Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137362e302f32332d3234203d3e20323632353839.roa
File: 3139302e39302e3137362e302f32332d3234203d3e20323632353839.roa (raw, json)
Hash identifier: ZdqW9V4NeNlkXMiqRNFCuPoYG9850voVDnBhgTiIQl4=
Subject key identifier: 70:AE:6B:43:21:6D:FB:C7:6F:0B:64:1C:53:84:53:4D:F9:0C:B6:71
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 5758506DF92AEB00107B4893725E9F326B2D5745
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137362e302f32332d3234203d3e20323632353839.roa
Signing time: Tue 04 Feb 2025 18:17:30 +0000
ROA not before: Tue 04 Feb 2025 18:12:30 +0000
ROA not after: Tue 03 Feb 2026 18:17:30 +0000
asID: 262589
IP address blocks: 190.90.176.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:58:50:6d:f9:2a:eb:00:10:7b:48:93:72:5e:9f:32:6b:2d:57:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Feb 4 18:12:30 2025 GMT
Not After : Feb 3 18:17:30 2026 GMT
Subject: CN=70AE6B43216DFBC76F0B641C5384534DF90CB671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:13:9e:cc:ef:c4:11:ea:d6:01:d1:73:10:
43:7d:02:78:6c:8a:62:bb:30:ce:34:db:b5:5f:ed:
43:cd:61:00:d3:f0:02:c2:36:b2:76:b4:9a:43:bd:
14:2d:b8:51:8f:19:bf:35:a0:4e:ed:fe:cd:73:0e:
41:d1:39:d0:20:1e:3c:39:3b:cb:0e:66:fd:45:14:
9e:ff:43:22:d4:6c:41:1c:97:1f:b2:0d:6d:96:66:
67:9d:5b:d6:af:43:59:74:39:ef:49:61:18:07:43:
96:81:a3:7b:7d:32:2b:34:4b:4a:e1:9e:98:50:4d:
a9:b9:dc:08:bc:8d:07:c8:72:41:c1:0d:72:95:3a:
7c:ba:85:b1:a7:f7:23:04:08:8a:76:d2:cc:6b:f6:
96:e3:ff:77:b8:3e:e7:c2:a1:11:59:2c:67:bf:c1:
dd:ab:7b:32:7a:1b:78:a3:36:25:46:fd:09:9b:95:
bb:ed:2a:91:e0:6e:f1:f1:2e:8f:9c:66:79:18:44:
d6:27:69:e9:9a:24:d2:53:ca:0a:a5:78:be:a4:2a:
b3:56:5a:10:9b:9c:cf:d7:4d:4b:06:0d:dd:28:99:
04:85:6f:d8:cb:a1:c3:1f:bb:00:e9:74:6b:3d:18:
2a:ce:42:95:d3:84:2f:21:f8:1e:93:32:2c:d6:d8:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AE:6B:43:21:6D:FB:C7:6F:0B:64:1C:53:84:53:4D:F9:0C:B6:71
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3137362e302f32332d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.176.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:43:e3:35:4e:d3:07:2f:81:2b:45:b7:9a:27:26:5a:ae:6a:
21:96:be:62:b4:5a:4c:5e:fa:90:36:44:67:f7:59:ae:bf:a4:
5a:d4:83:c1:3c:46:1f:49:53:ce:5a:0d:93:14:d3:7c:19:fb:
df:a5:db:fc:81:3d:39:55:1d:14:79:03:7a:c9:ac:ee:4e:62:
84:36:0b:d9:bc:bc:9d:23:eb:d0:b8:48:06:4c:42:ec:6c:b2:
30:7a:97:73:ee:d5:d0:04:81:99:f9:de:fc:f4:fb:9e:3e:89:
1e:45:7a:d1:99:64:63:00:76:e2:90:0e:f0:ce:08:36:0f:91:
d7:5b:74:4b:0f:a2:55:ad:2c:cc:82:ed:0d:fd:de:b1:fd:26:
57:af:18:78:40:19:01:b1:ca:9c:85:67:6f:a8:a7:a0:1b:b4:
aa:9c:dd:4c:44:6c:3f:e2:c1:63:f9:b6:20:f9:d6:67:a2:64:
3f:02:14:b6:58:bd:bb:90:ad:f0:0f:ca:16:c9:66:9a:32:b9:
1d:7c:73:8e:20:bb:eb:88:90:f1:07:c0:2b:55:d5:46:db:c5:
9e:3b:a6:4c:32:c2:85:d0:3f:80:8e:66:c9:e9:f3:a6:67:e5:
27:4e:eb:f5:f4:db:b3:03:2c:6a:50:b4:03:91:fa:ea:0c:c9:
a3:bb:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:19:40 2025 by rpki-client