Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/584c7f414472c24692b2d29730986ab4592bd87b.roa
File: 584c7f414472c24692b2d29730986ab4592bd87b.roa (raw, json)
Hash identifier: qswl+twiI/+0O3IytzZ14X07sTWt+Q/vmu5TzUcHPDI=
Subject key identifier: 0A:A9:C2:82:E7:BD:B6:E3:4A:9C:D5:C5:91:CD:7A:EF:04:F0:5F:7C
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 120998
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/584c7f414472c24692b2d29730986ab4592bd87b.roa
Signing time: Fri 16 Apr 2021 02:02:58 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 27976
IP address blocks: 190.136.52.0/24 maxlen: 24
200.43.12.0/24 maxlen: 24
200.45.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1182104 (0x120998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=584c7f414472c24692b2d29730986ab4592bd87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:f3:45:d7:31:59:08:0b:58:5a:fe:6d:b9:
d5:0f:ef:c2:13:92:f3:fb:04:4e:59:86:25:74:f8:
79:0b:e7:a8:23:a5:bc:e4:03:52:63:d2:11:d8:6e:
ea:d5:a2:86:0a:28:78:6a:9c:30:7d:4d:a9:d1:db:
13:6e:59:e7:e3:9f:7b:ba:38:45:6a:51:1a:3b:cd:
ab:3f:33:ce:1b:67:58:4b:4f:d3:d7:11:d3:ac:99:
95:67:60:5f:c5:af:a8:e8:66:55:61:e1:72:dd:00:
ff:13:35:10:f9:1c:25:f3:18:84:c9:a7:76:cb:c1:
87:a6:2d:5a:5c:36:ac:fd:85:dd:38:cc:48:fc:c2:
56:f8:72:0c:ed:db:2e:31:e0:3c:d6:2b:c0:26:b9:
0c:8e:96:e0:d5:5c:15:2e:13:60:36:0e:65:b2:5a:
8e:fc:51:3e:d2:73:38:e5:01:b2:de:6b:a9:c4:d1:
cf:dc:d6:da:26:c6:e0:bb:ef:8e:50:b4:70:de:6f:
37:e0:fe:16:6c:73:18:5f:ab:9b:8b:2c:df:1f:b6:
63:3c:7f:64:ec:98:75:3c:aa:d2:1e:87:92:0d:58:
0b:5c:9d:96:c4:09:84:c3:3d:03:ab:e1:25:a1:52:
d5:c7:de:18:b5:19:86:7b:36:a5:71:57:4f:3b:e5:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A9:C2:82:E7:BD:B6:E3:4A:9C:D5:C5:91:CD:7A:EF:04:F0:5F:7C
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/584c7f414472c24692b2d29730986ab4592bd87b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.136.52.0/24
200.43.12.0/24
200.45.121.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4a:87:29:73:d5:d9:1f:b4:44:b1:5c:9f:9f:d8:d4:92:b7:
2e:c2:b3:f0:e1:b0:77:78:fe:32:9e:26:b7:14:80:4c:84:29:
1e:38:25:df:72:0e:6c:e7:18:1f:2e:fa:92:82:2b:51:c8:25:
38:b9:5e:be:f8:da:c1:42:99:92:30:e9:f5:a1:9a:27:9a:64:
44:35:30:54:1f:31:a9:5e:91:67:6f:f2:a1:b6:09:d6:06:71:
06:00:3d:bd:f2:cd:69:dc:a0:ae:48:25:d2:49:a4:cd:cb:7c:
b1:93:a4:a5:f8:7b:fe:5c:12:f9:cd:ce:e8:f0:17:db:23:e5:
0e:b3:3e:bf:89:bc:82:b5:b6:d8:68:e9:e9:ad:60:a7:ac:42:
9e:bb:4a:93:24:bf:c5:d2:cb:b1:82:5c:5d:62:67:55:cd:d2:
51:5c:4e:50:81:5f:72:99:f9:8b:71:06:4e:c1:58:85:4f:a3:
da:56:3a:09:2e:05:a4:fe:5d:a3:a3:69:c8:fb:db:e9:12:40:
ed:28:f6:4b:c9:01:90:d1:ae:30:1b:d3:70:c2:a0:ac:75:8d:
e4:03:bd:b0:b0:ae:da:19:61:42:2f:25:72:c6:b1:18:ca:08:
33:67:1c:eb:d2:75:df:74:c7:b2:89:f0:18:9b:f3:b0:af:f9:
7d:84:27:e1
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDEgmYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg1ODRjN2Y0MTQ0NzJj
MjQ2OTJiMmQyOTczMDk4NmFiNDU5MmJkODdiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAs+zzRdcxWQgLWFr+bbnVD+/CE5Lz+wROWYYldPh5C+eoI6W8
5ANSY9IR2G7q1aKGCih4apwwfU2p0dsTblnn4597ujhFalEaO82rPzPOG2dYS0/T
1xHTrJmVZ2Bfxa+o6GZVYeFy3QD/EzUQ+Rwl8xiEyad2y8GHpi1aXDas/YXdOMxI
/MJW+HIM7dsuMeA81ivAJrkMjpbg1VwVLhNgNg5lslqO/FE+0nM45QGy3mupxNHP
3NbaJsbgu++OULRw3m834P4WbHMYX6ubiyzfH7ZjPH9k7Jh1PKrSHoeSDVgLXJ2W
xAmEwz0Dq+EloVLVx94YtRmGezalcVdPO+UUawIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFAqpwoLnvbbjSpzVxZHNeu8E8F98MB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzU4NGM3ZjQxNDQ3MmMyNDY5MmIyZDI5NzMwOTg2YWI0NTkyYmQ4N2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAL6INAMEAMgrDAMEAMgteTANBgkqhkiG9w0BAQsFAAOCAQEA
dkqHKXPV2R+0RLFcn5/Y1JK3LsKz8OGwd3j+Mp4mtxSATIQpHjgl33IObOcYHy76
koIrUcglOLlevvjawUKZkjDp9aGaJ5pkRDUwVB8xqV6RZ2/yobYJ1gZxBgA9vfLN
adygrkgl0kmkzct8sZOkpfh7/lwS+c3O6PAX2yPlDrM+v4m8grW22Gjp6a1gp6xC
nrtKkyS/xdLLsYJcXWJnVc3SUVxOUIFfcpn5i3EGTsFYhU+j2lY6CS4FpP5do6Np
yPvb6RJA7Sj2S8kBkNGuMBvTcMKgrHWN5AO9sLCu2hlhQi8lcsaxGMoIM2cc69J1
33THsonwGJvzsK/5fYQn4Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org