Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/3075ea14e3120811388d64bef852fae01a2982ad.roa
File: 3075ea14e3120811388d64bef852fae01a2982ad.roa (raw, json)
Hash identifier: UG4HfzD8uXKTj+VoptT9FkGIRqnO0jmTq/FW2NzqL1Y=
Subject key identifier: 3D:AC:B7:92:97:D8:75:CA:16:4B:7B:EC:BE:85:EF:37:8E:41:C2:9B
Certificate issuer: /CN=3a42a7b9520279dc23cca505fffe138c6e922475
Certificate serial: 0D66D0
Authority key identifier: 14:A5:D5:FB:37:98:45:41:6C:D0:23:61:A8:3A:8C:C7:DD:E5:D6:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a42a7b9520279dc23cca505fffe138c6e922475.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/3075ea14e3120811388d64bef852fae01a2982ad.roa
Signing time: Wed 24 Mar 2021 14:45:04 +0000
ROA not before: Wed 24 Mar 2021 14:45:04 +0000
ROA not after: Tue 24 Mar 2026 14:45:04 +0000
asID: 52468
IP address blocks: 190.107.208.0/22 maxlen: 24
170.80.16.0/22 maxlen: 24
2803:1e00::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 878288 (0xd66d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a42a7b9520279dc23cca505fffe138c6e922475
Validity
Not Before: Mar 24 14:45:04 2021 GMT
Not After : Mar 24 14:45:04 2026 GMT
Subject: CN=3075ea14e3120811388d64bef852fae01a2982ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:03:a5:0d:16:ee:0c:ed:cf:a9:3d:79:dd:ee:
a2:0c:b5:11:6f:05:66:e9:d4:a3:74:3d:00:a6:86:
5f:38:5b:ec:6c:e6:e0:f5:0e:61:7a:9e:83:8b:82:
85:2c:71:83:1a:15:72:c2:bd:f7:17:66:3c:76:24:
70:50:6c:ad:bb:98:d9:82:62:da:a1:34:8c:5e:10:
81:18:b2:0c:12:c3:fd:89:a1:a0:8f:67:76:8d:40:
f6:06:1d:0f:88:43:d0:36:7f:e3:ca:29:1a:c0:61:
63:e2:32:55:61:b2:77:f1:50:d2:2f:9b:19:3d:07:
7e:c5:7f:31:d6:b7:25:ad:30:67:9e:77:a4:f2:fd:
98:cd:9d:57:9a:2b:4a:c3:82:85:05:31:61:43:70:
c4:fb:3e:c7:95:0e:89:72:0a:0e:5f:83:ce:cd:d0:
47:d2:5a:85:c8:34:70:b9:c8:74:c9:02:79:96:72:
d3:9f:d3:57:a4:e5:fd:fa:f5:2f:cb:e7:68:e1:63:
56:4a:2a:72:79:78:0b:e8:46:27:f9:92:76:ab:d5:
3a:e2:6a:72:49:a3:9e:dd:89:08:94:c3:73:78:00:
1e:0a:b4:d5:be:dc:a6:4d:7b:dc:de:2a:7b:10:0b:
42:c0:aa:fc:3f:c5:7c:4e:63:21:ed:50:ec:f5:1d:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AC:B7:92:97:D8:75:CA:16:4B:7B:EC:BE:85:EF:37:8E:41:C2:9B
X509v3 Authority Key Identifier:
keyid:14:A5:D5:FB:37:98:45:41:6C:D0:23:61:A8:3A:8C:C7:DD:E5:D6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a42a7b9520279dc23cca505fffe138c6e922475.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/3075ea14e3120811388d64bef852fae01a2982ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4e4bb0bc-5224-4f6c-a765-a3a57c4572e7/3a42a7b9520279dc23cca505fffe138c6e922475.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.16.0/22
190.107.208.0/22
IPv6:
