Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f16f809ddfe7bbb52c04368f66ad732a3af1f62a.roa
File: f16f809ddfe7bbb52c04368f66ad732a3af1f62a.roa (raw, json)
Hash identifier: 23c7+jNj49smkBKIMIlFXPgXSL/69DULOboT/6ek24g=
Subject key identifier: 90:37:D7:09:74:C5:C5:04:35:87:34:90:25:D5:23:F9:D5:2A:F3:7E
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 13A433
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f16f809ddfe7bbb52c04368f66ad732a3af1f62a.roa
Signing time: Fri 07 May 2021 13:13:32 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 264642
IP address blocks: 190.228.116.0/23 maxlen: 24
181.105.228.0/22 maxlen: 22
186.125.199.0/24 maxlen: 24
186.125.200.0/23 maxlen: 24
186.125.201.0/24 maxlen: 24
190.137.162.0/23 maxlen: 24
190.228.115.0/24 maxlen: 24
190.228.116.0/24 maxlen: 24
190.228.117.0/24 maxlen: 24
190.228.165.0/24 maxlen: 24
190.228.166.0/23 maxlen: 24
190.228.42.0/23 maxlen: 24
190.228.43.0/24 maxlen: 24
190.228.64.0/23 maxlen: 24
190.228.65.0/24 maxlen: 24
190.228.88.0/22 maxlen: 24
190.228.91.0/24 maxlen: 24
190.228.93.0/24 maxlen: 24
190.228.94.0/24 maxlen: 24
190.30.254.0/24 maxlen: 24
200.73.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1287219 (0x13a433)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=f16f809ddfe7bbb52c04368f66ad732a3af1f62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3a:30:dd:07:2a:6a:a4:f2:d7:59:a4:97:5d:
9b:6f:83:ad:70:48:06:ba:d8:e9:6d:86:88:46:94:
a9:d8:ca:0b:ce:71:2a:51:27:47:c8:a0:f5:5a:35:
84:40:cb:41:0f:f0:45:88:b0:7d:65:82:b3:3a:72:
3a:72:58:5c:29:f2:85:4b:20:d6:45:c2:03:de:bc:
aa:40:e0:99:54:a7:0b:cd:6f:79:78:1f:6a:22:ce:
1d:9f:2c:4e:dc:dc:4d:bd:a3:47:ef:52:ab:39:01:
70:39:ca:da:55:d3:9c:41:32:7d:37:61:69:0a:f8:
5a:dd:a3:08:d7:de:24:7d:2d:cf:28:a0:ef:eb:23:
99:b6:f1:e9:95:14:56:3a:e2:8d:65:4c:5e:e1:79:
36:d6:cc:fa:f1:84:8c:83:c6:0f:10:6c:8c:31:e6:
90:28:98:7d:22:b6:de:2f:33:81:29:e4:0e:af:65:
84:d1:c5:3c:27:8f:7e:6f:eb:d7:02:b7:f3:ab:81:
0f:22:47:bd:e4:0b:f6:0c:13:48:af:f2:93:ec:ed:
6e:d4:b9:a7:e1:a0:61:fb:7a:b6:69:3a:12:53:d0:
52:91:53:bc:81:45:99:e2:1a:cc:a9:02:d2:6c:40:
d0:66:6f:a7:72:6d:3e:6d:43:8f:35:79:44:0b:e9:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:37:D7:09:74:C5:C5:04:35:87:34:90:25:D5:23:F9:D5:2A:F3:7E
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f16f809ddfe7bbb52c04368f66ad732a3af1f62a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.105.228.0/22
