Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/a2f012e953bf8ab0124f1c07b28349290e53e7ff.roa
File: a2f012e953bf8ab0124f1c07b28349290e53e7ff.roa (raw, json)
Hash identifier: 7ANrbVfAEUFMluT2UtkkNfq/Tr8JqmYcI31EH4RcKmw=
Subject key identifier: 61:57:69:AB:EF:7A:C1:4D:7E:DF:6A:4A:A3:AD:7B:00:DE:C2:93:5A
Certificate issuer: /CN=3df0f837110e45a0ac8477d5992bac317ed138f1
Certificate serial: 0B42CF
Authority key identifier: 59:14:75:7C:51:DF:E1:FD:F9:5B:86:6B:FB:67:B3:16:F7:67:87:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3df0f837110e45a0ac8477d5992bac317ed138f1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/a2f012e953bf8ab0124f1c07b28349290e53e7ff.roa
Signing time: Wed 24 Mar 2021 14:34:18 +0000
ROA not before: Wed 24 Mar 2021 14:34:18 +0000
ROA not after: Tue 24 Mar 2026 14:34:18 +0000
asID: 7049
IP address blocks: 190.110.96.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737999 (0xb42cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df0f837110e45a0ac8477d5992bac317ed138f1
Validity
Not Before: Mar 24 14:34:18 2021 GMT
Not After : Mar 24 14:34:18 2026 GMT
Subject: CN=a2f012e953bf8ab0124f1c07b28349290e53e7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:4b:ae:52:a4:41:7a:8a:b3:12:c4:a3:34:
f0:8c:0b:3e:9d:4c:8a:9a:17:fd:1d:aa:f9:00:a5:
6a:30:3a:c8:99:68:5a:cd:b0:aa:4c:fe:6b:40:0b:
41:0f:82:52:53:9f:8b:74:24:6b:1a:9a:5b:30:ec:
91:04:69:a3:f2:39:f2:e3:31:a9:f0:b3:b8:b4:c0:
d7:94:c7:be:b8:1b:08:f4:f2:90:35:eb:ed:e7:0f:
af:6f:9f:6b:68:92:db:2f:fb:72:f5:dd:63:c8:1a:
c0:9d:b9:15:c3:57:d3:e2:f4:73:5c:4a:6a:42:15:
d5:eb:f5:7a:43:f3:f8:09:a2:38:4a:c8:e1:99:46:
ad:c0:e7:4e:1b:72:a5:57:a9:5d:b4:bb:ce:b0:3e:
6e:9b:d1:fa:24:06:58:67:49:42:f0:e6:bb:0f:24:
e8:9a:8b:41:ed:73:bc:f6:9e:ba:2f:4f:f2:38:b2:
75:43:d5:04:d1:01:d5:c8:8f:0e:23:b8:41:be:30:
08:5a:80:50:aa:92:d6:5b:cb:e9:bb:9a:80:dc:9a:
58:66:8b:3f:b1:e1:49:63:91:6d:a2:ed:3d:6b:13:
b1:c6:40:77:3b:8e:de:e4:34:3f:eb:f7:d5:83:dc:
44:9e:8f:27:c7:1e:f9:40:61:f4:70:29:f1:b2:7b:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:57:69:AB:EF:7A:C1:4D:7E:DF:6A:4A:A3:AD:7B:00:DE:C2:93:5A
X509v3 Authority Key Identifier:
keyid:59:14:75:7C:51:DF:E1:FD:F9:5B:86:6B:FB:67:B3:16:F7:67:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3df0f837110e45a0ac8477d5992bac317ed138f1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/a2f012e953bf8ab0124f1c07b28349290e53e7ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/3df0f837110e45a0ac8477d5992bac317ed138f1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.110.96.0/20
Signature Algorithm: sha256WithRSAEncryption