2803:1e00::/32
Signature Algorithm: sha256WithRSAEncryption
3b:c1:3f:3e:da:61:a7:a4:46:4d:16:33:8e:d7:53:af:aa:40:
b0:d1:a3:6d:f7:7b:1a:ff:3e:e6:7d:70:ad:c3:89:fa:ab:1e:
92:01:27:01:81:f9:57:7c:b5:c4:91:e8:1d:12:89:8f:ae:e7:
71:a6:9a:9c:c4:5a:57:45:e4:ea:3e:9f:67:57:a1:46:24:d9:
71:82:47:fb:79:83:11:82:44:4b:5c:07:37:51:37:71:af:55:
24:72:34:fc:cf:de:3d:c2:1a:00:75:8f:04:ed:b4:a8:83:87:
12:e4:b4:c4:b6:80:1c:02:70:12:09:e7:c1:49:8d:65:19:d9:
05:28:06:1c:be:2a:9d:21:9d:7a:b7:c0:8f:a6:01:70:9c:a1:
38:4f:d3:7f:e8:f6:02:53:7d:e5:2d:c5:05:6c:9f:5f:f7:32:
ab:cb:e9:d3:65:8d:09:6f:ea:72:4d:da:0a:46:5c:ea:a2:9b:
a1:8e:15:af:34:92:6f:e6:5d:e0:36:e8:7e:13:49:12:ab:b6:
22:6e:51:92:31:39:1e:dc:53:dc:db:e1:62:dc:3c:e1:fe:c3:
a1:da:ef:83:69:d5:8e:22:59:ff:88:89:56:ad:a2:8b:ad:86:
58:09:72:ca:2c:b8:bb:ef:64:3d:a7:ec:08:c2:f3:ff:cd:7c:
65:71:c8:ef
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDDWbQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNh
NDJhN2I5NTIwMjc5ZGMyM2NjYTUwNWZmZmUxMzhjNmU5MjI0NzUwHhcNMjEwMzI0
MTQ0NTA0WhcNMjYwMzI0MTQ0NTA0WjAzMTEwLwYDVQQDEygzMDc1ZWExNGUzMTIw
ODExMzg4ZDY0YmVmODUyZmFlMDFhMjk4MmFkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjQOlDRbuDO3PqT153e6iDLURbwVm6dSjdD0ApoZfOFvsbObg
9Q5hep6Di4KFLHGDGhVywr33F2Y8diRwUGytu5jZgmLaoTSMXhCBGLIMEsP9iaGg
j2d2jUD2Bh0PiEPQNn/jyikawGFj4jJVYbJ38VDSL5sZPQd+xX8x1rclrTBnnnek
8v2YzZ1XmitKw4KFBTFhQ3DE+z7HlQ6JcgoOX4POzdBH0lqFyDRwuch0yQJ5lnLT
n9NXpOX9+vUvy+do4WNWSipyeXgL6EYn+ZJ2q9U64mpySaOe3YkIlMNzeAAeCrTV
vtymTXvc3ip7EAtCwKr8P8V8TmMh7VDs9R1S+QIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFD2st5KX2HXKFkt77L6F7zeOQcKbMB8GA1UdIwQYMBaAFBSl1fs3mEVBbNAj
Yag6jMfd5daoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2E0MmE3
Yjk1MjAyNzlkYzIzY2NhNTA1ZmZmZTEzOGM2ZTkyMjQ3NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGU0YmIwYmMtNTIyNC00ZjZjLWE3NjUtYTNhNTdj
NDU3MmU3LzMwNzVlYTE0ZTMxMjA4MTEzODhkNjRiZWY4NTJmYWUwMWEyOTgyYWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZTRiYjBiYy01MjI0LTRmNmMtYTc2NS1hM2E1
N2M0NTcyZTcvM2E0MmE3Yjk1MjAyNzlkYzIzY2NhNTA1ZmZmZTEzOGM2ZTkyMjQ3
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAqpQEAMEAr5r0DANBAIAAjAHAwUAKAMeADANBgkqhkiG9w0B
AQsFAAOCAQEAO8E/Ptphp6RGTRYzjtdTr6pAsNGjbfd7Gv8+5n1wrcOJ+qsekgEn
AYH5V3y1xJHoHRKJj67ncaaanMRaV0Xk6j6fZ1ehRiTZcYJH+3mDEYJES1wHN1E3
ca9VJHI0/M/ePcIaAHWPBO20qIOHEuS0xLaAHAJwEgnnwUmNZRnZBSgGHL4qnSGd
erfAj6YBcJyhOE/Tf+j2AlN95S3FBWyfX/cyq8vp02WNCW/qck3aCkZc6qKboY4V
rzSSb+Zd4DbofhNJEqu2Im5RkjE5HtxT3NvhYtw84f7Dodrvg2nVjiJZ/4iJVq2i
i62GWAlyyiy4u+9kPafsCMLz/818ZXHI7w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:18 2023 by rpki-client on console-fra.rpki-client.org