Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/b425c985c89a43746a8f94d1d2ca7d0b518d57ef.roa
File: b425c985c89a43746a8f94d1d2ca7d0b518d57ef.roa (raw, json)
Hash identifier: PNLzTDqWRCBQZbzLkF4hfvrxg5gfk/vxQYsdEzHjaaE=
Subject key identifier: F0:2D:9A:08:71:40:F0:0E:35:DF:09:D8:8F:DA:0C:06:C9:94:9A:81
Certificate issuer: /CN=93e1045f9f659b040e2833d32618d562a29ac1fd
Certificate serial: 0DA42D
Authority key identifier: 35:E8:10:82:8A:1C:42:6C:F7:05:78:05:76:89:34:30:47:56:00:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93e1045f9f659b040e2833d32618d562a29ac1fd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/b425c985c89a43746a8f94d1d2ca7d0b518d57ef.roa
Signing time: Wed 24 Mar 2021 22:51:45 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 22122
IP address blocks: 148.209.103.0/24 maxlen: 24
148.209.104.0/24 maxlen: 24
148.209.111.0/24 maxlen: 24
148.209.112.0/21 maxlen: 21
148.209.120.0/22 maxlen: 22
148.209.123.0/24 maxlen: 24
148.209.126.0/24 maxlen: 24
148.209.131.0/24 maxlen: 24
148.209.132.0/24 maxlen: 24
148.209.136.0/24 maxlen: 24
148.209.138.0/24 maxlen: 24
148.209.140.0/24 maxlen: 24
148.209.144.0/22 maxlen: 22
148.209.148.0/23 maxlen: 23
148.209.15.0/24 maxlen: 24
148.209.16.0/20 maxlen: 20
148.209.175.0/24 maxlen: 24
148.209.176.0/20 maxlen: 20
148.209.192.0/23 maxlen: 23
148.209.200.0/22 maxlen: 22
148.209.204.0/23 maxlen: 23
148.209.206.0/24 maxlen: 24
148.209.208.0/24 maxlen: 24
148.209.210.0/23 maxlen: 23
148.209.212.0/22 maxlen: 22
148.209.218.0/23 maxlen: 23
148.209.220.0/24 maxlen: 24
148.209.228.0/22 maxlen: 22
148.209.231.0/24 maxlen: 24
148.209.232.0/22 maxlen: 22
148.209.236.0/24 maxlen: 24
148.209.238.0/23 maxlen: 23
148.209.240.0/22 maxlen: 22
148.209.244.0/23 maxlen: 23
148.209.246.0/24 maxlen: 24
148.209.32.0/20 maxlen: 20
148.209.48.0/20 maxlen: 20
148.209.5.0/24 maxlen: 24
148.209.56.0/22 maxlen: 22
148.209.60.0/23 maxlen: 23
148.209.62.0/24 maxlen: 24
148.209.73.0/24 maxlen: 24
148.209.75.0/24 maxlen: 24
148.209.76.0/24 maxlen: 24
148.209.8.0/22 maxlen: 22
148.209.81.0/24 maxlen: 24
148.209.82.0/23 maxlen: 23
148.209.84.0/22 maxlen: 22
148.209.88.0/23 maxlen: 23
148.209.93.0/24 maxlen: 24
148.209.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893997 (0xda42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e1045f9f659b040e2833d32618d562a29ac1fd
