Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/85bc0259eb634f21ecd9d5d23a642e6bcadef34e.roa
File: 85bc0259eb634f21ecd9d5d23a642e6bcadef34e.roa (raw, json)
Hash identifier: /IHfyjxRM/l26ZiVbHtbQLYroSs9E+9sw8TCW6CyBCM=
Subject key identifier: 09:BE:76:2F:5B:FA:06:87:E5:32:91:6C:14:7C:D6:D4:9B:84:1B:DC
Certificate issuer: /CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Certificate serial: 1EF6E6
Authority key identifier: 0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/85bc0259eb634f21ecd9d5d23a642e6bcadef34e.roa
Signing time: Tue 21 Feb 2023 15:20:17 +0000
ROA not before: Tue 23 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 262589
IP address blocks: 190.211.160.0/24 maxlen: 24
190.211.161.0/24 maxlen: 24
190.211.162.0/24 maxlen: 24
190.211.163.0/24 maxlen: 24
190.211.164.0/24 maxlen: 24
190.211.165.0/24 maxlen: 24
190.211.166.0/24 maxlen: 24
190.211.167.0/24 maxlen: 24
190.211.168.0/24 maxlen: 24
190.211.169.0/24 maxlen: 24
190.211.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029286 (0x1ef6e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Validity
Not Before: Mar 23 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=85bc0259eb634f21ecd9d5d23a642e6bcadef34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:3a:e0:c5:42:72:e9:ec:91:c9:cb:08:63:
70:21:f6:cf:69:e4:a2:9d:b9:0e:7a:2d:9a:f9:83:
2b:fd:7c:3d:c0:8c:62:c5:c1:e2:78:3b:76:0f:86:
93:e3:49:d2:d4:98:cc:46:0d:6e:68:f6:92:4d:45:
c7:6b:79:b5:43:49:e5:ea:4d:d5:fe:53:ad:14:eb:
07:cd:ca:a1:e2:26:04:32:4c:dc:3e:31:09:4d:76:
12:e6:6c:29:02:52:f3:e6:27:a4:05:c8:c5:54:f7:
5e:6f:5e:91:d1:c1:f9:b1:b9:aa:c8:b5:79:fc:15:
a9:0d:6c:fe:2b:3d:4d:ec:e4:3b:96:be:e9:c0:7f:
62:04:e5:78:c3:b2:20:64:9a:c4:6e:38:62:2a:ce:
d0:44:cf:d7:83:b0:8d:67:8a:c7:a9:5f:45:c4:bf:
69:cf:b1:8e:77:33:b0:f5:d2:e6:79:53:d4:5c:9c:
f3:e3:a9:30:74:84:a7:c8:1f:cb:74:36:64:e7:af:
78:1f:83:1d:19:23:ef:58:4e:4b:c1:64:9a:1e:5b:
85:46:4a:ac:8c:c3:05:82:f1:88:8a:d7:12:e4:4c:
01:37:5a:f3:18:50:9e:94:47:d8:b7:0b:dd:0a:44:
79:a1:a8:e1:a5:a5:40:82:65:42:a0:1d:63:65:6e:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BE:76:2F:5B:FA:06:87:E5:32:91:6C:14:7C:D6:D4:9B:84:1B:DC
X509v3 Authority Key Identifier:
keyid:0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/85bc0259eb634f21ecd9d5d23a642e6bcadef34e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/44abde35adbcf04fb85f8b032b43e458648b74b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.211.160.0-190.211.169.255
190.211.172.0/24
Signature Algorithm: sha256WithRSAEncryption
