Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d56ce33922196a7915ef30fda7bcee68729d7740.roa
File: d56ce33922196a7915ef30fda7bcee68729d7740.roa (raw, json)
Hash identifier: bBuf6tV3LH1J7GgGJ1yMxanlh4lu5TOZk3NbyxMlq9Q=
Subject key identifier: 0D:5A:77:6D:69:5D:8E:19:01:EF:B3:E6:EE:AD:31:E5:59:25:37:CF
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 1FE291
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d56ce33922196a7915ef30fda7bcee68729d7740.roa
Signing time: Wed 08 Feb 2023 21:30:23 +0000
ROA not before: Fri 19 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 263834
IP address blocks: 190.110.228.0/22 maxlen: 22
190.110.228.0/23 maxlen: 23
190.110.230.0/23 maxlen: 23
190.110.228.0/24 maxlen: 24
190.110.229.0/24 maxlen: 24
190.110.230.0/24 maxlen: 24
190.110.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2089617 (0x1fe291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Mar 19 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=d56ce33922196a7915ef30fda7bcee68729d7740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7c:89:da:ef:12:fe:33:2e:fd:07:f0:db:3b:
22:8c:cb:51:24:6c:d1:a6:b5:5d:a3:0f:b8:9b:f0:
5a:b4:3f:fd:71:b0:37:5d:44:e6:c0:43:f1:07:fd:
ee:12:15:5e:be:7a:df:93:4c:0d:2d:c1:0e:1f:78:
2a:52:ff:dd:cf:9e:0e:d7:a3:a7:dd:c3:4d:5a:1f:
bb:6d:cc:ae:54:e3:0d:0d:76:6a:58:33:33:30:f6:
99:2b:58:85:e6:2a:5e:2f:ad:1c:9a:5f:17:4f:ba:
36:cd:df:f6:54:02:5b:c2:df:b3:d7:51:fc:a3:e5:
ef:cf:4f:06:5e:77:3f:dd:42:6c:02:73:c5:10:b2:
ae:7c:45:a3:69:7e:d5:14:53:a2:2c:d6:ab:51:d2:
39:87:d2:db:68:18:38:fd:7e:30:76:d6:3d:c3:90:
4d:d9:4a:6e:a5:9b:eb:34:b4:87:51:a0:f0:d2:6e:
b2:ea:a3:bf:b2:60:66:be:c6:2f:87:9a:4e:12:a7:
b0:76:26:fd:92:dd:27:35:9e:d2:e8:75:06:a0:87:
04:2b:3f:13:d8:f4:13:1c:ca:4b:d8:22:a8:f0:4b:
61:5e:27:e7:46:fc:54:f8:e5:96:b3:c4:63:28:ce:
7f:51:4f:a4:80:75:7d:90:f4:3d:4c:ff:ca:27:b2:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5A:77:6D:69:5D:8E:19:01:EF:B3:E6:EE:AD:31:E5:59:25:37:CF
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/d56ce33922196a7915ef30fda7bcee68729d7740.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.228.0/22
Signature Algorithm: sha256WithRSAEncryption
26:11:c3:1d:4c:45:e3:a0:da:95:e2:9d:73:b9:34:e4:fe:b6:
ae:e4:c5:d6:4c:0a:ca:65:4a:10:0f:fb:55:78:ca:32:79:ef:
1d:68:21:f5:4c:61:ca:48:9f:fa:38:99:90:be:91:ff:9e:8e:
e0:c6:59:cc:a0:2e:8b:d9:d6:24:01:1c:77:5e:9e:fd:cf:9b:
3b:4e:d0:15:e7:b5:95:d8:21:e8:24:92:6a:b1:d2:5b:7e:46:
14:d1:78:63:10:bc:a1:88:87:65:d3:9f:60:d6:c7:41:ab:9c:
aa:40:6f:6a:28:e6:67:f0:96:c3:34:e6:c2:44:01:20:d9:2c:
9d:00:9b:7f:2e:19:51:bd:30:42:56:85:94:ae:84:16:18:cd:
a0:83:d0:72:cd:5d:c3:bc:12:7c:02:c9:2c:51:54:b1:8a:4e:
99:7b:e9:9b:f2:90:39:81:c6:67:08:31:a6:d8:bf:80:46:a1:
a3:a0:cf:e2:75:cb:7c:51:d0:5f:f5:ee:76:7b:21:17:64:57:
8a:e7:4c:6f:4d:06:12:0f:ca:33:45:65:3e:32:f8:3c:aa:0c:
f5:9b:ee:bf:b9:f8:5e:b6:23:31:f2:8e:73:47:ab:5b:de:e9:
ec:c3:cc:ab:41:2e:92:cf:24:48:7a:d7:2f:8c:af:6c:47:7a:
b6:92:4d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org