30:4e:cf:d7:66:fd:c7:a5:5f:6d:b2:83:73:44:be:00:78:a8:
19:8e:b4:fb:5f:3d:46:26:28:c3:d9:74:97:7d:1f:7c:21:c5:
7b:32:cd:fe:46:ed:ef:ec:24:d5:69:61:f6:f7:9b:4a:57:2c:
5e:6c:dd:f8:1c:d8:46:fb:bb:67:81:1e:31:1d:97:8f:c1:d9:
26:79:1f:86:6e:67:67:b9:eb:24:16:cd:54:77:12:9c:c4:a2:
8f:eb:ab:91:59:0c:b6:85:97:6f:c0:56:2a:20:50:48:42:dc:
3f:98:a4:3e:35:f7:ff:8a:02:0a:d5:93:f6:ab:53:62:f1:67:
57:e7:93:d1:74:6e:b7:f1:f2:a1:53:46:2b:01:6d:dc:e0:38:
e9:81:98:1d:fb:6b:02:87:28:94:f7:41:7d:3a:d4:f0:1e:e4:
7d:29:50:c8:74:0f:e3:b0:24:93:4d:9b:7b:5a:c8:f6:24:13:
a2:b5:15:cc:c4:ae:10:31:f9:20:77:d5:39:f3:a4:7b:b2:cd:
f3:c8:15:58:e1:a4:a3:bc:f0:a7:72:c7:c2:a4:8c:63:45:84:
39:8a:ac:c7:9c:57:3d:75:03:c7:bf:1e:15:eb:c1:45:0f:1e:
44:79:96:78:c2:8a:f6:09:8a:50:13:01:c1:af:7d:7f:ec:13:
f2:df:ad:58
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC0LPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNk
ZjBmODM3MTEwZTQ1YTBhYzg0NzdkNTk5MmJhYzMxN2VkMTM4ZjEwHhcNMjEwMzI0
MTQzNDE4WhcNMjYwMzI0MTQzNDE4WjAzMTEwLwYDVQQDEyhhMmYwMTJlOTUzYmY4
YWIwMTI0ZjFjMDdiMjgzNDkyOTBlNTNlN2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAljpLrlKkQXqKsxLEozTwjAs+nUyKmhf9Har5AKVqMDrImWha
zbCqTP5rQAtBD4JSU5+LdCRrGppbMOyRBGmj8jny4zGp8LO4tMDXlMe+uBsI9PKQ
Nevt5w+vb59raJLbL/ty9d1jyBrAnbkVw1fT4vRzXEpqQhXV6/V6Q/P4CaI4Ssjh
mUatwOdOG3KlV6ldtLvOsD5um9H6JAZYZ0lC8Oa7DyTomotB7XO89p66L0/yOLJ1
Q9UE0QHVyI8OI7hBvjAIWoBQqpLWW8vpu5qA3JpYZos/seFJY5Ftou09axOxxkB3
O47e5DQ/6/fVg9xEno8nxx75QGH0cCnxsnuQLwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGFXaavvesFNft9qSqOtewDewpNaMB8GA1UdIwQYMBaAFFkUdXxR3+H9+VuG
a/tnsxb3Z4fcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2RmMGY4
MzcxMTBlNDVhMGFjODQ3N2Q1OTkyYmFjMzE3ZWQxMzhmMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTQ4MWIwNTgtMzExYy00Mjk0LTg2MTktOGRkZWVm
YzVlNjBkL2EyZjAxMmU5NTNiZjhhYjAxMjRmMWMwN2IyODM0OTI5MGU1M2U3ZmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NDgxYjA1OC0zMTFjLTQyOTQtODYxOS04ZGRl
ZWZjNWU2MGQvM2RmMGY4MzcxMTBlNDVhMGFjODQ3N2Q1OTkyYmFjMzE3ZWQxMzhm
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBL5uYDANBgkqhkiG9w0BAQsFAAOCAQEAME7P12b9x6VfbbKD
c0S+AHioGY60+189RiYow9l0l30ffCHFezLN/kbt7+wk1Wlh9vebSlcsXmzd+BzY
Rvu7Z4EeMR2Xj8HZJnkfhm5nZ7nrJBbNVHcSnMSij+urkVkMtoWXb8BWKiBQSELc
P5ikPjX3/4oCCtWT9qtTYvFnV+eT0XRut/HyoVNGKwFt3OA46YGYHftrAocolPdB
fTrU8B7kfSlQyHQP47Akk02be1rI9iQTorUVzMSuEDH5IHfVOfOke7LN88gVWOGk
o7zwp3LHwqSMY0WEOYqsx5xXPXUDx78eFevBRQ8eRHmWeMKK9gmKUBMBwa99f+wT
8t+tWA==
-----END CERTIFICATE-----
Generated at Thu Aug 31 15:21:19 2023 by rpki-client on console-fra.rpki-client.org