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=b425c985c89a43746a8f94d1d2ca7d0b518d57ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:49:bb:5f:c7:7c:1f:99:bc:4c:e0:d1:d9:
9c:92:42:fb:44:1f:5d:b7:2e:e2:71:05:1f:3e:16:
89:9b:7c:2e:20:88:d0:d2:b5:32:2f:d3:2e:09:53:
ac:c2:81:3d:aa:02:a1:62:40:3f:c4:b9:a0:e8:48:
65:42:4f:c7:ae:c6:11:c4:94:b2:2a:eb:4a:59:be:
f7:6a:95:a9:ec:01:6b:35:de:2d:bc:3d:46:3a:64:
d3:a8:45:75:08:c0:3a:15:05:22:7b:5e:f4:8e:ac:
95:f1:99:9d:60:8b:44:42:d0:91:99:28:9e:e8:6b:
53:4b:99:5c:8e:eb:f5:d0:f0:8d:2b:f5:90:de:e9:
7e:8b:90:f3:52:54:95:a3:50:af:38:57:9d:49:58:
03:ab:b7:3e:39:4b:03:5a:2c:62:e4:6c:4c:22:72:
53:ab:fb:07:1d:07:8b:bc:1d:15:c5:2d:f7:6c:70:
1c:63:43:55:b7:38:05:03:25:73:46:9b:0d:81:06:
41:25:2c:f3:f5:ca:1c:98:9d:09:33:c8:a2:16:1c:
d0:a0:a4:a0:58:8d:91:60:98:0e:94:52:3f:84:3c:
69:c1:6b:32:13:f8:12:d5:c1:49:88:fd:73:32:9d:
9c:19:6a:65:46:3e:0f:5d:56:cd:fd:98:1c:96:50:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2D:9A:08:71:40:F0:0E:35:DF:09:D8:8F:DA:0C:06:C9:94:9A:81
X509v3 Authority Key Identifier:
keyid:35:E8:10:82:8A:1C:42:6C:F7:05:78:05:76:89:34:30:47:56:00:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93e1045f9f659b040e2833d32618d562a29ac1fd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/b425c985c89a43746a8f94d1d2ca7d0b518d57ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/93e1045f9f659b040e2833d32618d562a29ac1fd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.209.5.0/24
148.209.8.0/22
148.209.15.0-148.209.63.255
148.209.73.0/24
148.209.75.0-148.209.76.255
148.209.81.0-148.209.89.255
148.209.93.0-148.209.94.255
148.209.103.0-148.209.104.255
148.209.111.0-148.209.123.255
148.209.126.0/24
148.209.131.0-148.209.132.255
148.209.136.0/24
148.209.138.0/24
148.209.140.0/24
148.209.144.0-148.209.149.255
148.209.175.0-148.209.193.255
148.209.200.0-148.209.206.255
148.209.208.0/24
148.209.210.0-148.209.215.255
148.209.218.0-148.209.220.255
148.209.228.0-148.209.236.255
148.209.238.0-148.209.246.255
Signature Algorithm: sha256WithRSAEncryption
18:72:73:d9:6b:a3:c1:fe:b5:2c:b7:6a:a9:f5:0f:80:64:1d:
b4:c1:30:35:7c:82:a2:cd:c1:01:98:dc:14:3a:d7:6c:81:3d:
fc:96:aa:08:be:69:ad:8e:9d:a1:8a:71:5b:f3:15:98:f7:af:
f2:16:c7:86:3c:cf:57:4a:57:fa:11:e9:84:22:3a:a1:fa:d9:
99:a6:3d:96:58:c2:92:e4:3b:b7:7d:f8:ed:e4:4b:6d:5b:fb:
b9:54:9f:b3:7b:fe:71:35:b4:40:84:42:a9:8a:e4:68:f7:55:
c9:f5:07:1a:88:60:a0:ae:af:9d:c5:b2:1b:8f:cd:d9:ba:97:
6c:44:82:84:86:8c:c6:04:33:18:df:60:9f:b6:c0:88:05:50:
60:55:6d:42:ba:c3:d1:be:9b:0d:94:e3:62:01:ae:93:6e:5a:
d5:9b:c6:0f:90:2e:38:03:18:1e:30:f6:33:4b:7e:fa:48:53:
6a:54:97:6d:8a:74:22:22:e6:5a:bc:36:36:64:0f:82:9f:b3:
f3:48:92:41:4f:41:cf:6e:2e:00:8a:e8:81:a5:0b:32:14:5f:
01:c1:fd:e1:2c:8f:fa:99:57:a1:eb:8d:f3:ec:98:b7:b9:ba:
85:75:59:bc:32:1d:13:65:6b:8c:22:a2:b2:7a:b1:d8:40:1a:
69:e5:18:9d
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIDDaQtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkz
ZTEwNDVmOWY2NTliMDQwZTI4MzNkMzI2MThkNTYyYTI5YWMxZmQwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyhiNDI1Yzk4NWM4OWE0
Mzc0NmE4Zjk0ZDFkMmNhN2QwYjUxOGQ1N2VmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArcJJu1/HfB+ZvEzg0dmckkL7RB9dty7icQUfPhaJm3wuIIjQ
0rUyL9MuCVOswoE9qgKhYkA/xLmg6EhlQk/HrsYRxJSyKutKWb73apWp7AFrNd4t
vD1GOmTTqEV1CMA6FQUie170jqyV8ZmdYItEQtCRmSie6GtTS5lcjuv10PCNK/WQ
3ul+i5DzUlSVo1CvOFedSVgDq7c+OUsDWixi5GxMInJTq/sHHQeLvB0VxS33bHAc
Y0NVtzgFAyVzRpsNgQZBJSzz9cocmJ0JM8iiFhzQoKSgWI2RYJgOlFI/hDxpwWsy
E/gS1cFJiP1zMp2cGWplRj4PXVbN/ZgcllB8JQIDAQABo4IDUDCCA0wwHQYDVR0O
BBYEFPAtmghxQPAONd8J2I/aDAbJlJqBMB8GA1UdIwQYMBaAFDXoEIKKHEJs9wV4
BXaJNDBHVgBvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTNlMTA0
NWY5ZjY1OWIwNDBlMjgzM2QzMjYxOGQ1NjJhMjlhYzFmZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTMzZTM1MDctNzA1NS00ZDNmLWJiOTAtYjlhNWUx
ZWU0ZjVlL2I0MjVjOTg1Yzg5YTQzNzQ2YThmOTRkMWQyY2E3ZDBiNTE4ZDU3ZWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMzNlMzUwNy03MDU1LTRkM2YtYmI5MC1iOWE1
ZTFlZTRmNWUvOTNlMTA0NWY5ZjY1OWIwNDBlMjgzM2QzMjYxOGQ1NjJhMjlhYzFm
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCARIGCCsGAQUFBwEHAQH/
BIIBATCB/jCB+wQCAAEwgfQDBACU0QUDBAKU0QgwDAMEAJTRDwMEBpTRAAMEAJTR
STAMAwQAlNFLAwQAlNFMMAwDBACU0VEDBAGU0VgwDAMEAJTRXQMEAJTRXjAMAwQA
lNFnAwQAlNFoMAwDBACU0W8DBAKU0XgDBACU0X4wDAMEAJTRgwMEAJTRhAMEAJTR
iAMEAJTRigMEAJTRjDAMAwQElNGQAwQBlNGUMAwDBACU0a8DBAGU0cAwDAMEA5TR
yAMEAJTRzgMEAJTR0DAMAwQBlNHSAwQDlNHQMAwDBAGU0doDBACU0dwwDAMEApTR
5AMEAJTR7DAMAwQBlNHuAwQAlNH2MA0GCSqGSIb3DQEBCwUAA4IBAQAYcnPZa6PB
/rUst2qp9Q+AZB20wTA1fIKizcEBmNwUOtdsgT38lqoIvmmtjp2hinFb8xWY96/y
FseGPM9XSlf6EemEIjqh+tmZpj2WWMKS5Du3ffjt5EttW/u5VJ+ze/5xNbRAhEKp
iuRo91XJ9QcaiGCgrq+dxbIbj83ZupdsRIKEhozGBDMY32CftsCIBVBgVW1CusPR
vpsNlONiAa6TblrVm8YPkC44AxgeMPYzS376SFNqVJdtinQiIuZavDY2ZA+Cn7Pz
SJJBT0HPbi4AiuiBpQsyFF8Bwf3hLI/6mVeh643z7Ji3ubqFdVm8Mh0TZWuMIqKy
erHYQBpp5Rid
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org