Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/a7757c13fa0e790fb9c5401f3f21ca6f2cabb533.roa
File: a7757c13fa0e790fb9c5401f3f21ca6f2cabb533.roa (raw, json)
Hash identifier: M/F1aSbDs8Ttm6wTLuBRxOIriJzTwBUtqZH14R+50RU=
Subject key identifier: 42:AE:8C:24:49:80:91:59:99:BC:9D:24:CC:0B:5A:A9:9F:51:8C:8E
Certificate issuer: /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial: 1952
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/a7757c13fa0e790fb9c5401f3f21ca6f2cabb533.roa
Signing time: Wed 21 Sep 2022 20:48:44 +0000
ROA not before: Wed 21 Sep 2022 20:47:05 +0000
ROA not after: Sat 21 Sep 2024 20:47:05 +0000
asID: 8163
IP address blocks: 190.182.64.0/24 maxlen: 24
190.182.65.0/24 maxlen: 24
190.182.66.0/24 maxlen: 24
190.182.67.0/24 maxlen: 24
190.182.68.0/24 maxlen: 24
190.182.69.0/24 maxlen: 24
190.182.70.0/24 maxlen: 24
190.182.72.0/24 maxlen: 24
190.182.73.0/24 maxlen: 24
190.182.74.0/24 maxlen: 24
190.182.75.0/24 maxlen: 24
190.182.76.0/24 maxlen: 24
190.182.77.0/24 maxlen: 24
190.182.78.0/24 maxlen: 24
190.182.79.0/24 maxlen: 24
190.182.80.0/24 maxlen: 24
190.182.81.0/24 maxlen: 24
190.182.82.0/24 maxlen: 24
190.182.83.0/24 maxlen: 24
190.182.84.0/24 maxlen: 24
190.182.85.0/24 maxlen: 24
190.182.86.0/24 maxlen: 24
190.182.88.0/24 maxlen: 24
190.182.99.0/24 maxlen: 24
190.182.100.0/24 maxlen: 24
190.182.126.0/24 maxlen: 24
190.182.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6482 (0x1952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Validity
Not Before: Sep 21 20:47:05 2022 GMT
Not After : Sep 21 20:47:05 2024 GMT
Subject: CN=a7757c13fa0e790fb9c5401f3f21ca6f2cabb533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:80:f8:41:d0:39:23:44:a0:d8:4b:00:b9:
43:68:b7:bb:79:2d:8c:1d:7d:85:26:73:17:89:92:
81:eb:9f:b4:63:11:33:d5:19:63:4c:45:a0:9f:14:
eb:82:e6:a9:96:ff:a1:2b:aa:76:51:a2:dc:ae:3c:
88:63:25:2f:1d:58:4f:e7:4d:36:1a:03:cb:d5:b7:
f5:56:d6:7f:a5:b0:22:b5:ba:f3:df:35:b3:2b:f3:
82:d3:1d:a5:f0:52:19:62:79:fb:7c:03:2c:40:a7:
ac:93:10:8f:7a:a9:03:26:53:50:36:e4:a7:14:fa:
07:db:f7:be:59:03:cc:32:e4:63:ef:8f:e9:a8:8b:
a2:48:b6:18:47:0d:fb:bc:cd:0d:8a:1a:ec:36:8c:
ff:3d:41:09:15:00:dc:03:fb:a6:09:6d:9d:ee:bc:
c8:1c:af:b9:76:2a:2d:73:2b:f1:82:26:1a:91:e9:
d7:cc:3d:20:a2:d7:36:75:52:f7:c4:5f:15:d4:a0:
85:09:e2:bb:79:db:5e:82:d8:3d:3b:61:d5:d4:cd:
df:8d:54:ae:77:ac:09:7e:4e:24:17:73:66:7e:02:
f6:09:e1:a5:28:91:81:92:04:8a:a2:db:ab:9d:23:
f3:cf:51:00:6c:6a:a3:5e:26:7e:9b:38:03:8d:2f:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AE:8C:24:49:80:91:59:99:BC:9D:24:CC:0B:5A:A9:9F:51:8C:8E
X509v3 Authority Key Identifier:
keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/a7757c13fa0e790fb9c5401f3f21ca6f2cabb533.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.182.64.0-190.182.70.255
