ce:42:e3:96:2a:40:
8c:0b:a5:9c:fe:29:4e:a7:06:65:bc:94:7f:39:41:59:91:46:
09:05:c2:79:de:c4:29:b9:0c:ae:a8:d4:40:f3:7b:d5:a5:43:
32:5f:46:56:b9:65:8d:55:c9:9c:a1:6a:43:b4:98:25:8e:7d:
8c:79:f9:94:20:66:49:b8:7a:1c:91:f3:b4:e9:9b:37:2e:0f:
2a:f7:78:60:86:f6:fd:e6:44:f3:70:e9:d5:a1:e3:0e:f4:2d:
e3:99:da:47:5c:e1:4a:a9:96:87:1f:0d:63:9e:93:3c:f6:4c:
28:6c:40:e0:53:1d:59:a7:ca:38:b7:a3:4d:f7:65:41:22:5c:
b1:af:5e:b3:b4:86:40:6d:3d:6d:10:0c:ed:2c:d4:b7:b7:15:
bf:c3:9e:63:82:07:bc:80:83:2f:9c:8b:6b:d2:19:8b:03:35:
c4:93:79:a2:c6:60:10:7d:81:24:10:19:0c:85:4a:9c:12:79:
f1:70:55:c7:87:80:9d:ea:24:16:0d:b6:07:f6:dc:d5:35:56:
75:37:63:48:46:84:36:0e:43:c1:54:53:bb:70:84:08:67:5f:
fe:9d:92:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:20 2023 by rpki-client on console.sobornost.net