Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/1eddd36dc03149eea1ed88652f35f6e38b98c5a9.roa
File: 1eddd36dc03149eea1ed88652f35f6e38b98c5a9.roa (raw, json)
Hash identifier: HnlcoIg7pFiv/LKcHHX+bNGUGn9vQSJ9Tr+pkP9zu/g=
Subject key identifier: 20:DC:F4:FC:E8:E1:76:2B:49:91:EF:C7:C0:2F:2A:FC:28:38:77:43
Certificate issuer: /CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Certificate serial: 0D5231
Authority key identifier: C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/1eddd36dc03149eea1ed88652f35f6e38b98c5a9.roa
Signing time: Thu 25 Mar 2021 17:05:10 +0000
ROA not before: Thu 25 Mar 2021 03:00:00 +0000
ROA not after: Wed 25 Mar 2026 03:00:00 +0000
asID: 262168
IP address blocks: 200.115.20.0/24 maxlen: 24
200.115.21.0/24 maxlen: 24
200.115.23.0/24 maxlen: 24
138.117.160.0/24 maxlen: 24
138.117.161.0/24 maxlen: 24
138.117.162.0/24 maxlen: 24
138.117.163.0/24 maxlen: 24
179.49.65.0/24 maxlen: 24
179.49.66.0/24 maxlen: 24
179.49.67.0/24 maxlen: 24
179.49.68.0/24 maxlen: 24
179.49.69.0/24 maxlen: 24
179.49.70.0/24 maxlen: 24
179.49.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873009 (0xd5231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Validity
Not Before: Mar 25 03:00:00 2021 GMT
Not After : Mar 25 03:00:00 2026 GMT
Subject: CN=1eddd36dc03149eea1ed88652f35f6e38b98c5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:91:2f:fd:42:86:54:a3:f9:b0:76:72:99:b7:
39:8a:f8:5a:5f:43:d4:4c:ed:56:6a:7d:cd:4e:c0:
9c:53:d3:25:32:d4:03:d5:8c:5f:f2:32:4f:c1:09:
18:5d:2c:0c:05:0a:91:26:b8:5d:f7:3d:a3:2a:08:
32:1a:e1:81:2f:40:ae:42:2b:a5:14:53:2f:d6:0e:
27:3e:dd:08:69:2a:ea:95:92:6e:fb:d4:d0:db:44:
aa:2c:6e:c6:ac:0e:36:50:8e:a1:04:de:17:65:1a:
b6:31:a7:1c:0b:09:22:aa:3a:e1:3b:c8:ad:37:01:
13:87:b5:7c:52:db:3a:71:52:80:ab:4f:2c:9b:a3:
b2:06:7b:08:8e:e8:43:e8:f4:a2:b5:e5:43:58:c7:
00:1e:78:74:0d:13:1e:ea:1b:03:9d:f6:6f:7f:e0:
94:06:c7:24:1c:b8:70:85:7e:a8:a0:ff:dd:95:98:
fe:04:9e:29:88:b1:da:02:69:d8:68:3e:72:1d:2a:
e0:dc:fc:0d:78:b3:35:d6:27:39:34:c8:16:8f:b6:
52:59:1b:3b:d7:83:d7:93:25:02:1d:2d:eb:6e:75:
e5:5c:b6:78:7a:c6:25:d7:aa:18:51:ab:9a:8c:5d:
e7:d2:75:0b:eb:9f:1f:d7:87:9c:09:e5:a7:83:02:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DC:F4:FC:E8:E1:76:2B:49:91:EF:C7:C0:2F:2A:FC:28:38:77:43
X509v3 Authority Key Identifier:
keyid:C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/1eddd36dc03149eea1ed88652f35f6e38b98c5a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.160.0/22
179.49.65.0-179.49.71.255
200.115.20.0/23
200.115.23.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1d:34:3f:bc:84:77:ac:61:68:06:cc:07:96:08:56:56:b9:
