Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/922ff40ff7c427f6754fc66c19ab61b171ac7ed4.roa
File: 922ff40ff7c427f6754fc66c19ab61b171ac7ed4.roa (raw, json)
Hash identifier: FAXmeMr40xCvvP58ZeeNg2Sanj+49OPt3ougdw4SKqA=
Subject key identifier: 2D:9D:70:D0:EB:92:2E:6F:0D:DD:0C:30:43:A2:7F:36:B6:3F:21:52
Certificate issuer: /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial: 201F72
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/922ff40ff7c427f6754fc66c19ab61b171ac7ed4.roa
Signing time: Fri 28 Apr 2023 08:30:00 +0000
ROA not before: Thu 27 Apr 2023 08:30:00 +0000
ROA not after: Sat 26 Apr 2025 08:30:00 +0000
asID: 23520
IP address blocks: 190.131.209.0/24 maxlen: 24
190.131.224.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105202 (0x201f72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Validity
Not Before: Apr 27 08:30:00 2023 GMT
Not After : Apr 26 08:30:00 2025 GMT
Subject: CN=922ff40ff7c427f6754fc66c19ab61b171ac7ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a6:17:78:ee:bf:aa:0c:44:c4:93:31:ed:de:
ad:1d:41:30:6a:c5:6e:b1:1b:4d:f6:d2:ec:7a:83:
ac:5e:ef:84:d9:4f:b4:08:bf:46:7c:7c:63:5d:07:
20:25:59:44:a9:80:01:3e:30:f4:4b:bd:ac:d2:d8:
9e:e4:54:69:d3:91:79:98:83:ad:c8:cd:69:a7:0b:
c0:ae:a7:fa:17:0b:df:be:ea:f4:b8:3c:6e:86:cc:
53:a3:c4:fa:f8:a7:7a:66:03:3a:5f:6c:ee:e9:6c:
91:3d:c3:62:ce:7c:d5:78:0f:22:89:a1:8a:ce:2c:
5d:83:c5:10:c3:b2:4e:45:67:46:b0:1e:2a:11:4f:
c6:ea:5f:e6:45:16:d6:a6:b9:7b:6a:6a:e7:44:f5:
be:1f:aa:ca:c1:b1:e9:2b:54:44:01:08:59:10:0a:
ce:ce:f5:04:e9:41:5f:e2:26:47:b8:0d:ce:3d:0e:
31:ba:8d:da:22:ac:d8:c0:a8:32:62:6f:ff:fa:99:
7f:d8:c8:ab:05:e5:14:27:b5:4a:84:35:05:78:71:
58:40:a8:ed:a7:b3:6f:09:97:2e:4c:07:b9:8e:d8:
01:b0:f5:26:a2:ff:64:ab:8b:5d:e4:6b:ea:bd:a2:
55:23:cd:a8:69:2f:bd:8c:c8:8d:d4:50:ca:c4:47:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9D:70:D0:EB:92:2E:6F:0D:DD:0C:30:43:A2:7F:36:B6:3F:21:52
X509v3 Authority Key Identifier:
keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/922ff40ff7c427f6754fc66c19ab61b171ac7ed4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.131.209.0/24
190.131.224.0/22
Signature Algorithm: sha256WithRSAEncryption
12:37:ea:b6:4a:4b:d2:21:84:76:ee:b4:6b:48:14:e2:35:98:
6d:e8:09:1b:9a:bb:d6:95:2b:d0:31:2b:4d:8c:5b:59:62:b6:
f3:08:d9:61:48:f8:a1:c4:6d:f6:a9:c6:7c:b8:c3:45:c4:ec:
e0:ef:df:b5:59:95:3c:b9:98:6d:12:18:43:55:e8:71:c5:68:
97:97:1d:84:4d:c0:f8:42:4b:94:76:3b:e2:79:aa:1e:0b:99:
2c:68:17:de:60:43:ba:5c:dd:be:47:d0:5e:24:2f:13:0f:3d:
2a:00:80:5a:31:d1:04:8c:bf:f9:1c:9f:28:d6:cc:c7:2e:59:
e4:dd:4d:80:df:e0:77:d5:0e:7f:c6:42:65:83:de:0e:aa:a7:
47:bf:e5:db:5b:c0:a1:0d:55:33:45:de:f5:15:c5:ad:a2:32:
7e:d2:ee:f5:87:c4:05:17:55:bd:c9:f0:e4:27:22:55:d4:95:
a1:81:fa:d5:44:da:ed:49:aa:e4:3a:53:7a:45:78:b5:23:26:
b6:51:57:be:62:e5:3d:4a:78:3b:a4:84:c2:b0:18:25:5d:cf:
09:1a:26:db:f0:4c:d8:d4:29:77:8e:ca:44:2c:b2:a9:04:f8:
4b:e2:b3:a1:79:bf:73:92:85:4e:3f:ab:20:c3:66:bc:bb:ac:
63:dc:c6:c5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDIB9yMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
YWNiNGZhMTk4NWIzYTlhMDM1NWE0YTlmYTViZjY0ZDYxYzYxNDUwHhcNMjMwNDI3
MDgzMDAwWhcNMjUwNDI2MDgzMDAwWjAzMTEwLwYDVQQDEyg5MjJmZjQwZmY3YzQy
N2Y2NzU0ZmM2NmMxOWFiNjFiMTcxYWM3ZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgKYXeO6/qgxExJMx7d6tHUEwasVusRtN9tLseoOsXu+E2U+0
CL9GfHxjXQcgJVlEqYABPjD0S72s0tie5FRp05F5mIOtyM1ppwvArqf6Fwvfvur0
uDxuhsxTo8T6+Kd6ZgM6X2zu6WyRPcNiznzVeA8iiaGKzixdg8UQw7JORWdGsB4q
EU/G6l/mRRbWprl7amrnRPW+H6rKwbHpK1REAQhZEArOzvUE6UFf4iZHuA3OPQ4x
uo3aIqzYwKgyYm//+pl/2MirBeUUJ7VKhDUFeHFYQKjtp7NvCZcuTAe5jtgBsPUm
ov9kq4td5GvqvaJVI82oaS+9jMiN1FDKxEefzwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFC2dcNDrki5vDd0MMEOifza2PyFSMB8GA1UdIwQYMBaAFIbG9eQAYQM8laEl
0N1eDk81gxo+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDlhY2I0
ZmExOTg1YjNhOWEwMzU1YTRhOWZhNWJmNjRkNjFjNjE0NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTVjMjU1OGEtMWQ1MS00NTY2LWE3NTUtYjc5YjQ1
YTE0YTYzLzkyMmZmNDBmZjdjNDI3ZjY3NTRmYzY2YzE5YWI2MWIxNzFhYzdlZDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xNWMyNTU4YS0xZDUxLTQ1NjYtYTc1NS1iNzli
NDVhMTRhNjMvNDlhY2I0ZmExOTg1YjNhOWEwMzU1YTRhOWZhNWJmNjRkNjFjNjE0
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL6D0QMEAr6D4DANBgkqhkiG9w0BAQsFAAOCAQEAEjfqtkpL
0iGEdu60a0gU4jWYbegJG5q71pUr0DErTYxbWWK28wjZYUj4ocRt9qnGfLjDRcTs
4O/ftVmVPLmYbRIYQ1XoccVol5cdhE3A+EJLlHY74nmqHguZLGgX3mBDulzdvkfQ
XiQvEw89KgCAWjHRBIy/+RyfKNbMxy5Z5N1NgN/gd9UOf8ZCZYPeDqqnR7/l21vA
oQ1VM0Xe9RXFraIyftLu9YfEBRdVvcnw5CciVdSVoYH61UTa7Umq5DpTekV4tSMm
tlFXvmLlPUp4O6SEwrAYJV3PCRom2/BM2NQpd47KRCyyqQT4S+KzoXm/c5KFTj+r
IMNmvLusY9zGxQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org