Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/4da198fdf1a4a4441aea5a738f5bab0b68c8ffb6.roa
File: 4da198fdf1a4a4441aea5a738f5bab0b68c8ffb6.roa (raw, json)
Hash identifier: OPR1jvdd+MwTS5UmLX9uOyUf0VHNgIC8mF0oAtS2ld8=
Subject key identifier: 35:A3:B8:70:7E:53:53:4B:F1:5A:9C:BF:B0:C1:E3:9A:01:3D:D5:D0
Certificate issuer: /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial: 2552B7
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/4da198fdf1a4a4441aea5a738f5bab0b68c8ffb6.roa
Signing time: Wed 30 Aug 2023 17:17:59 +0000
ROA not before: Tue 29 Aug 2023 17:17:58 +0000
ROA not after: Sat 30 Aug 2025 17:17:58 +0000
asID: 3816
IP address blocks: 190.96.184.0/21 maxlen: 21
186.183.232.0/23 maxlen: 23
186.183.240.0/22 maxlen: 22
190.96.200.0/21 maxlen: 21
186.183.244.0/23 maxlen: 23
190.13.16.0/21 maxlen: 21
186.183.254.0/23 maxlen: 23
190.96.224.0/19 maxlen: 21
190.96.136.0/21 maxlen: 21
190.96.144.0/20 maxlen: 21
190.13.48.0/20 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2446007 (0x2552b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Validity
Not Before: Aug 29 17:17:58 2023 GMT
Not After : Aug 30 17:17:58 2025 GMT
Subject: CN=4da198fdf1a4a4441aea5a738f5bab0b68c8ffb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:ea:0e:70:65:5d:51:73:3d:99:61:ac:ff:
e2:71:04:e3:35:b7:5c:7c:59:4a:8b:c4:4a:69:d3:
29:39:dd:f2:82:78:2e:3a:ed:7f:e8:91:5e:c3:f1:
26:27:63:15:b5:2e:74:a2:6d:51:7e:6f:5c:40:cf:
1c:75:40:a6:d9:4e:7a:82:5f:bb:37:d1:91:21:43:
df:58:e6:8b:69:cb:34:59:9e:46:4f:fc:7b:ab:78:
37:7e:aa:5b:83:f7:a1:b8:42:0b:7b:1b:74:75:85:
42:01:22:04:c5:74:3f:ea:61:25:87:c1:9f:87:69:
e6:c1:03:ab:f2:27:7a:9f:4d:d0:6d:74:53:69:e1:
fd:ce:88:a3:38:65:bc:8c:08:41:6a:b8:bd:fd:c7:
f1:1a:6f:85:7f:37:53:a9:1f:f4:a1:e5:6f:5a:77:
e1:57:2d:c4:d7:5d:8c:5a:54:71:ec:26:25:04:dd:
42:64:b8:ff:47:22:34:2c:f7:69:16:0b:67:96:34:
66:ed:79:19:0c:f1:64:f0:d0:4d:99:5a:51:fe:97:
46:30:6d:3d:df:91:96:91:84:bd:0b:4a:5e:73:f3:
3f:2a:5f:03:14:bb:41:e1:f9:24:d6:49:13:3e:f4:
c4:7a:02:58:cc:68:a5:2b:38:19:d1:28:d5:5b:a3:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A3:B8:70:7E:53:53:4B:F1:5A:9C:BF:B0:C1:E3:9A:01:3D:D5:D0
X509v3 Authority Key Identifier:
keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/4da198fdf1a4a4441aea5a738f5bab0b68c8ffb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.183.232.0/23
186.183.240.0-186.183.245.255
186.183.254.0/23
190.13.16.0/21
190.13.48.0/20
190.96.136.0-190.96.159.255
190.96.184.0/21
190.96.200.0/21
190.96.224.0/19
Signature Algorithm: sha256WithRSAEncryption
