Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/44994cb7bcb324320547587508de3c5e6d9b2283.roa
File: 44994cb7bcb324320547587508de3c5e6d9b2283.roa (raw, json)
Hash identifier: Nx1jh2jLDduwzVGlZ8IQ7niYEOqTUnE9lPW0bldOT3I=
Subject key identifier: AC:38:21:30:2D:9B:C6:4E:9A:FF:20:B7:02:6B:B0:59:25:14:39:A7
Certificate issuer: /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial: 0DF80B
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/44994cb7bcb324320547587508de3c5e6d9b2283.roa
Signing time: Wed 24 Mar 2021 14:47:14 +0000
ROA not before: Wed 24 Mar 2021 14:47:14 +0000
ROA not after: Tue 24 Mar 2026 14:47:14 +0000
asID: 28002
IP address blocks: 190.112.52.0/22 maxlen: 22
200.0.86.0/23 maxlen: 23
2001:13c7:7003::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915467 (0xdf80b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Validity
Not Before: Mar 24 14:47:14 2021 GMT
Not After : Mar 24 14:47:14 2026 GMT
Subject: CN=44994cb7bcb324320547587508de3c5e6d9b2283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:87:da:2a:6c:80:df:70:ba:79:fe:9c:20:46:
18:d9:a9:9c:e7:d9:99:ba:0e:19:fd:c8:de:4e:c2:
67:91:b7:d7:aa:0c:df:9a:28:01:4b:5f:b0:ee:40:
18:42:36:87:c0:ff:2d:c8:f0:6c:0e:5f:ee:29:69:
cb:80:51:ce:64:6f:12:b3:9b:14:2c:9b:eb:ca:e3:
fb:9d:a5:e5:98:c5:18:9c:d6:77:3d:89:70:13:f8:
82:4a:9c:9a:7c:10:ee:cf:56:5d:c9:1e:fa:a5:9e:
22:65:89:b6:50:25:48:cd:00:02:a5:25:ac:8a:b1:
b7:06:ea:46:02:a7:a9:bd:5a:32:34:b2:16:31:c6:
2b:42:bb:c4:29:71:6e:9e:bd:18:d7:ee:0b:13:3d:
ab:5e:d1:2f:0d:33:85:ec:bb:11:34:bb:ae:e3:dd:
02:5d:ce:db:37:d1:22:74:9b:60:03:46:cf:cb:32:
4e:57:be:cc:ae:74:24:58:5d:db:7e:34:46:d5:21:
97:d4:24:93:60:3d:2f:5a:aa:bc:24:78:c1:6d:86:
d9:6e:12:2f:d1:8d:d0:c6:f6:56:7d:6d:eb:51:07:
58:a9:a2:8a:3a:88:48:ba:9a:f7:75:50:45:b2:8b:
c8:3f:7b:05:f5:8b:54:1c:83:5b:9f:44:97:c0:4f:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:38:21:30:2D:9B:C6:4E:9A:FF:20:B7:02:6B:B0:59:25:14:39:A7
X509v3 Authority Key Identifier:
keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/44994cb7bcb324320547587508de3c5e6d9b2283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.52.0/22
200.0.86.0/23
IPv6:
2001:13c7:7003::/48
Signature Algorithm: sha256WithRSAEncryption
64:c7:11:4c:1a:0d:f5:fa:4e:68:12:de:57:99:89:8c:1c:12:
dd:9a:73:d1:1e:59:c2:08:9e:ed:bd:c2:18:2b:90:bd:62:7e:
2b:11:12:c7:57:43:d4:a3:f7:16:a5:d4:33:77:ef:de:4d:6b:
20:d6:10:d1:62:ba:86:39:dd:05:5d:d8:5c:49:98:4a:25:95:
fd:74:67:b0:2d:c2:05:33:6c:75:e8:17:8b:60:bd:0d:ed:dc:
f9:72:1f:d0:1d:04:eb:da:4d:b4:dc:31:da:77:6b:c2:b6:eb:
5d:aa:bd:c6:aa:ff:53:df:e8:87:fe:67:d8:4c:79:a2:be:09:
2e:f4:df:12:9b:88:26:c4:63:96:de:df:56:5f:fa:cc:b1:b1:
2a:05:67:94:eb:cf:3d:c9:29:2f:02:d7:a1:d8:69:d4:0e:0f:
fc:a9:f9:ea:45:d0:a6:55:1d:db:c3:05:2c:9d:48:a9:e6:ca:
a1:a2:57:16:58:a7:10:cb:6c:d5:0b:fb:35:37:30:c6:a1:4b:
7a:78:3f:39:73:b0:1b:fd:11:a6:e4:7e:4e:ed:48:7e:68:8f:
7b:f2:fa:b2:f0:c0:d6:23:41:2a:26:cb:c3:01:cd:ef:e7:10:
49:6c:b6:0b:80:d7:25:27:c2:2b:4e:31:27:b6:92:7c:13:81:
30:5c:fe:14
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDDfgLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
ZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRjZWJiMDJmY2MyYWY4ZDIwHhcNMjEwMzI0
MTQ0NzE0WhcNMjYwMzI0MTQ0NzE0WjAzMTEwLwYDVQQDEyg0NDk5NGNiN2JjYjMy
NDMyMDU0NzU4NzUwOGRlM2M1ZTZkOWIyMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjYfaKmyA33C6ef6cIEYY2amc59mZug4Z/cjeTsJnkbfXqgzf
migBS1+w7kAYQjaHwP8tyPBsDl/uKWnLgFHOZG8Ss5sULJvryuP7naXlmMUYnNZ3
PYlwE/iCSpyafBDuz1ZdyR76pZ4iZYm2UCVIzQACpSWsirG3BupGAqepvVoyNLIW
McYrQrvEKXFunr0Y1+4LEz2rXtEvDTOF7LsRNLuu490CXc7bN9EidJtgA0bPyzJO
V77MrnQkWF3bfjRG1SGX1CSTYD0vWqq8JHjBbYbZbhIv0Y3QxvZWfW3rUQdYqaKK
OohIupr3dVBFsovIP3sF9YtUHINbn0SXwE9O1wIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFKw4ITAtm8ZOmv8gtwJrsFklFDmnMB8GA1UdIwQYMBaAFH+Jf8zsEQtTeV2M
m5FVamZ66VzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJkM2I2
MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5LzQ0OTk0Y2I3YmNiMzI0MzIwNTQ3NTg3NTA4ZGUzYzVlNmQ5YjIyODMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEAr5wNAMEAcgAVjAPBAIAAjAJAwcAIAETx3ADMA0GCSqGSIb3
DQEBCwUAA4IBAQBkxxFMGg31+k5oEt5XmYmMHBLdmnPRHlnCCJ7tvcIYK5C9Yn4r
ERLHV0PUo/cWpdQzd+/eTWsg1hDRYrqGOd0FXdhcSZhKJZX9dGewLcIFM2x16BeL
YL0N7dz5ch/QHQTr2k203DHad2vCtutdqr3Gqv9T3+iH/mfYTHmivgku9N8Sm4gm
xGOW3t9WX/rMsbEqBWeU6889ySkvAteh2GnUDg/8qfnqRdCmVR3bwwUsnUip5sqh
olcWWKcQy2zVC/s1NzDGoUt6eD85c7Ab/RGm5H5O7Uh+aI978vqy8MDWI0EqJsvD
Ac3v5xBJbLYLgNclJ8IrTjEntpJ8E4EwXP4U
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org