9a:fa:f4:3e:33:8e:5a:32:4a:b1:97:14:2d:27:05:0b:81:a7:
90:26:fd:26:9a:16:3d:0c:2d:fd:6b:68:18:e7:25:d1:56:58:
1b:c0:dd:ec:5a:38:89:2c:39:de:b4:c8:48:26:3e:49:a1:dc:
7c:5c:6a:c9:58:99:2e:81:47:da:18:98:60:3d:4c:e3:59:b2:
04:7f:04:7a:58:28:65:ab:cf:32:52:d0:40:b6:3e:ee:49:54:
a3:ac:e4:09:82:ee:e1:47:07:5b:97:8a:5d:c1:6e:e1:b5:57:
82:63:36:3d:42:07:e3:60:3f:64:f4:fb:26:b1:49:47:a1:d7:
14:07:fc:9d:37:0c:73:5d:df:78:36:eb:6a:89:e1:58:2f:eb:
20:7a:de:10:2c:ca:02:61:52:a4:4d:9e:90:2f:c6:be:fa:eb:
98:f4:c6:be:e6:33:57:40:63:1b:3c:ad:9f:ee:6e:7d:db:fb:
b3:14:1a:a5:ff:a8:a1:29:b7:25:63:41:48:00:ec:b8:c0:51:
cd:72:ea:a3:a7:a8:47:ea:ff:df:cc:82:1b:40:1a:46:c9:63:
4c:a0:4b:9d:e4:94:31:50:0a:30:20:20:08:8d:55:fb:42:03:
90:29:3e:fa
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIDDVIxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUz
ZmUyNTdkY2Y4YmNhNGVhNWM2MTM2ODA0MDBhOWNmNDk1Y2FjY2IwHhcNMjEwMzI1
MDMwMDAwWhcNMjYwMzI1MDMwMDAwWjAzMTEwLwYDVQQDEygxZWRkZDM2ZGMwMzE0
OWVlYTFlZDg4NjUyZjM1ZjZlMzhiOThjNWE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi5Ev/UKGVKP5sHZymbc5ivhaX0PUTO1Wan3NTsCcU9MlMtQD
1Yxf8jJPwQkYXSwMBQqRJrhd9z2jKggyGuGBL0CuQiulFFMv1g4nPt0IaSrqlZJu
+9TQ20SqLG7GrA42UI6hBN4XZRq2MaccCwkiqjrhO8itNwETh7V8Uts6cVKAq08s
m6OyBnsIjuhD6PSiteVDWMcAHnh0DRMe6hsDnfZvf+CUBsckHLhwhX6ooP/dlZj+
BJ4piLHaAmnYaD5yHSrg3PwNeLM11ic5NMgWj7ZSWRs714PXkyUCHS3rbnXlXLZ4
esYl16oYUauajF3n0nUL658f14ecCeWngwImhwIDAQABo4ICdTCCAnEwHQYDVR0O
BBYEFCDc9Pzo4XYrSZHvx8AvKvwoOHdDMB8GA1UdIwQYMBaAFMhlBHZfWwarteyF
LEzxhXZaiJhmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTNmZTI1
N2RjZjhiY2E0ZWE1YzYxMzY4MDQwMGE5Y2Y0OTVjYWNjYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjlmN2I5MzEtNGMzZi00ZGY4LTk5Y2QtYTg3M2Q5
OTJlMGEwLzFlZGRkMzZkYzAzMTQ5ZWVhMWVkODg2NTJmMzVmNmUzOGI5OGM1YTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yOWY3YjkzMS00YzNmLTRkZjgtOTljZC1hODcz
ZDk5MmUwYTAvNTNmZTI1N2RjZjhiY2E0ZWE1YzYxMzY4MDQwMGE5Y2Y0OTVjYWNj
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQq
MCgwJgQCAAEwIAMEAop1oDAMAwQAszFBAwQDszFAAwQByHMUAwQAyHMXMA0GCSqG
SIb3DQEBCwUAA4IBAQBbHTQ/vIR3rGFoBswHlghWVrma+vQ+M45aMkqxlxQtJwUL
gaeQJv0mmhY9DC39a2gY5yXRVlgbwN3sWjiJLDnetMhIJj5Jodx8XGrJWJkugUfa
GJhgPUzjWbIEfwR6WChlq88yUtBAtj7uSVSjrOQJgu7hRwdbl4pdwW7htVeCYzY9
QgfjYD9k9PsmsUlHodcUB/ydNwxzXd94NutqieFYL+sget4QLMoCYVKkTZ6QL8a+
+uuY9Ma+5jNXQGMbPK2f7m592/uzFBql/6ihKbclY0FIAOy4wFHNcuqjp6hH6v/f
zIIbQBpGyWNMoEud5JQxUAowICAIjVX7QgOQKT76
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:28 2023 by rpki-client on console-ams.rpki-client.org