Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/9598b66ca8addbaf6e19e7caaa6970d5ea65db29.roa
File: 9598b66ca8addbaf6e19e7caaa6970d5ea65db29.roa (raw, json)
Hash identifier: XHBD9ZLRORjEbaDa7djaBFVvG4tXeXWKk2PTdK8kL0U=
Subject key identifier: 90:88:22:C7:A3:81:2D:25:2D:1C:84:A0:C0:38:37:70:66:96:5E:B9
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 1365A7
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/9598b66ca8addbaf6e19e7caaa6970d5ea65db29.roa
Signing time: Tue 09 Nov 2021 04:18:42 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Mon 24 Mar 2036 03:00:00 +0000
asID: 52312
IP address blocks: 190.110.236.0/23 maxlen: 23
190.110.236.0/24 maxlen: 24
190.110.237.0/24 maxlen: 24
190.110.240.0/21 maxlen: 21
190.110.240.0/22 maxlen: 22
190.110.244.0/22 maxlen: 22
190.110.240.0/23 maxlen: 23
190.110.242.0/23 maxlen: 23
190.110.244.0/23 maxlen: 23
190.110.246.0/23 maxlen: 23
190.110.240.0/24 maxlen: 24
190.110.241.0/24 maxlen: 24
190.110.242.0/24 maxlen: 24
190.110.243.0/24 maxlen: 24
190.110.244.0/24 maxlen: 24
190.110.245.0/24 maxlen: 24
190.110.246.0/24 maxlen: 24
190.110.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1271207 (0x1365a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2036 GMT
Subject: CN=9598b66ca8addbaf6e19e7caaa6970d5ea65db29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:36:92:aa:c7:23:b3:f7:39:f5:b2:04:4c:0c:
89:30:38:37:29:ea:1f:58:34:77:7d:bd:6c:1d:e6:
76:7e:de:b3:9e:9d:9f:a8:42:13:8d:18:06:48:00:
4c:62:1c:b4:27:d8:b3:72:f9:90:0e:b7:8f:04:9b:
69:02:64:a9:10:b4:39:35:4f:b1:ea:0a:b1:b3:71:
ad:e4:09:99:cf:78:2c:c5:aa:07:67:98:07:92:c0:
a5:84:36:25:ef:1f:ad:1f:9a:a5:4c:9c:6a:77:40:
76:97:1f:2a:81:a3:25:da:31:8a:cc:9a:e8:50:f3:
8c:75:7d:17:a6:b5:43:a1:1a:5d:bc:dc:92:cb:2d:
22:9a:f1:41:8c:d9:7e:64:62:59:c6:26:fc:0b:fe:
a3:fa:6f:ba:fb:fb:4c:c6:8f:d4:14:09:fd:3e:03:
fd:3e:a3:0d:19:00:c6:a7:bd:e4:1c:28:33:51:ae:
18:47:c6:87:39:eb:57:27:0e:18:ae:55:39:26:f7:
c5:c3:c3:64:0e:4d:64:c3:22:07:9d:b2:b1:2e:fa:
2e:71:93:52:f6:2c:f9:75:c9:53:0e:c1:c2:38:66:
7d:48:03:8b:d2:7a:a5:f2:e4:4e:b3:53:9a:96:18:
3b:ee:7d:99:2d:eb:5f:85:03:8a:d8:d5:fd:c6:14:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:88:22:C7:A3:81:2D:25:2D:1C:84:A0:C0:38:37:70:66:96:5E:B9
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/9598b66ca8addbaf6e19e7caaa6970d5ea65db29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.236.0/23
190.110.240.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:d3:7f:5f:18:18:db:b0:ca:03:0f:27:8a:e9:25:5e:c3:cd:
d0:b6:55:8c:18:01:5b:04:0a:41:11:86:bf:a1:b6:03:d5:1e:
94:04:9c:92:1a:77:10:97:20:8f:80:bb:01:33:8f:bb:ff:f6:
89:57:8d:ac:61:9c:d0:47:3a:7c:bd:f7:2a:99:7b:65:76:4a:
5d:32:d6:7e:67:39:c0:5a:22:a0:57:b2:73:f4:a3:93:ca:49:
24:9b:f4:c2:bc:a5:a7:32:1f:bf:46:bc:e9:99:1b:66:39:49:
a0:d9:cf:6a:33:52:f5:de:8b:86:f1:ba:c7:cd:3b:c5:61:d0:
c2:c5:db:d3:ed:4d:5b:7e:2c:33:64:7b:a0:be:de:a2:8d:bc:
36:9b:fe:1e:10:ea:49:33:09:39:ac:af:4d:4f:dc:fb:25:0d:
b4:3c:86:e9:1a:95:54:4a:27:e0:b0:27:53:99:6b:ca:1a:81:
62:2d:e7:c8:0e:fa:30:4f:f6:3c:5f:37:c8:2a:91:6d:71:5c:
35:48:5d:f7:30:c4:c4:14:d3:81:fe:a9:2f:40:a9:6f:68:9d:
3e:06:6a:37:6e:20:ea:ff:a1:ef:22:cd:d0:1f:95:ca:25:39:
59:ea:d7:7a:34:96:59:72:30:01:a6:67:ee:75:f7:2c:f1:5f:
b1:e9:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org