Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7db4badccfa1873500bb80e54d16b80ffc38e24b.roa
File: 7db4badccfa1873500bb80e54d16b80ffc38e24b.roa (raw, json)
Hash identifier: k42UQ6g+vL7oMe6vSpYByou3sFFb/uWoXaG0conq9aI=
Subject key identifier: BD:94:E3:45:70:0A:40:B6:DD:61:E2:68:BA:E7:AE:76:47:66:44:50
Certificate issuer: /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial: 233FEF
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7db4badccfa1873500bb80e54d16b80ffc38e24b.roa
Signing time: Wed 23 Aug 2023 18:47:26 +0000
ROA not before: Tue 22 Aug 2023 18:47:26 +0000
ROA not after: Sat 23 Aug 2025 18:47:26 +0000
asID: 263173
IP address blocks: 190.54.182.0/24 maxlen: 24
190.208.8.0/24 maxlen: 24
190.54.112.0/23 maxlen: 24
2800:3b0:2000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 29 Jan 2024 14:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2310127 (0x233fef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Validity
Not Before: Aug 22 18:47:26 2023 GMT
Not After : Aug 23 18:47:26 2025 GMT
Subject: CN=7db4badccfa1873500bb80e54d16b80ffc38e24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:02:1b:52:00:b6:d9:30:a3:4f:8d:0f:79:fb:
12:11:2f:cc:09:ec:da:ba:df:69:0c:31:ac:91:87:
dd:65:65:76:20:2d:b7:a9:c7:d7:1b:6f:55:d0:e3:
73:24:2c:f6:b9:02:82:b3:8c:76:a0:71:a0:25:57:
30:0a:0c:b1:49:c6:2f:7c:73:37:db:e3:1e:a0:6b:
a8:b1:84:e5:61:27:99:44:a7:1d:8f:fa:2f:f0:57:
5f:6a:98:db:26:fd:b2:b8:b2:2a:61:c2:e3:11:75:
df:a8:8d:61:da:7d:2b:9b:37:f9:89:e3:73:bd:bb:
2c:45:fd:ca:82:30:10:18:20:19:53:be:48:5a:e0:
ef:8e:68:5d:c9:63:05:a3:c8:57:14:96:23:e2:1a:
e5:6d:ef:27:5b:85:05:9c:5b:e4:d3:0c:d0:da:f2:
96:3c:32:9f:a8:d7:f5:be:fa:d5:7c:f1:af:60:06:
1d:37:f9:f9:b0:75:26:ec:0b:99:13:0a:e8:4e:77:
78:91:eb:e1:cf:84:66:d5:8f:0b:f6:87:95:5f:5b:
4a:13:3e:ea:2b:a9:79:d8:db:0e:5f:79:78:98:eb:
9b:98:cd:e3:f7:aa:44:89:c4:6b:d2:bd:c1:00:ca:
1d:2a:f1:cf:a6:85:7d:72:74:77:75:d4:ac:5e:b7:
0d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:94:E3:45:70:0A:40:B6:DD:61:E2:68:BA:E7:AE:76:47:66:44:50
X509v3 Authority Key Identifier:
keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7db4badccfa1873500bb80e54d16b80ffc38e24b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.54.112.0/23
190.54.182.0/24
190.208.8.0/24
IPv6:
2800:3b0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
1b:f3:dd:fb:a5:ba:f5:86:bf:5d:e9:ff:b2:23:66:5a:d7:30:
75:7d:68:5e:dd:90:57:88:32:92:e4:6c:de:1d:0f:3b:75:e2:
16:fe:47:55:1f:dd:92:5e:9d:f9:63:5b:1e:b8:34:57:1e:cf:
45:ef:2b:33:ca:8f:e3:c3:13:cd:9f:58:b9:09:8e:45:6d:b0:
2b:2a:04:4b:50:48:91:02:1d:c6:4a:93:21:a7:08:02:5d:97:
d8:4b:6c:81:9b:88:6d:de:df:70:c6:54:aa:4d:ab:0c:8d:94:
ca:14:60:c8:7b:96:6e:88:23:e8:0f:5f:fc:e8:47:f9:33:0a:
11:d7:07:2d:97:a7:f6:40:33:77:ab:e8:b3:bf:34:7c:bf:bf:
18:bb:b5:c1:a7:d4:4a:06:cf:b2:85:87:6e:12:e2:fc:b8:88:
e8:1f:12:6a:21:6d:25:6e:a3:9f:3a:cb:39:61:7b:b3:4e:f8:
8e:9e:c0:55:10:9d:58:5b:b5:55:3d:df:ec:f6:af:1e:0b:60:
53:06:b2:f4:0a:7c:4a:f1:00:58:d2:20:4f:e8:70:dc:88:4e:
2d:88:0b:b8:0b:19:3f:0d:48:1f:65:8c:ce:9e:1b:eb:09:ef:
91:f8:d7:5d:3b:cb:37:cf:f5:85:5b:3a:39:7f:19:c9:3a:52:
e0:25:11:22
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIDIz/vMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFj
NzMwY2M0ZjExNDBlOWMzYTI0Mzc2OGQxMDUyYWUyYmYzNmQyNzkwHhcNMjMwODIy
MTg0NzI2WhcNMjUwODIzMTg0NzI2WjAzMTEwLwYDVQQDEyg3ZGI0YmFkY2NmYTE4
NzM1MDBiYjgwZTU0ZDE2YjgwZmZjMzhlMjRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiAIbUgC22TCjT40PefsSES/MCezaut9pDDGskYfdZWV2IC23
qcfXG29V0ONzJCz2uQKCs4x2oHGgJVcwCgyxScYvfHM32+MeoGuosYTlYSeZRKcd
j/ov8FdfapjbJv2yuLIqYcLjEXXfqI1h2n0rmzf5ieNzvbssRf3KgjAQGCAZU75I
WuDvjmhdyWMFo8hXFJYj4hrlbe8nW4UFnFvk0wzQ2vKWPDKfqNf1vvrVfPGvYAYd
N/n5sHUm7AuZEwroTnd4kevhz4Rm1Y8L9oeVX1tKEz7qK6l52NsOX3l4mOubmM3j
96pEicRr0r3BAModKvHPpoV9cnR3ddSsXrcN6wIDAQABo4ICdzCCAnMwHQYDVR0O
BBYEFL2U40VwCkC23WHiaLrnrnZHZkRQMB8GA1UdIwQYMBaAFD2jZzfaSs3l6WtL
qUcId2SKsyUZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWM3MzBj
YzRmMTE0MGU5YzNhMjQzNzY4ZDEwNTJhZTJiZjM2ZDI3OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTFjODFlZmYtYTZjZC00MzE5LWIzYzMtZGNhODNl
ODY2ZDI1LzdkYjRiYWRjY2ZhMTg3MzUwMGJiODBlNTRkMTZiODBmZmMzOGUyNGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MWM4MWVmZi1hNmNkLTQzMTktYjNjMy1kY2E4
M2U4NjZkMjUvMWM3MzBjYzRmMTE0MGU5YzNhMjQzNzY4ZDEwNTJhZTJiZjM2ZDI3
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7BggrBgEFBQcBBwEB/wQs
MCowGAQCAAEwEgMEAb42cAMEAL42tgMEAL7QCDAOBAIAAjAIAwYEKAADsCAwDQYJ
KoZIhvcNAQELBQADggEBABvz3fuluvWGv13p/7IjZlrXMHV9aF7dkFeIMpLkbN4d
Dzt14hb+R1Uf3ZJenfljWx64NFcez0XvKzPKj+PDE82fWLkJjkVtsCsqBEtQSJEC
HcZKkyGnCAJdl9hLbIGbiG3e33DGVKpNqwyNlMoUYMh7lm6II+gPX/zoR/kzChHX
By2Xp/ZAM3er6LO/NHy/vxi7tcGn1EoGz7KFh24S4vy4iOgfEmohbSVuo586yzlh
e7NO+I6ewFUQnVhbtVU93+z2rx4LYFMGsvQKfErxAFjSIE/ocNyITi2IC7gLGT8N
SB9ljM6eG+sJ75H41107yzfP9YVbOjl/Gck6UuAlESI=
-----END CERTIFICATE-----
Generated at Mon Jan 29 19:47:37 2024 by rpki-client on console-fra.rpki-client.org