Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/9bdf4613464fc8eeb9790aa624933a8260f1d795.roa
File: 9bdf4613464fc8eeb9790aa624933a8260f1d795.roa (raw, json)
Hash identifier: d0535U0DlTeDoZsbJ8w2cePn+4K4D+Ruxhv9uPSNwaY=
Subject key identifier: 23:45:80:6E:11:A9:45:A2:D1:97:AF:F9:42:9F:79:83:E1:26:DC:A8
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 1FE9B2
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/9bdf4613464fc8eeb9790aa624933a8260f1d795.roa
Signing time: Thu 09 Feb 2023 02:52:31 +0000
ROA not before: Tue 23 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 52399
IP address blocks: 190.114.102.0/24 maxlen: 24
200.50.191.0/24 maxlen: 24
190.110.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2091442 (0x1fe9b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Mar 23 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=9bdf4613464fc8eeb9790aa624933a8260f1d795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:04:9d:b5:57:c2:d0:0d:37:7c:ca:8b:1b:
cc:6b:64:cf:a9:20:b0:b1:d8:d7:56:71:de:ef:90:
0c:e7:fd:e6:22:ab:3e:f5:a0:80:83:89:47:6d:fc:
16:39:8d:52:51:0a:e9:57:3f:1c:68:27:fb:19:cb:
22:fd:47:13:7c:13:4c:fd:8a:52:45:0c:88:56:0a:
9c:ca:2d:40:16:d8:f1:17:2e:9e:f1:cb:f5:fd:53:
28:e5:dc:f1:09:21:85:a9:04:f5:77:dc:43:95:f5:
8b:58:bb:9f:08:48:31:ef:21:73:c9:59:ca:6f:1c:
6c:c5:e2:a2:05:7b:b9:db:e6:4e:4b:bd:32:40:b1:
1b:14:34:56:76:ea:1e:9e:dd:9d:65:e5:98:83:bb:
d5:3f:50:c8:0f:9d:10:5e:9d:f6:5e:e0:99:af:ba:
59:97:f9:9d:d6:10:bc:10:75:d6:8a:9c:9f:c8:a5:
f5:19:72:21:d1:1f:58:08:33:4f:ee:41:af:af:04:
90:6b:a3:c1:20:44:45:e4:89:03:15:f3:cc:38:3c:
c4:49:92:e3:dc:ce:40:4c:1b:dc:74:8f:56:aa:f7:
79:10:59:92:b2:bb:2e:73:7c:67:b4:27:33:69:08:
c9:df:96:d9:2d:ad:ad:61:3b:b4:63:01:00:8b:f8:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:80:6E:11:A9:45:A2:D1:97:AF:F9:42:9F:79:83:E1:26:DC:A8
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/9bdf4613464fc8eeb9790aa624933a8260f1d795.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.224.0/24
190.114.102.0/24
200.50.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:26:bc:e7:d2:96:ba:fe:a1:9b:1b:70:60:0f:9e:7d:93:34:
1f:8c:5b:a5:47:20:2f:7b:3b:8a:fa:1f:1d:6a:28:3d:6b:8c:
79:a1:0b:a3:0a:12:4d:bd:b5:d4:e4:cc:92:6a:d9:a4:9f:d4:
66:64:31:cd:7b:35:35:cd:e0:66:c1:c7:77:57:57:14:03:6c:
95:37:0b:41:67:9e:2a:71:5e:10:e7:70:ba:80:7e:dd:98:af:
58:80:b4:84:a5:67:42:c3:28:24:c7:e7:07:09:d3:85:2b:55:
e6:8c:70:a5:66:bc:7c:3b:a0:95:bf:67:ed:3c:d2:27:ed:61:
2b:e0:63:44:58:8d:99:6e:f1:09:d0:e5:57:2b:51:6d:b4:5d:
94:3e:70:61:ee:88:24:be:3b:47:37:7e:5d:e8:14:6e:7b:74:
99:27:6f:cc:6c:a9:81:50:f8:5e:ec:d8:18:ea:e9:97:d6:fd:
a8:97:68:05:ff:51:6d:98:16:eb:29:9c:bf:5a:c3:b8:3f:b3:
aa:ac:37:5f:6a:24:31:42:aa:5e:8b:f6:58:92:a4:41:64:ae:
a1:13:0a:89:00:f4:05:69:ab:96:2a:48:4a:05:a1:12:d9:76:
cb:63:ac:34:83:45:94:bd:d0:af:b4:41:4e:46:1c:3d:91:68:
e3:4d:d8:0a
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDH+myMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
YjdhNDNmYzMzYmZjN2ZmNWVhNTkyZGVjYWRkZTY0NTI4ODcwNWUwHhcNMjEwMzIz
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg5YmRmNDYxMzQ2NGZj
OGVlYjk3OTBhYTYyNDkzM2E4MjYwZjFkNzk1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvRAEnbVXwtANN3zKixvMa2TPqSCwsdjXVnHe75AM5/3mIqs+
9aCAg4lHbfwWOY1SUQrpVz8caCf7Gcsi/UcTfBNM/YpSRQyIVgqcyi1AFtjxFy6e
8cv1/VMo5dzxCSGFqQT1d9xDlfWLWLufCEgx7yFzyVnKbxxsxeKiBXu52+ZOS70y
QLEbFDRWduoent2dZeWYg7vVP1DID50QXp32XuCZr7pZl/md1hC8EHXWipyfyKX1
GXIh0R9YCDNP7kGvrwSQa6PBIERF5IkDFfPMODzESZLj3M5ATBvcdI9Wqvd5EFmS
srsuc3xntCczaQjJ35bZLa2tYTu0YwEAi/hNSQIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFCNFgG4RqUWi0Zev+UKfeYPhJtyoMB8GA1UdIwQYMBaAFMGk+QbXxWt9XjK0
PK4zar0RfTlWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNiN2E0
M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzliZGY0NjEzNDY0ZmM4ZWViOTc5MGFhNjI0OTMzYTgyNjBmMWQ3OTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvMzNiN2E0M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAL5u4AMEAL5yZgMEAMgyvzANBgkqhkiG9w0BAQsFAAOCAQEA
bSa859KWuv6hmxtwYA+efZM0H4xbpUcgL3s7ivofHWooPWuMeaELowoSTb211OTM
kmrZpJ/UZmQxzXs1Nc3gZsHHd1dXFANslTcLQWeeKnFeEOdwuoB+3ZivWIC0hKVn
QsMoJMfnBwnThStV5oxwpWa8fDuglb9n7TzSJ+1hK+BjRFiNmW7xCdDlVytRbbRd
lD5wYe6IJL47Rzd+XegUbnt0mSdvzGypgVD4XuzYGOrpl9b9qJdoBf9RbZgW6ymc
v1rDuD+zqqw3X2okMUKqXov2WJKkQWSuoRMKiQD0BWmrlipISgWhEtl2y2OsNINF
lL3Qr7RBTkYcPZFo403YCg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-ams.rpki-client.org