Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8be300231aa7a1503a99b37fa90bf0e2fc802a05.roa
File: 8be300231aa7a1503a99b37fa90bf0e2fc802a05.roa (raw, json)
Hash identifier: Urz6xUC6UUXkaXvYsz6yNgpLgk9SsoiErjAyAtg5LSM=
Subject key identifier: 57:9C:9A:6E:34:F2:0A:0C:4A:E4:A9:D8:6D:80:00:1B:A2:48:78:5D
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 1DBF40
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8be300231aa7a1503a99b37fa90bf0e2fc802a05.roa
Signing time: Fri 18 Nov 2022 00:18:24 +0000
ROA not before: Mon 22 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 263834
IP address blocks: 190.110.224.0/21 maxlen: 21
190.110.224.0/22 maxlen: 22
190.110.228.0/22 maxlen: 22
190.110.224.0/23 maxlen: 23
190.110.226.0/23 maxlen: 23
190.110.228.0/23 maxlen: 23
190.110.230.0/23 maxlen: 23
190.110.224.0/24 maxlen: 24
190.110.225.0/24 maxlen: 24
190.110.226.0/24 maxlen: 24
190.110.227.0/24 maxlen: 24
190.110.228.0/24 maxlen: 24
190.110.229.0/24 maxlen: 24
190.110.230.0/24 maxlen: 24
190.110.231.0/24 maxlen: 24
190.110.238.0/24 maxlen: 24
190.110.253.0/24 maxlen: 24
200.123.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1949504 (0x1dbf40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Mar 22 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=8be300231aa7a1503a99b37fa90bf0e2fc802a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fb:73:ef:1d:c9:f5:ea:dc:cd:cc:b1:e1:9f:
a1:e5:79:f6:29:1e:72:c4:4c:b4:e0:6f:34:80:bf:
6c:c5:8f:09:91:10:5a:19:13:b6:b6:78:25:31:b4:
e2:b6:ca:a9:bd:c6:07:f1:ec:58:54:a9:80:7d:03:
0a:b7:f1:9c:8f:a2:05:db:2e:ec:31:7a:36:53:31:
eb:79:23:2f:54:54:6b:27:e6:6f:46:2a:b7:07:30:
96:a9:8b:ed:8a:6d:5f:35:32:31:17:bc:4f:eb:fd:
e4:1b:ef:89:17:41:16:b8:45:01:bb:43:4a:c4:cd:
5f:56:cc:3c:74:e5:5d:2c:cc:d8:4a:b8:f1:62:03:
05:13:7f:8d:21:59:c6:cd:f1:f6:9a:19:e8:f1:6f:
c9:c3:a3:30:fc:c4:f0:5b:30:f7:54:0f:2a:c2:b9:
d6:26:7d:4b:e7:51:ba:fc:c2:ae:68:87:dd:91:ed:
9a:05:e4:e8:41:0a:7c:23:33:a9:08:20:53:2e:be:
02:91:aa:be:8f:68:ba:84:35:74:c8:61:21:87:2a:
31:cf:94:42:7c:58:ed:e9:95:be:bd:42:b8:e3:46:
de:a9:56:26:63:7d:5f:76:fd:a2:28:b0:15:7b:51:
74:d6:ab:7f:62:e9:28:76:59:64:60:4d:7e:45:57:
df:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9C:9A:6E:34:F2:0A:0C:4A:E4:A9:D8:6D:80:00:1B:A2:48:78:5D
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8be300231aa7a1503a99b37fa90bf0e2fc802a05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.224.0/21
190.110.238.0/24
190.110.253.0/24
200.123.48.0/24
Signature Algorithm: sha256WithRSAEncryption
41:2c:11:a9:2a:08:09:dc:39:84:a2:5a:bf:09:3b:c5:03:d5:
39:a0:a7:50:7b:86:95:48:c7:bf:10:b6:96:28:c2:4c:3c:7b:
68:71:21:42:1b:b9:3e:8a:85:4a:7f:f3:bd:1d:5d:ea:9f:43:
7c:41:7e:1b:2e:5b:3f:f3:69:8b:dc:d4:3f:b1:3b:83:cb:b0:
34:71:5c:08:4d:0c:f6:a1:4c:ce:3e:f1:95:47:0a:b2:44:d0:
47:af:69:10:f8:e2:6b:7f:49:d0:49:c6:ec:96:e9:7d:e1:cb:
cb:7f:a0:39:d8:d3:34:da:bb:34:e0:cc:38:4a:5a:20:4a:5c:
29:61:4d:8d:4c:dd:8a:47:10:64:ef:74:ab:08:9d:fb:55:dd:
58:5f:de:0a:d1:52:5c:0a:fd:a1:a4:3b:bb:94:e4:c0:8a:cf:
4d:58:28:61:15:37:fd:5e:1e:33:f6:5b:ba:da:0d:cd:89:36:
42:46:eb:2c:de:47:58:64:b1:2e:c0:6a:16:1f:c3:75:d7:05:
0e:29:89:e9:91:f6:39:d5:d3:c4:12:14:08:09:77:32:4b:60:
36:60:c2:fe:f5:11:6a:71:c9:e7:9b:79:bb:e7:1d:de:32:82:
b6:3c:df:54:2f:64:52:51:6b:a8:77:fc:bf:fc:60:b9:64:01:
b9:33:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-ams.rpki-client.org