Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/dbcc15cb75e86c2c588bdd383e469e5a88cad876.roa
File: dbcc15cb75e86c2c588bdd383e469e5a88cad876.roa (raw, json)
Hash identifier: fxuDHa+MUfkPA4viieHBb6u+ALXtKBuCiCsmd34UCMA=
Subject key identifier: F0:FF:52:3E:9B:F5:66:B3:A3:04:B0:E2:72:94:27:E6:2A:8E:8E:F1
Certificate issuer: /CN=a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f
Certificate serial: 083D90
Authority key identifier: DB:EE:7B:EC:56:4F:90:5D:60:8E:8A:D7:C2:54:C5:D8:32:57:10:50
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/dbcc15cb75e86c2c588bdd383e469e5a88cad876.roa
Signing time: Wed 24 Mar 2021 14:31:59 +0000
ROA not before: Wed 24 Mar 2021 14:31:59 +0000
ROA not after: Tue 24 Mar 2026 14:31:59 +0000
asID: 266725
IP address blocks: 190.107.240.0/21 maxlen: 24
190.196.224.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540048 (0x83d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f
Validity
Not Before: Mar 24 14:31:59 2021 GMT
Not After : Mar 24 14:31:59 2026 GMT
Subject: CN=dbcc15cb75e86c2c588bdd383e469e5a88cad876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:e7:7e:73:04:31:8e:1f:87:07:71:bf:79:
72:db:04:4f:8e:44:c3:3d:f7:cb:2d:bc:cf:6f:c9:
33:a3:4e:3c:13:5f:93:6c:14:e6:0d:f9:bc:5c:1f:
32:ac:bd:38:5d:f7:0d:4c:3f:0e:8d:a6:5c:9d:91:
b7:0e:63:fa:50:31:83:8c:5d:aa:b9:1d:ce:32:e8:
27:c7:77:9f:a1:12:a9:47:12:d9:32:74:d9:7b:41:
93:78:39:ad:74:13:a1:e2:f4:5a:96:08:39:ba:4e:
87:01:af:91:3e:0b:66:fa:39:11:6d:6e:f2:26:6f:
c8:0d:c1:dd:dc:16:16:45:dc:45:74:6e:29:da:9a:
43:ac:6f:2a:fa:e2:a6:fe:84:f4:d3:a2:b4:b1:c5:
d9:c0:f9:34:af:bc:07:55:ae:9e:fc:2a:9b:ad:a1:
b9:80:3d:91:d0:ee:4d:61:a3:16:65:ff:7c:0f:71:
29:53:3f:6c:f7:7d:7a:3e:55:2d:de:16:83:56:be:
bb:c5:bb:3a:2f:e4:8d:a2:1f:28:8c:53:4e:d3:47:
f1:b0:34:bd:72:43:9d:04:49:61:51:1d:50:27:4a:
fa:b1:cc:a2:97:9e:9e:b6:ad:21:94:4f:09:e2:db:
58:52:e2:d2:ef:c9:91:49:14:67:00:ed:e6:ef:c6:
4f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FF:52:3E:9B:F5:66:B3:A3:04:B0:E2:72:94:27:E6:2A:8E:8E:F1
X509v3 Authority Key Identifier:
keyid:DB:EE:7B:EC:56:4F:90:5D:60:8E:8A:D7:C2:54:C5:D8:32:57:10:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/dbcc15cb75e86c2c588bdd383e469e5a88cad876.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/a3a1d5f9c3b42669fce6b8ae03d338f1d21f942f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.107.240.0/21
190.196.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:dc:ad:d2:28:ad:61:58:ae:20:dc:74:e0:e2:01:b0:fa:f5:
86:66:bd:58:8e:32:b3:b8:9a:fc:89:b0:69:cf:e2:c6:e6:16:
b0:1b:c2:de:af:16:74:eb:67:e5:e7:21:13:37:9d:6c:e8:ee:
a3:a4:6d:99:d5:b9:70:5e:7d:68:12:a4:6f:1c:42:88:51:e5:
a9:7f:31:d7:36:69:f5:5c:5d:fd:d7:57:64:b0:86:33:bf:d9:
77:86:78:d9:af:66:a6:35:af:b2:ec:90:c5:24:5a:ae:0a:19:
5c:85:02:fb:b0:55:5b:5d:ab:2b:58:47:65:67:e5:24:10:91:
00:17:89:49:22:5f:59:01:af:0c:de:cb:2d:d5:62:04:5c:35:
48:25:11:fc:d6:73:2f:0e:ad:de:75:2a:ab:0e:9b:d7:67:29:
b6:32:72:cc:1a:25:e6:fa:c1:32:0c:08:bd:ea:c8:05:ca:05:
50:6d:5d:66:aa:07:3e:7b:10:ec:28:b4:b5:bc:ad:9c:80:c2:
82:d4:44:5c:b5:1c:77:10:2d:39:86:03:40:fe:4c:e1:f3:1f:
b3:0e:f9:33:6b:95:54:e6:fa:bd:26:2b:61:62:d2:36:7c:5e:
56:e3:0f:52:9b:e1:a0:fd:eb:43:f5:49:1c:ee:e0:0e:57:c4:
f0:ea:0f:f7
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDCD2QMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEz
YTFkNWY5YzNiNDI2NjlmY2U2YjhhZTAzZDMzOGYxZDIxZjk0MmYwHhcNMjEwMzI0
MTQzMTU5WhcNMjYwMzI0MTQzMTU5WjAzMTEwLwYDVQQDEyhkYmNjMTVjYjc1ZTg2
YzJjNTg4YmRkMzgzZTQ2OWU1YTg4Y2FkODc2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqsznfnMEMY4fhwdxv3ly2wRPjkTDPffLLbzPb8kzo048E1+T
bBTmDfm8XB8yrL04XfcNTD8OjaZcnZG3DmP6UDGDjF2quR3OMugnx3efoRKpRxLZ
MnTZe0GTeDmtdBOh4vRalgg5uk6HAa+RPgtm+jkRbW7yJm/IDcHd3BYWRdxFdG4p
2ppDrG8q+uKm/oT006K0scXZwPk0r7wHVa6e/CqbraG5gD2R0O5NYaMWZf98D3Ep
Uz9s9316PlUt3haDVr67xbs6L+SNoh8ojFNO00fxsDS9ckOdBElhUR1QJ0r6scyi
l56etq0hlE8J4ttYUuLS78mRSRRnAO3m78ZPYQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFPD/Uj6b9WazowSw4nKUJ+Yqjo7xMB8GA1UdIwQYMBaAFNvue+xWT5BdYI6K
18JUxdgyVxBQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTNhMWQ1
ZjljM2I0MjY2OWZjZTZiOGFlMDNkMzM4ZjFkMjFmOTQyZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWU4OTgyMDItNTUxYy00YTRlLWE2ZDAtY2Y3Mzlj
MzE2Njc4L2RiY2MxNWNiNzVlODZjMmM1ODhiZGQzODNlNDY5ZTVhODhjYWQ4NzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ZTg5ODIwMi01NTFjLTRhNGUtYTZkMC1jZjcz
OWMzMTY2NzgvYTNhMWQ1ZjljM2I0MjY2OWZjZTZiOGFlMDNkMzM4ZjFkMjFmOTQy
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEA75r8AMEBL7E4DANBgkqhkiG9w0BAQsFAAOCAQEAPtyt0iit
YViuINx04OIBsPr1hma9WI4ys7ia/Imwac/ixuYWsBvC3q8WdOtn5echEzedbOju
o6RtmdW5cF59aBKkbxxCiFHlqX8x1zZp9Vxd/ddXZLCGM7/Zd4Z42a9mpjWvsuyQ
xSRargoZXIUC+7BVW12rK1hHZWflJBCRABeJSSJfWQGvDN7LLdViBFw1SCUR/NZz
Lw6t3nUqqw6b12cptjJyzBol5vrBMgwIverIBcoFUG1dZqoHPnsQ7Ci0tbytnIDC
gtREXLUcdxAtOYYDQP5M4fMfsw75M2uVVOb6vSYrYWLSNnxeVuMPUpvhoP3rQ/VJ
HO7gDlfE8OoP9w==
-----END CERTIFICATE-----
Generated at Wed Dec 6 14:18:43 2023 by rpki-client on console-ams.rpki-client.org