Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/d279a20a51c7b08a71a5df1db2207c699c9d2ecc.roa
File: d279a20a51c7b08a71a5df1db2207c699c9d2ecc.roa (raw, json)
Hash identifier: 5sNrdCYZDr36Khcm5krOFqbsYTz8m6td5/5DHNjHEQE=
Subject key identifier: F7:39:3C:52:20:A9:4F:99:4E:54:16:99:AF:47:52:AD:F6:FA:83:73
Certificate issuer: /CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
Certificate serial: 19F8F6
Authority key identifier: 2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/d279a20a51c7b08a71a5df1db2207c699c9d2ecc.roa
Signing time: Mon 24 Oct 2022 11:37:47 +0000
ROA not before: Tue 23 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 269827
IP address blocks: 190.97.237.0/24 maxlen: 24
190.97.243.0/24 maxlen: 24
2803:d760:c000::/34 maxlen: 34
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702134 (0x19f8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
Validity
Not Before: Mar 23 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=d279a20a51c7b08a71a5df1db2207c699c9d2ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4f:1f:8a:ed:fd:cd:9f:41:db:2c:29:03:ef:
71:c5:5a:8e:e6:88:f3:0f:a7:94:2a:cc:fa:89:1b:
c5:b9:ad:5e:0f:55:22:f5:5b:b2:75:b3:f0:ca:88:
86:c5:46:40:55:b9:b1:9e:f0:f5:38:50:6e:56:fd:
95:9e:bc:6a:cd:9a:e4:17:c5:5c:d7:29:09:35:8f:
94:96:7e:7e:40:a8:bf:3c:fd:43:de:cf:be:54:70:
38:0c:8b:63:5a:ac:81:84:01:de:19:ea:fc:92:c7:
95:ba:71:10:8a:c0:d7:31:4f:c9:51:b4:83:00:67:
02:06:c8:3e:30:5d:ec:da:6e:ec:1f:3c:f0:b6:64:
c6:17:56:04:b7:4d:e4:a0:5e:78:fb:b3:10:05:9e:
8d:e2:26:87:35:99:9b:2e:1d:c3:7c:e5:ce:6d:67:
ad:c7:60:5d:6d:ed:35:2a:bb:d2:0a:bc:49:16:74:
d9:4c:c7:30:c3:cf:22:8c:74:5a:d0:3d:76:40:d4:
14:28:fa:63:e4:dd:ac:4d:00:89:30:79:b3:a4:e0:
2e:c2:ca:6c:5a:c0:e6:c8:fa:d2:19:20:30:d4:cd:
f5:14:ea:84:b9:b8:39:a5:ce:17:96:7c:c4:2e:1e:
0f:93:b2:4a:ec:bc:55:39:aa:90:17:fe:3a:c2:87:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:39:3C:52:20:A9:4F:99:4E:54:16:99:AF:47:52:AD:F6:FA:83:73
X509v3 Authority Key Identifier:
keyid:2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/d279a20a51c7b08a71a5df1db2207c699c9d2ecc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.97.237.0/24
190.97.243.0/24
IPv6:
2803:d760:c000::/34
Signature Algorithm: sha256WithRSAEncryption
18:1e:bc:f5:84:7f:a1:2c:5c:dc:3c:cb:a2:e3:b1:b2:50:92:
25:f6:d5:f6:30:db:a9:98:7d:bb:de:7c:13:16:91:b1:0e:cd:
5b:37:82:b6:3b:fd:12:6c:35:5e:3d:b6:87:18:1c:51:29:26:
