Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b67f5535638cbb156f4c4165dfb840d86bf264da.roa
File: b67f5535638cbb156f4c4165dfb840d86bf264da.roa (raw, json)
Hash identifier: V6GMpj58bA29zeRPH5hSh1FGB+TyRq6vHcuOauru7pg=
Subject key identifier: B8:21:C8:65:7B:E8:1B:8A:33:01:9F:1F:C2:B4:73:A8:12:CC:2F:B8
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 1819C8
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b67f5535638cbb156f4c4165dfb840d86bf264da.roa
Signing time: Wed 26 Jan 2022 22:47:36 +0000
ROA not before: Fri 03 Dec 2021 03:00:00 +0000
ROA not after: Sun 03 Dec 2023 03:00:00 +0000
asID: 14080
IP address blocks: 186.83.29.0/24 maxlen: 24
186.83.31.0/24 maxlen: 30
186.86.125.0/24 maxlen: 29
186.86.124.0/24 maxlen: 29
190.158.204.0/22 maxlen: 24
201.221.172.0/22 maxlen: 24
181.48.176.0/24 maxlen: 24
181.49.106.0/24 maxlen: 24
190.144.130.0/24 maxlen: 24
190.144.174.0/24 maxlen: 24
190.145.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1579464 (0x1819c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Dec 3 03:00:00 2021 GMT
Not After : Dec 3 03:00:00 2023 GMT
Subject: CN=b67f5535638cbb156f4c4165dfb840d86bf264da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:d8:22:ce:fd:88:79:56:ed:aa:05:4a:d3:
34:6e:55:00:d5:b9:45:c4:64:ae:c9:a3:05:8d:fc:
be:e2:75:6a:cd:23:03:15:d1:02:d5:62:f8:0d:21:
8d:7f:71:ba:3c:39:76:93:a0:5e:3a:be:e5:09:92:
18:0d:61:18:79:c5:23:4f:c3:31:9a:60:80:b8:e6:
21:51:8d:20:e6:1e:2f:b5:df:e2:d7:75:ce:b0:a3:
6b:41:56:8e:a9:f1:0b:78:1a:68:8e:3a:2f:5d:53:
24:0e:59:97:c3:2e:69:e7:fb:78:21:d6:cc:6b:7d:
53:a3:dd:94:bc:e1:5e:5b:77:58:46:30:4a:b7:aa:
85:2a:8f:11:5d:0d:53:23:bf:1d:2b:4d:64:9b:c3:
1d:22:20:75:93:d6:56:ec:06:05:8a:78:6a:39:1b:
92:2a:b7:f6:93:ee:ee:e9:74:0c:ea:cb:dd:7d:d9:
82:70:71:32:16:4a:fa:46:26:81:30:5d:14:65:05:
7b:9c:d5:c7:40:b6:c5:cb:54:67:e7:f9:2f:bf:60:
60:88:bf:42:18:02:13:0e:8a:1b:d4:a5:6d:32:41:
d2:e5:5f:e1:0a:cb:14:ed:61:1a:ab:16:36:2a:27:
b4:18:aa:bb:d6:50:f2:65:1a:fb:e2:34:be:62:f2:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:21:C8:65:7B:E8:1B:8A:33:01:9F:1F:C2:B4:73:A8:12:CC:2F:B8
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/b67f5535638cbb156f4c4165dfb840d86bf264da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.48.176.0/24
181.49.106.0/24
186.83.29.0/24
186.83.31.0/24
186.86.124.0/23
