Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c4affb502741007724718e2d03d8b7ece3130856.roa
File: c4affb502741007724718e2d03d8b7ece3130856.roa (raw, json)
Hash identifier: nyJVdJL5/lpwFI4hRx/Qbb5SUAjjPeGKj6dli3ueVQM=
Subject key identifier: A6:C1:D0:DB:49:D6:26:0A:1A:DB:B7:94:D4:1C:17:54:65:02:72:B8
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 14275C
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c4affb502741007724718e2d03d8b7ece3130856.roa
Signing time: Tue 16 Nov 2021 17:38:21 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 263834
IP address blocks: 190.110.224.0/21 maxlen: 21
190.110.224.0/22 maxlen: 22
190.110.228.0/22 maxlen: 22
190.110.224.0/23 maxlen: 23
190.110.226.0/23 maxlen: 23
190.110.228.0/23 maxlen: 23
190.110.230.0/23 maxlen: 23
190.110.224.0/24 maxlen: 24
190.110.225.0/24 maxlen: 24
190.110.226.0/24 maxlen: 24
190.110.227.0/24 maxlen: 24
190.110.228.0/24 maxlen: 24
190.110.229.0/24 maxlen: 24
190.110.230.0/24 maxlen: 24
190.110.231.0/24 maxlen: 24
190.110.232.0/22 maxlen: 22
190.110.232.0/23 maxlen: 23
190.110.234.0/23 maxlen: 23
190.110.232.0/24 maxlen: 24
190.110.233.0/24 maxlen: 24
190.110.234.0/24 maxlen: 24
190.110.235.0/24 maxlen: 24
190.110.238.0/24 maxlen: 24
190.110.253.0/24 maxlen: 24
190.110.254.0/23 maxlen: 23
190.110.254.0/24 maxlen: 24
190.110.255.0/24 maxlen: 24
200.123.48.0/24 maxlen: 24
200.123.48.0/24 maxlen: 24
200.123.56.0/23 maxlen: 23
200.123.56.0/24 maxlen: 24
200.123.57.0/24 maxlen: 24
200.123.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1320796 (0x14275c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=c4affb502741007724718e2d03d8b7ece3130856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:49:bc:fe:01:a7:c2:f8:e1:e4:e6:f6:08:
c9:5c:fe:fc:56:2e:43:74:f7:6c:6a:35:39:0a:55:
04:2c:35:6d:3d:52:1e:50:cd:cc:4f:7b:4c:28:d2:
e1:8f:96:b6:35:98:71:11:9b:c2:03:16:b2:33:78:
a0:0a:da:9f:a1:ca:19:d6:53:8c:dc:a0:aa:6d:fd:
8c:28:9b:78:68:d3:14:0a:5b:d6:4f:3f:b5:ba:a8:
ae:c0:cc:03:db:17:46:da:67:fb:9e:89:62:64:25:
b2:44:05:f6:9a:00:88:be:72:1a:04:7a:db:a7:fb:
84:a3:df:4d:25:b9:eb:26:b5:dd:ba:e6:aa:b4:dc:
cf:e1:e6:83:10:b9:5c:51:6a:5d:25:07:40:23:e0:
7a:8d:2b:ac:24:2b:e2:ad:be:ac:14:7a:af:da:26:
7f:5a:74:de:56:f4:fc:7a:3a:21:b6:2b:ea:fd:f5:
26:d8:e0:df:3c:39:3c:13:17:7a:99:bb:55:d6:1f:
55:5c:d8:4d:6e:02:bd:bf:67:03:17:aa:23:b1:0c:
41:5d:65:1c:a4:4f:1f:02:fd:77:84:57:95:69:e6:
b2:2b:61:22:f3:3f:fc:31:8e:bd:0a:d1:13:fa:11:
3f:98:13:d9:95:1b:aa:12:6a:ff:62:96:7b:0a:af:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C1:D0:DB:49:D6:26:0A:1A:DB:B7:94:D4:1C:17:54:65:02:72:B8
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c4affb502741007724718e2d03d8b7ece3130856.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.224.0-190.110.235.255
190.110.238.0/24
190.110.253.0-190.110.255.255
200.123.48.0/24
200.123.56.0-200.123.58.255
Signature Algorithm: sha256WithRSAEncryption
3d:3e:ca:18:c2:52:b9:a9:2d:c3:ff:b5:8d:f6:62:83:fd:f9:
e3:b9:4c:02:40:b2:5b:63:1f:4c:fd:d3:c9:c4:b6:39:8b:70:
60:af:1c:77:1c:ec:b5:22:12:ac:46:77:69:d4:b0:66:9d:50:
62:e7:56:09:d7:d7:02:02:53:9d:fb:9e:05:43:3d:f2:65:50:
2c:10:0e:89:f1:2f:a9:f7:89:2a:a0:02:3f:b9:79:dc:b5:7e:
0e:ff:55:fb:6c:b8:b1:e5:c0:60:d8:c3:ee:bd:1d:62:61:62:
e5:9b:93:96:bb:f6:2a:28:39:ce:76:05:e3:49:87:f5:c2:3f:
f1:93:33:93:c4:ef:a8:cf:c4:07:1f:ad:3f:96:48:24:49:46:
19:84:0e:d4:27:78:dd:12:ad:eb:62:51:9d:f0:de:fe:3c:17:
cb:5a:9a:f0:c6:6e:ed:18:b2:ab:77:77:da:6a:a2:44:cf:cd:
c9:26:e2:48:e6:6c:8e:31:64:4c:71:e1:1e:a0:ab:06:9c:9d:
94:f6:9f:5b:39:cf:88:9c:4b:04:7f:05:22:42:96:a8:24:4f:
22:5e:79:2e:2b:9c:31:1a:12:9f:2f:d5:a1:ea:4d:64:99:c6:
02:ed:00:cc:ba:b0:2f:5a:bb:0c:40:3d:b3:ae:88:e8:ea:c1:
53:1b:8e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org