190.182.72.0-190.182.86.255
190.182.88.0/24
190.182.99.0-190.182.100.255
190.182.126.0/23
Signature Algorithm: sha256WithRSAEncryption
64:f1:27:4b:34:74:19:a7:41:0f:03:b5:f6:7a:f5:61:8b:b7:
e6:68:bd:23:88:56:d9:8f:e8:6d:78:de:dd:5c:0c:d9:3f:f9:
f4:60:18:06:ae:2b:af:b1:d3:bf:d2:83:03:64:e8:82:d0:de:
a2:0f:0a:14:c2:43:2c:24:bf:46:a1:73:84:0f:12:a1:18:13:
82:6c:10:06:29:74:c8:ce:19:7b:cb:fb:0b:38:ba:8f:cc:2b:
c2:24:05:87:d0:17:5f:fe:d4:b8:b0:a9:d8:1e:e0:2e:f5:27:
14:4a:3a:12:d1:20:8c:b0:3d:2e:eb:b2:b1:8b:13:f3:d4:d6:
2a:b5:47:cc:59:ec:57:b3:10:03:ea:72:76:2e:b7:d0:f1:45:
64:a9:5a:c4:03:84:f2:79:7c:94:ac:99:60:63:9f:91:f1:7b:
f4:9d:f3:1a:77:d2:f1:8f:ab:d4:d4:2e:34:c8:2a:91:03:73:
87:f8:b5:5c:f8:45:27:8b:79:0b:99:61:8b:01:e4:73:f2:fc:
62:76:e6:5c:1e:21:d3:c4:d5:07:58:73:c2:d0:db:28:c1:d1:
7e:dd:f5:a3:c8:31:33:23:09:91:1d:20:0b:53:b1:46:68:90:
cb:2e:18:9b:21:8a:65:2a:92:2e:03:3d:4c:d3:5d:4d:ef:82:
f3:42:c6:78
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgICGVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjBj
ZmQzNmE1NTZlMWE0NmMxOGRlNTNkM2ZhODFiMGUxZTk3MGYyMzAeFw0yMjA5MjEy
MDQ3MDVaFw0yNDA5MjEyMDQ3MDVaMDMxMTAvBgNVBAMTKGE3NzU3YzEzZmEwZTc5
MGZiOWM1NDAxZjNmMjFjYTZmMmNhYmI1MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9noD4QdA5I0Sg2EsAuUNot7t5LYwdfYUmcxeJkoHrn7RjETPV
GWNMRaCfFOuC5qmW/6ErqnZRotyuPIhjJS8dWE/nTTYaA8vVt/VW1n+lsCK1uvPf
NbMr84LTHaXwUhlieft8AyxAp6yTEI96qQMmU1A25KcU+gfb975ZA8wy5GPvj+mo
i6JIthhHDfu8zQ2KGuw2jP89QQkVANwD+6YJbZ3uvMgcr7l2Ki1zK/GCJhqR6dfM
PSCi1zZ1UvfEXxXUoIUJ4rt5216C2D07YdXUzd+NVK53rAl+TiQXc2Z+AvYJ4aUo
kYGSBIqi26udI/PPUQBsaqNeJn6bOAONL2wbAgMBAAGjggKLMIIChzAdBgNVHQ4E
FgQUQq6MJEmAkVmZvJ0kzAtaqZ9RjI4wHwYDVR0jBBgwFoAU1nZUeFHpbz2H+u+k
BerUpLcNiQAwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8yMGNmZDM2
YTU1NmUxYTQ2YzE4ZGU1M2QzZmE4MWIwZTFlOTcwZjIzLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85NThiMzFlYy0zMTMzLTQyM2QtOGFkYi0zODEzNmIz
YzlmNTEvYTc3NTdjMTNmYTBlNzkwZmI5YzU0MDFmM2YyMWNhNmYyY2FiYjUzMy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzk1OGIzMWVjLTMxMzMtNDIzZC04YWRiLTM4MTM2
YjNjOWY1MS8yMGNmZDM2YTU1NmUxYTQ2YzE4ZGU1M2QzZmE4MWIwZTFlOTcwZjIz
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAw
PjA8BAIAATA2MAwDBAa+tkADBAC+tkYwDAMEA762SAMEAL62VgMEAL62WDAMAwQA
vrZjAwQAvrZkAwQBvrZ+MA0GCSqGSIb3DQEBCwUAA4IBAQBk8SdLNHQZp0EPA7X2
evVhi7fmaL0jiFbZj+hteN7dXAzZP/n0YBgGriuvsdO/0oMDZOiC0N6iDwoUwkMs
JL9GoXOEDxKhGBOCbBAGKXTIzhl7y/sLOLqPzCvCJAWH0Bdf/tS4sKnYHuAu9ScU
SjoS0SCMsD0u67KxixPz1NYqtUfMWexXsxAD6nJ2LrfQ8UVkqVrEA4TyeXyUrJlg
Y5+R8Xv0nfMad9Lxj6vU1C40yCqRA3OH+LVc+EUni3kLmWGLAeRz8vxiduZcHiHT
xNUHWHPC0NsowdF+3fWjyDEzIwmRHSALU7FGaJDLLhibIYplKpIuAz1M011N74Lz
QsZ4
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org