186.125.199.0-186.125.201.255
190.30.254.0/24
190.137.162.0/23
190.228.42.0/23
190.228.64.0/23
190.228.88.0/22
190.228.93.0-190.228.94.255
190.228.115.0-190.228.117.255
190.228.165.0-190.228.167.255
200.73.191.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ca:73:b1:43:9a:c8:5f:0f:58:40:d1:ce:29:4c:e0:c2:d0:
78:b1:ce:2c:b4:f6:fd:31:f8:94:6f:86:d9:75:9f:39:f1:b8:
31:fd:81:dc:44:d9:17:42:86:20:07:09:fb:2e:c3:a2:17:90:
cc:c5:e8:14:82:1b:34:06:9e:db:73:ed:e2:22:5e:a4:fa:27:
ea:2d:0a:51:a7:b4:fe:71:e8:0d:2c:58:b0:4f:7f:6d:50:35:
96:85:ea:94:9f:27:b4:4c:ce:a8:7a:29:bf:e8:1d:49:9d:76:
47:e2:3e:05:c2:fe:00:ad:6c:9c:58:21:b2:db:46:67:39:f2:
68:76:f8:ce:09:16:bd:56:e6:44:7a:d1:dd:a8:5e:4c:9d:6b:
2b:c3:80:bc:e9:c1:e3:3c:2f:0f:f7:7a:60:35:6e:1b:70:fa:
98:71:ff:ec:56:e6:54:2f:e5:b8:f2:75:23:b2:44:93:ca:b0:
9f:10:8a:32:72:78:74:be:0e:bd:99:e7:f2:87:0e:72:05:85:
e6:f4:0b:00:dd:5d:66:d1:bb:1d:e0:d6:fc:29:ce:e2:a4:62:
c2:b3:c2:23:40:9a:06:24:25:2b:fc:7c:23:d8:d9:fb:86:c5:
37:90:aa:6b:7f:b3:43:82:01:b3:21:c5:c5:4b:c9:10:65:ed:
d8:43:e0:cd
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIDE6QzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhmMTZmODA5ZGRmZTdi
YmI1MmMwNDM2OGY2NmFkNzMyYTNhZjFmNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAijow3QcqaqTy11mkl12bb4OtcEgGutjpbYaIRpSp2MoLznEq
USdHyKD1WjWEQMtBD/BFiLB9ZYKzOnI6clhcKfKFSyDWRcID3ryqQOCZVKcLzW95
eB9qIs4dnyxO3NxNvaNH71KrOQFwOcraVdOcQTJ9N2FpCvha3aMI194kfS3PKKDv
6yOZtvHplRRWOuKNZUxe4Xk21sz68YSMg8YPEGyMMeaQKJh9IrbeLzOBKeQOr2WE
0cU8J49+b+vXArfzq4EPIke95Av2DBNIr/KT7O1u1Lmn4aBh+3q2aToSU9BSkVO8
gUWZ4hrMqQLSbEDQZm+ncm0+bUOPNXlEC+m4TwIDAQABo4ICtzCCArMwHQYDVR0O
BBYEFJA31wl0xcUENYc0kCXVI/nVKvN+MB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3L2YxNmY4MDlkZGZlN2JiYjUyYzA0MzY4ZjY2YWQ3MzJhM2FmMWY2MmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB7BggrBgEFBQcBBwEB/wRs
MGowaAQCAAEwYgMEArVp5DAMAwQAun3HAwQBun3IAwQAvh7+AwQBvomiAwQBvuQq
AwQBvuRAAwQCvuRYMAwDBAC+5F0DBAC+5F4wDAMEAL7kcwMEAb7kdDAMAwQAvuSl
AwQDvuSgAwQAyEm/MA0GCSqGSIb3DQEBCwUAA4IBAQAVynOxQ5rIXw9YQNHOKUzg
wtB4sc4stPb9MfiUb4bZdZ858bgx/YHcRNkXQoYgBwn7LsOiF5DMxegUghs0Bp7b
c+3iIl6k+ifqLQpRp7T+cegNLFiwT39tUDWWheqUnye0TM6oeim/6B1JnXZH4j4F
wv4ArWycWCGy20ZnOfJodvjOCRa9VuZEetHdqF5MnWsrw4C86cHjPC8P93pgNW4b
cPqYcf/sVuZUL+W48nUjskSTyrCfEIoycnh0vg69mefyhw5yBYXm9AsA3V1m0bsd
4Nb8Kc7ipGLCs8IjQJoGJCUr/Hwj2Nn7hsU3kKprf7NDggGzIcXFS8kQZe3YQ+DN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org