0a:cd:56:80:77:76:43:25:16:45:ab:af:87:93:21:97:42:02:
89:20:cb:90:c5:21:bb:57:b6:c4:61:c1:b7:70:b6:06:7f:5f:
9e:dd:79:c3:17:d5:da:1c:9c:b0:d3:39:12:a1:c1:92:d3:51:
19:40:a2:cf:14:23:05:9e:20:dc:9e:d2:f2:f3:5b:90:7f:c3:
9e:a9:ef:7d:96:2c:b7:9f:73:4f:12:30:6d:1f:e2:de:25:a1:
c5:44:07:2e:c4:11:9d:33:eb:73:f2:e4:e9:39:33:a9:9d:0f:
42:f3:86:16:6d:da:71:9a:4d:13:69:fd:e0:b6:d6:13:b7:12:
16:9f:6b:2a:1c:d4:25:97:0c:4b:f4:ff:c2:32:b1:55:08:24:
97:af:94:06:75:41:6d:a0:37:3b:28:56:25:d9:42:cd:e8:34:
1e:32:63:f7:5d:e2:94:33:e0:03:ce:cf:30:c6:07:14:8d:3d:
ee:31:0a:f9:60:f1:24:88:54:a4:1c:10:8e:91:b5:b9:ba:f8:
f3:b0:54:92
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIDGfj2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNj
OWJiYzYxMzA5Y2ViNmMyY2YyYTNlNDFmZGUzNWFiZWEyYmQyYzEwHhcNMjEwMzIz
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhkMjc5YTIwYTUxYzdi
MDhhNzFhNWRmMWRiMjIwN2M2OTljOWQyZWNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAik8fiu39zZ9B2ywpA+9xxVqO5ojzD6eUKsz6iRvFua1eD1Ui
9VuydbPwyoiGxUZAVbmxnvD1OFBuVv2VnrxqzZrkF8Vc1ykJNY+Uln5+QKi/PP1D
3s++VHA4DItjWqyBhAHeGer8kseVunEQisDXMU/JUbSDAGcCBsg+MF3s2m7sHzzw
tmTGF1YEt03koF54+7MQBZ6N4iaHNZmbLh3DfOXObWetx2Bdbe01KrvSCrxJFnTZ
TMcww88ijHRa0D12QNQUKPpj5N2sTQCJMHmzpOAuwspsWsDmyPrSGSAw1M31FOqE
ubg5pc4XlnzELh4Pk7JK7LxVOaqQF/46wofvRwIDAQABo4ICcTCCAm0wHQYDVR0O
BBYEFPc5PFIgqU+ZTlQWma9HUq32+oNzMB8GA1UdIwQYMBaAFC1C7rgpUmiID+FH
G0E/H3YF0GfAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2M5YmJj
NjEzMDljZWI2YzJjZjJhM2U0MWZkZTM1YWJlYTJiZDJjMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2RjMjMwNTUtOTQ2Ni00OTVlLTk3OTgtMzdhMzNm
NTBjMTM3L2QyNzlhMjBhNTFjN2IwOGE3MWE1ZGYxZGIyMjA3YzY5OWM5ZDJlY2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zZGMyMzA1NS05NDY2LTQ5NWUtOTc5OC0zN2Ez
M2Y1MGMxMzcvY2M5YmJjNjEzMDljZWI2YzJjZjJhM2U0MWZkZTM1YWJlYTJiZDJj
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1BggrBgEFBQcBBwEB/wQm
MCQwEgQCAAEwDAMEAL5h7QMEAL5h8zAOBAIAAjAIAwYGKAPXYMAwDQYJKoZIhvcN
AQELBQADggEBABgevPWEf6EsXNw8y6LjsbJQkiX21fYw26mYfbvefBMWkbEOzVs3
grY7/RJsNV49tocYHFEpJgrNVoB3dkMlFkWrr4eTIZdCAokgy5DFIbtXtsRhwbdw
tgZ/X57decMX1docnLDTORKhwZLTURlAos8UIwWeINye0vLzW5B/w56p732WLLef
c08SMG0f4t4locVEBy7EEZ0z63Py5Ok5M6mdD0LzhhZt2nGaTRNp/eC21hO3Ehaf
ayoc1CWXDEv0/8IysVUIJJevlAZ1QW2gNzsoViXZQs3oNB4yY/dd4pQz4APOzzDG
BxSNPe4xCvlg8SSIVKQcEI6Rtbm6+POwVJI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-ams.rpki-client.org