d3:11:45:db:f3:1b:2a:3c:85:9c:56:8e:68:2c:6b:bb:b3:44:
66:5c:40:bc:76:ce:48:5d:9b:1d:8d:16:12:0d:4f:ac:e8:61:
11:85:f3:c6:02:0b:bb:4a:00:d0:41:fa:12:1d:38:ed:98:d6:
89:15:a9:9c:b5:a5:7b:11:59:63:c3:9c:12:44:23:b5:0e:60:
52:10:6e:ed:1e:36:ae:b5:b7:86:9c:5a:8f:66:a0:eb:23:27:
c9:e9:20:91:bb:4c:38:8c:d1:b1:64:8c:8b:5a:38:23:f3:43:
b1:62:f0:f0:cb:e3:7d:34:f7:9d:53:f4:96:d8:04:e3:6a:d7:
b7:c6:0a:1b:d7:9e:34:45:e9:45:bc:ec:75:bb:c1:88:66:00:
f2:cf:44:a2:28:c8:cf:3e:c3:4c:43:c5:da:d9:f3:6c:be:98:
5d:67:98:9e:ec:9f:10:08:39:68:7b:be:6a:01:e0:1f:9b:ca:
84:f3:48:06:85:cb:56:b0:f6:63:b2:73:d7:07:5b:9b:83:7c:
ab:49:6f:ac:e9:66:6e:c7:8e:ac:ec:0e:9d:cd:b9:fb:47:bd:
d5:bc:b7:d3:06:9a:28:73:1f:c0:31:01:12:37:66:76:18:cf:
e3:0c:c8:12:43:a5:36:c2:69:9a:6a:7a:75:d0:4b:08:bc:75:
a7:2e:a8:4e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIDJVK3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
N2QzMzA5NDdkMjY0YzgxYjQ1MDNkZjNiMWVmNjdkNDVjYzJkYzQwHhcNMjMwODI5
MTcxNzU4WhcNMjUwODMwMTcxNzU4WjAzMTEwLwYDVQQDEyg0ZGExOThmZGYxYTRh
NDQ0MWFlYTVhNzM4ZjViYWIwYjY4YzhmZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo3fqDnBlXVFzPZlhrP/icQTjNbdcfFlKi8RKadMpOd3ygngu
Ou1/6JFew/EmJ2MVtS50om1Rfm9cQM8cdUCm2U56gl+7N9GRIUPfWOaLacs0WZ5G
T/x7q3g3fqpbg/ehuEILext0dYVCASIExXQ/6mElh8Gfh2nmwQOr8id6n03QbXRT
aeH9zoijOGW8jAhBari9/cfxGm+FfzdTqR/0oeVvWnfhVy3E112MWlRx7CYlBN1C
ZLj/RyI0LPdpFgtnljRm7XkZDPFk8NBNmVpR/pdGMG0935GWkYS9C0pec/M/Kl8D
FLtB4fkk1kkTPvTEegJYzGilKzgZ0SjVW6OvSQIDAQABo4ICmzCCApcwHQYDVR0O
BBYEFDWjuHB+U1NL8Vqcv7DB45oBPdXQMB8GA1UdIwQYMBaAFGG2jf2H687Wyisk
4qqP9wfaY14ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzM3ZDMz
MDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjNlNWRkOWUtYmJjYS00YzQ5LTkyZjUtOGM2NzUx
MTY1ZTkyLzRkYTE5OGZkZjFhNGE0NDQxYWVhNWE3MzhmNWJhYjBiNjhjOGZmYjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iM2U1ZGQ5ZS1iYmNhLTRjNDktOTJmNS04YzY3
NTExNjVlOTIvMzM3ZDMzMDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBggrBgEFBQcBBwEB/wRQ
ME4wTAQCAAEwRgMEAbq36DAMAwQEurfwAwQBurf0AwQBurf+AwQDvg0QAwQEvg0w
MAwDBAO+YIgDBAW+YIADBAO+YLgDBAO+YMgDBAW+YOAwDQYJKoZIhvcNAQELBQAD
ggEBANMRRdvzGyo8hZxWjmgsa7uzRGZcQLx2zkhdmx2NFhINT6zoYRGF88YCC7tK
ANBB+hIdOO2Y1okVqZy1pXsRWWPDnBJEI7UOYFIQbu0eNq61t4acWo9moOsjJ8np
IJG7TDiM0bFkjItaOCPzQ7Fi8PDL4300951T9JbYBONq17fGChvXnjRF6UW87HW7
wYhmAPLPRKIoyM8+w0xDxdrZ82y+mF1nmJ7snxAIOWh7vmoB4B+byoTzSAaFy1aw
9mOyc9cHW5uDfKtJb6zpZm7HjqzsDp3NuftHvdW8t9MGmihzH8AxARI3ZnYYz+MM
yBJDpTbCaZpqenXQSwi8dacuqE4=
-----END CERTIFICATE-----
Generated at Wed Aug 30 18:08:10 2023 by rpki-client on console-fra.rpki-client.org