Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/3d66c9931ea22789199ff679760a2a217588aa89.roa
File: 3d66c9931ea22789199ff679760a2a217588aa89.roa (raw, json)
Hash identifier: QQvzxAU6bGzwLu0CDEHOg1ot0/uj6EGZKV2GlFBAQpc=
Subject key identifier: F9:40:9F:ED:F5:F5:E5:A8:2E:13:04:C9:A3:7A:02:37:25:6F:78:8C
Certificate issuer: /CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
Certificate serial: 01052B
Authority key identifier: 95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/3d66c9931ea22789199ff679760a2a217588aa89.roa
Signing time: Sun 14 May 2023 15:34:17 +0000
ROA not before: Sat 13 May 2023 15:34:17 +0000
ROA not after: Wed 14 May 2025 15:34:17 +0000
asID: 271945
IP address blocks: 190.110.32.0/24 maxlen: 24
190.110.33.0/24 maxlen: 24
190.110.34.0/24 maxlen: 24
2803:e610::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66859 (0x1052b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
Validity
Not Before: May 13 15:34:17 2023 GMT
Not After : May 14 15:34:17 2025 GMT
Subject: CN=3d66c9931ea22789199ff679760a2a217588aa89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cd:aa:ee:b0:b4:75:b7:24:c2:e7:fb:b1:f1:
ed:d2:13:cf:3c:40:99:46:2c:ad:08:64:bf:e5:19:
9f:e3:84:55:bb:4b:f6:36:f0:f5:f0:9f:e6:54:ef:
3d:b6:66:5c:f5:14:f9:09:cc:f7:e9:d3:79:ed:7b:
5f:21:0f:7f:83:9b:08:2e:08:75:33:e1:9c:49:19:
4f:b7:2b:50:8f:35:bc:dc:36:94:15:29:1e:bb:6d:
9f:72:63:c7:45:7d:15:71:45:c7:09:c2:02:ca:81:
4d:c3:7e:6f:eb:11:8e:8a:7a:c7:a0:6b:88:db:c4:
c9:4e:b5:3b:81:39:9a:ff:86:4d:77:62:16:f2:68:
78:2c:70:a2:58:84:24:f5:3f:92:10:2e:4b:0f:8e:
57:a5:8b:88:d8:95:c8:f1:d0:3f:ee:88:1d:26:c1:
b0:c7:17:3f:17:7e:50:65:aa:d1:8f:8c:42:f4:e9:
25:c0:a5:6a:c9:0f:31:fc:62:ce:51:30:8f:3d:e5:
84:69:4c:7b:c0:4f:49:63:11:fb:d0:19:8e:0a:ea:
c1:cd:42:ac:c5:23:19:54:0e:f4:c0:6f:c4:82:70:
5d:d5:fd:85:18:2e:be:90:16:0f:a9:1b:ef:fc:c3:
67:7d:48:ae:1a:43:7d:33:14:bf:73:1e:b2:e3:bd:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:40:9F:ED:F5:F5:E5:A8:2E:13:04:C9:A3:7A:02:37:25:6F:78:8C
X509v3 Authority Key Identifier:
keyid:95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/3d66c9931ea22789199ff679760a2a217588aa89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.32.0-190.110.34.255
IPv6:
2803:e610::/32
Signature Algorithm: sha256WithRSAEncryption
56:ea:be:5f:6b:dd:90:ec:a4:2c:64:e4:40:89:eb:bc:4f:a9:
d2:9b:53:00:bf:a8:83:72:9b:7f:94:07:66:6c:54:79:23:ed:
40:27:d9:aa:0f:1a:42:f4:a2:f3:23:48:c5:66:c3:13:7c:da:
ea:6d:27:66:51:b7:6d:28:4c:98:5f:19:3b:a4:e4:65:de:c9:
f2:00:06:59:3f:63:2e:e7:c6:56:b7:4e:16:ad:ff:f8:82:0f:
19:64:81:9b:e1:ba:2a:14:11:3e:39:83:af:a6:34:15:de:dd:
c5:95:8f:09:ec:47:bb:0b:29:0b:a5:78:1d:e8:97:73:85:bb:
b9:c6:36:fa:d0:6d:89:93:c9:7a:9f:17:77:83:1a:91:8c:6b:
82:a4:c5:fd:bf:ae:61:61:83:b4:d1:c4:2d:9f:15:96:8c:08:
45:3d:71:d0:50:3f:f7:b8:ae:38:8e:ce:43:f8:73:1d:95:5b:
6b:b7:ae:6f:18:69:7f:9b:76:47:81:fb:d0:88:34:bb:5b:7f:
0f:7f:3a:8b:51:ad:f2:36:59:56:90:cb:fe:19:21:62:28:99:
bb:bb:fe:56:05:10:77:22:eb:87:25:81:2a:c5:a8:ce:7a:63:
6d:c2:d0:da:92:0e:42:55:1b:bf:55:17:67:e3:4f:6d:93:06:
b4:2a:bc:0d
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDAQUrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
N2U3MGQyNGQ3YzJhYmY4ZjcwMWI0OGExZGNmMDYyMDU5YjJiYmUwHhcNMjMwNTEz
MTUzNDE3WhcNMjUwNTE0MTUzNDE3WjAzMTEwLwYDVQQDEygzZDY2Yzk5MzFlYTIy
Nzg5MTk5ZmY2Nzk3NjBhMmEyMTc1ODhhYTg5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA082q7rC0dbckwuf7sfHt0hPPPECZRiytCGS/5Rmf44RVu0v2
NvD18J/mVO89tmZc9RT5Ccz36dN57XtfIQ9/g5sILgh1M+GcSRlPtytQjzW83DaU
FSkeu22fcmPHRX0VcUXHCcICyoFNw35v6xGOinrHoGuI28TJTrU7gTma/4ZNd2IW
8mh4LHCiWIQk9T+SEC5LD45XpYuI2JXI8dA/7ogdJsGwxxc/F35QZarRj4xC9Okl
wKVqyQ8x/GLOUTCPPeWEaUx7wE9JYxH70BmOCurBzUKsxSMZVA70wG/EgnBd1f2F
GC6+kBYPqRvv/MNnfUiuGkN9MxS/cx6y470m/wIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFPlAn+319eWoLhMEyaN6Ajclb3iMMB8GA1UdIwQYMBaAFJVYZFj/COXKpL7h
Bfo12EOK6DWoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ3ZTcw
ZDI0ZDdjMmFiZjhmNzAxYjQ4YTFkY2YwNjIwNTliMmJiZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjRhZjQwNDUtYTE0YS00NjEzLWExOTItYjgzYjQw
MTQ5Y2VmLzNkNjZjOTkzMWVhMjI3ODkxOTlmZjY3OTc2MGEyYTIxNzU4OGFhODku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNGFmNDA0NS1hMTRhLTQ2MTMtYTE5Mi1iODNi
NDAxNDljZWYvOTQ3ZTcwZDI0ZDdjMmFiZjhmNzAxYjQ4YTFkY2YwNjIwNTliMmJi
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwFAQCAAEwDjAMAwQFvm4gAwQAvm4iMA0EAgACMAcDBQAoA+YQMA0GCSqGSIb3
DQEBCwUAA4IBAQBW6r5fa92Q7KQsZORAieu8T6nSm1MAv6iDcpt/lAdmbFR5I+1A
J9mqDxpC9KLzI0jFZsMTfNrqbSdmUbdtKEyYXxk7pORl3snyAAZZP2Mu58ZWt04W
rf/4gg8ZZIGb4boqFBE+OYOvpjQV3t3FlY8J7Ee7CykLpXgd6Jdzhbu5xjb60G2J
k8l6nxd3gxqRjGuCpMX9v65hYYO00cQtnxWWjAhFPXHQUD/3uK44js5D+HMdlVtr
t65vGGl/m3ZHgfvQiDS7W38PfzqLUa3yNllWkMv+GSFiKJm7u/5WBRB3IuuHJYEq
xajOemNtwtDakg5CVRu/VRdn409tkwa0KrwN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org