190.144.130.0/24
190.144.174.0/24
190.145.103.0/24
190.158.204.0/22
201.221.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:b6:26:7e:fb:56:71:48:a9:14:7a:a0:7d:0d:92:5d:41:07:
ed:a7:b0:ab:a7:59:37:ed:e6:3d:e7:d9:04:86:48:e9:9b:1d:
ea:07:5a:33:f0:c6:24:c0:24:64:64:85:44:21:83:7f:bc:ea:
ef:67:d4:55:63:64:c4:8e:0a:b8:c7:65:e7:13:29:1b:c9:16:
8a:c1:ce:bb:1b:31:19:d0:15:45:0c:cd:25:ac:12:19:7e:ce:
f2:19:65:c7:c9:cb:05:1f:2a:73:d5:25:d8:a5:34:d7:c8:a5:
db:76:f6:2c:c5:85:61:fd:c9:69:c7:c8:93:74:f9:ab:1e:d1:
e7:39:55:ec:a7:05:58:9d:62:c2:72:07:95:ad:33:5e:08:48:
eb:c3:19:99:73:64:28:23:d8:6c:d9:07:da:46:73:96:27:47:
f1:fb:d2:9e:89:4b:ed:cd:2e:7f:09:09:4f:44:57:b3:ff:f2:
78:fe:73:f5:d5:4d:ea:cd:7c:db:3b:8f:58:53:d3:3d:45:01:
ae:26:ce:b8:50:0d:cb:d0:ac:1c:aa:e0:4d:7b:c1:f9:74:6a:
6d:33:af:05:4a:26:b7:13:31:81:ef:82:76:bd:c6:d6:76:51:
13:61:38:c0:66:2f:80:67:40:cc:87:95:25:43:21:f7:60:48:
e8:49:9b:39
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIDGBnIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjExMjAz
MDMwMDAwWhcNMjMxMjAzMDMwMDAwWjAzMTEwLwYDVQQDEyhiNjdmNTUzNTYzOGNi
YjE1NmY0YzQxNjVkZmI4NDBkODZiZjI2NGRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3PfYIs79iHlW7aoFStM0blUA1blFxGSuyaMFjfy+4nVqzSMD
FdEC1WL4DSGNf3G6PDl2k6BeOr7lCZIYDWEYecUjT8MxmmCAuOYhUY0g5h4vtd/i
13XOsKNrQVaOqfELeBpojjovXVMkDlmXwy5p5/t4IdbMa31To92UvOFeW3dYRjBK
t6qFKo8RXQ1TI78dK01km8MdIiB1k9ZW7AYFinhqORuSKrf2k+7u6XQM6svdfdmC
cHEyFkr6RiaBMF0UZQV7nNXHQLbFy1Rn5/kvv2BgiL9CGAITDoob1KVtMkHS5V/h
CssU7WEaqxY2Kie0GKq71lDyZRr74jS+YvK9UQIDAQABo4ICkTCCAo0wHQYDVR0O
BBYEFLghyGV76BuKMwGfH8K0c6gSzC+4MB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhL2I2N2Y1NTM1NjM4Y2JiMTU2ZjRjNDE2NWRmYjg0MGQ4NmJmMjY0ZGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBVBggrBgEFBQcBBwEB/wRG
MEQwQgQCAAEwPAMEALUwsAMEALUxagMEALpTHQMEALpTHwMEAbpWfAMEAL6QggME
AL6QrgMEAL6RZwMEAr6ezAMEAsndrDANBgkqhkiG9w0BAQsFAAOCAQEAG7YmfvtW
cUipFHqgfQ2SXUEH7aewq6dZN+3mPefZBIZI6Zsd6gdaM/DGJMAkZGSFRCGDf7zq
72fUVWNkxI4KuMdl5xMpG8kWisHOuxsxGdAVRQzNJawSGX7O8hllx8nLBR8qc9Ul
2KU018il23b2LMWFYf3JacfIk3T5qx7R5zlV7KcFWJ1iwnIHla0zXghI68MZmXNk
KCPYbNkH2kZzlidH8fvSnolL7c0ufwkJT0RXs//yeP5z9dVN6s182zuPWFPTPUUB
ribOuFANy9CsHKrgTXvB+XRqbTOvBUomtxMxge+Cdr3G1nZRE2E4wGYvgGdAzIeV
JUMh92BI6EmbOQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org