84:21:89:3d:ef:d9:1f:2e:2c:90:e4:99:88:61:d0:10:7f:0c:
53:c5:13:48:36:7f:eb:5f:fc:f6:40:63:c1:dc:8d:69:4b:11:
b9:3f:71:a2:5a:ef:19:13:0d:9b:10:5a:31:9c:b5:2f:48:ce:
23:29:bd:c1:ed:1e:12:b6:97:e4:99:e5:ee:ea:22:4f:3e:ad:
9e:25:e0:ad:8a:09:2e:e9:e2:dc:9a:5e:3d:55:d0:54:37:ad:
39:e5:11:c7:02:aa:9b:f6:3e:42:ac:63:b7:cd:c0:11:93:36:
b7:8c:1e:17:68:e9:bb:c2:fe:33:c9:56:59:80:c5:9f:84:d8:
d3:f4:35:2b:66:ff:87:9f:9b:2a:41:af:8f:f7:89:d7:4e:cf:
fb:aa:c7:37:bb:44:3c:de:4c:a0:c6:85:b8:e8:42:12:84:99:
2d:7e:4f:f1:2a:67:20:66:15:e0:6a:1f:e9:60:50:11:fe:19:
ca:57:19:b3:30:cc:67:cb:d5:3a:61:66:ab:84:5a:83:43:dd:
3b:a4:09:3f:1b:9a:fc:99:4c:00:06:d9:8d:4e:fb:7a:4b:92:
ed:5c:c3:d5:b8:77:a3:45:c6:36:a8:6a:8f:63:4f:4e:83:96:
c6:6a:43:c8:bf:e2:81:41:74:25:36:ba:42:3b:a2:28:4c:a5:
11:23:c3:a1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDHvbmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ0
YWJkZTM1YWRiY2YwNGZiODVmOGIwMzJiNDNlNDU4NjQ4Yjc0YjQwHhcNMjEwMzIz
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg4NWJjMDI1OWViNjM0
ZjIxZWNkOWQ1ZDIzYTY0MmU2YmNhZGVmMzRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA18864MVCcunskcnLCGNwIfbPaeSinbkOei2a+YMr/Xw9wIxi
xcHieDt2D4aT40nS1JjMRg1uaPaSTUXHa3m1Q0nl6k3V/lOtFOsHzcqh4iYEMkzc
PjEJTXYS5mwpAlLz5iekBcjFVPdeb16R0cH5sbmqyLV5/BWpDWz+Kz1N7OQ7lr7p
wH9iBOV4w7IgZJrEbjhiKs7QRM/Xg7CNZ4rHqV9FxL9pz7GOdzOw9dLmeVPUXJzz
46kwdISnyB/LdDZk5694H4MdGSPvWE5LwWSaHluFRkqsjMMFgvGIitcS5EwBN1rz
GFCelEfYtwvdCkR5oajhpaVAgmVCoB1jZW4z5QIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFAm+di9b+gaH5TKRbBR81tSbhBvcMB8GA1UdIwQYMBaAFA6TBZzK0PnhR7Xk
/66XYqJ234cCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDRhYmRl
MzVhZGJjZjA0ZmI4NWY4YjAzMmI0M2U0NTg2NDhiNzRiNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjg4MzU1ODktYTZlNC00YmUxLTlkZGMtYmYyMTJj
M2U0MTBhLzg1YmMwMjU5ZWI2MzRmMjFlY2Q5ZDVkMjNhNjQyZTZiY2FkZWYzNGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ODgzNTU4OS1hNmU0LTRiZTEtOWRkYy1iZjIx
MmMzZTQxMGEvNDRhYmRlMzVhZGJjZjA0ZmI4NWY4YjAzMmI0M2U0NTg2NDhiNzRi
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFDAMAwQFvtOgAwQBvtOoAwQAvtOsMA0GCSqGSIb3DQEBCwUAA4IB
AQCEIYk979kfLiyQ5JmIYdAQfwxTxRNINn/rX/z2QGPB3I1pSxG5P3GiWu8ZEw2b
EFoxnLUvSM4jKb3B7R4StpfkmeXu6iJPPq2eJeCtigku6eLcml49VdBUN6055RHH
Aqqb9j5CrGO3zcARkza3jB4XaOm7wv4zyVZZgMWfhNjT9DUrZv+Hn5sqQa+P94nX
Ts/7qsc3u0Q83kygxoW46EIShJktfk/xKmcgZhXgah/pYFAR/hnKVxmzMMxny9U6
YWarhFqDQ907pAk/G5r8mUwABtmNTvt6S5LtXMPVuHejRcY2qGqPY09Og5bGakPI
v+KBQXQlNrpCO6IoTKURI8Oh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-fra.rpki-client.org