Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/1f1a53b03d92bd5fbf779c8e707aec690095430d.roa
File: 1f1a53b03d92bd5fbf779c8e707aec690095430d.roa (raw, json)
Hash identifier: yqgZnWOIFzfxp8vXCA1knSrrQHKHdkX/i9p3N4dS2JI=
Subject key identifier: F8:65:04:6F:96:FD:BB:19:34:C4:D7:B3:A7:27:79:C3:2C:F5:32:A1
Certificate issuer: /CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
Certificate serial: 1A0C6A
Authority key identifier: ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/1f1a53b03d92bd5fbf779c8e707aec690095430d.roa
Signing time: Tue 25 Oct 2022 13:53:34 +0000
ROA not before: Sun 21 Mar 2021 14:30:32 +0000
ROA not after: Tue 24 Mar 2026 14:30:32 +0000
asID: 52363
IP address blocks: 190.104.32.0/20 maxlen: 24
190.112.176.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1707114 (0x1a0c6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
Validity
Not Before: Mar 21 14:30:32 2021 GMT
Not After : Mar 24 14:30:32 2026 GMT
Subject: CN=1f1a53b03d92bd5fbf779c8e707aec690095430d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dd:d3:3c:19:fa:cb:93:a7:70:5d:36:7e:e1:
e2:ce:5c:2a:02:1a:27:c1:0f:2a:73:c0:6c:96:d2:
aa:4d:9b:f6:65:b2:21:a6:4f:72:6b:07:be:1a:48:
3a:2f:36:6c:21:34:24:d4:0d:2e:91:95:c1:dc:d6:
e9:a2:24:65:1a:83:29:bd:8e:78:99:4c:5e:06:5f:
a9:7a:37:2e:a7:da:19:c5:6a:90:1d:aa:c1:d2:da:
2a:4f:cb:48:09:0b:b2:75:99:27:3d:43:d7:3d:9f:
ce:26:99:38:53:6c:63:ec:cf:44:e3:82:99:5a:c0:
6f:c5:55:12:3c:f9:49:08:ee:aa:b8:1c:38:71:e3:
f3:4a:fa:cc:5b:3a:06:d4:73:45:81:5a:b9:ac:4d:
4e:04:29:d9:19:ab:09:04:c4:46:d0:8c:6d:70:c5:
f4:e3:62:b8:64:cd:71:89:21:3a:1a:99:c6:20:55:
13:42:f0:14:10:b2:12:69:79:c6:3b:86:6f:10:a7:
03:e4:b6:c2:cf:33:26:2e:97:3f:69:75:16:67:a2:
b5:73:d0:3f:0b:f1:cd:0c:82:a8:83:27:07:f1:95:
f5:87:33:70:54:52:38:6c:e0:fe:d3:f4:bd:90:73:
2c:9c:14:42:16:14:ee:b8:e0:75:1b:d0:8f:73:ba:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:65:04:6F:96:FD:BB:19:34:C4:D7:B3:A7:27:79:C3:2C:F5:32:A1
X509v3 Authority Key Identifier:
keyid:ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/1f1a53b03d92bd5fbf779c8e707aec690095430d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.104.32.0/20
190.112.176.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:36:c0:da:df:a1:9b:ac:f9:5d:3f:99:09:8b:46:ac:3b:c4:
6f:7d:ff:4b:ba:c2:f3:6b:87:22:11:f9:66:44:62:83:fa:5b:
56:f2:83:a9:0b:03:f2:29:2b:7e:bb:6c:bb:52:b8:cf:df:c4:
cc:af:77:0c:68:2e:be:6d:2f:e0:ef:08:d3:00:0c:74:e2:e1:
f5:de:dc:54:13:0d:90:3e:93:46:17:db:6e:f5:84:62:f0:cc:
cc:da:fa:7f:9d:31:33:62:8b:f3:81:2d:d2:64:30:cf:ed:79:
e2:fc:8a:63:62:51:1b:14:0d:63:ae:35:e3:01:9f:61:c8:17:
5c:68:ad:3b:fa:37:47:55:a1:02:eb:9c:d7:c6:3c:4c:29:df:
73:87:95:1e:a1:3c:03:de:eb:62:b4:97:da:66:6a:0a:11:12:
f8:5e:42:c3:99:c6:0a:6d:dd:5d:c1:19:de:b9:29:a2:62:0d:
13:3b:f2:0a:9a:35:9a:21:51:8c:52:1f:90:5e:f9:d1:0e:16:
51:0a:d3:36:58:b7:f3:e9:d8:7a:7b:87:25:83:e5:0d:4e:fe:
ac:94:97:45:2c:b9:23:99:70:8b:52:6a:16:f0:96:ab:c0:de:
62:04:42:5f:8f:75:cf:d4:23:f0:9b:32:5d:d3:81:80:84:e9:
66:95:f5:ee
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDGgxqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdm
YTk2YWQ0Njg4NGY5MjBiYzhmM2I4ZjljMmZiYjY2MGZmZDliNjgwHhcNMjEwMzIx
MTQzMDMyWhcNMjYwMzI0MTQzMDMyWjAzMTEwLwYDVQQDEygxZjFhNTNiMDNkOTJi
ZDVmYmY3NzljOGU3MDdhZWM2OTAwOTU0MzBkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgt3TPBn6y5OncF02fuHizlwqAhonwQ8qc8BsltKqTZv2ZbIh
pk9yawe+Gkg6LzZsITQk1A0ukZXB3NbpoiRlGoMpvY54mUxeBl+pejcup9oZxWqQ
HarB0toqT8tICQuydZknPUPXPZ/OJpk4U2xj7M9E44KZWsBvxVUSPPlJCO6quBw4
cePzSvrMWzoG1HNFgVq5rE1OBCnZGasJBMRG0IxtcMX042K4ZM1xiSE6GpnGIFUT
QvAUELISaXnGO4ZvEKcD5LbCzzMmLpc/aXUWZ6K1c9A/C/HNDIKogycH8ZX1hzNw
VFI4bOD+0/S9kHMsnBRCFhTuuOB1G9CPc7r7owIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFPhlBG+W/bsZNMTXs6cnecMs9TKhMB8GA1UdIwQYMBaAFO0CLaOSte73ycfy
75hBfrVfNtboMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2ZhOTZh
ZDQ2ODg0ZjkyMGJjOGYzYjhmOWMyZmJiNjYwZmZkOWI2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTFmMGI4ODktNGE3Mi00ODU2LTlhMWYtNzg1ZjU1
OTM4YzAzLzFmMWE1M2IwM2Q5MmJkNWZiZjc3OWM4ZTcwN2FlYzY5MDA5NTQzMGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMWYwYjg4OS00YTcyLTQ4NTYtOWExZi03ODVm
NTU5MzhjMDMvN2ZhOTZhZDQ2ODg0ZjkyMGJjOGYzYjhmOWMyZmJiNjYwZmZkOWI2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEBL5oIAMEBL5wsDANBgkqhkiG9w0BAQsFAAOCAQEAnDbA2t+h
m6z5XT+ZCYtGrDvEb33/S7rC82uHIhH5ZkRig/pbVvKDqQsD8ikrfrtsu1K4z9/E
zK93DGguvm0v4O8I0wAMdOLh9d7cVBMNkD6TRhfbbvWEYvDMzNr6f50xM2KL84Et
0mQwz+154vyKY2JRGxQNY6414wGfYcgXXGitO/o3R1WhAuuc18Y8TCnfc4eVHqE8
A97rYrSX2mZqChES+F5Cw5nGCm3dXcEZ3rkpomINEzvyCpo1miFRjFIfkF750Q4W
UQrTNli38+nYenuHJYPlDU7+rJSXRSy5I5lwi1JqFvCWq8DeYgRCX491z9Qj8Jsy
XdOBgITpZpX17g==
-----END CERTIFICATE-----
Generated at Thu Nov 30 18:20:25 2023 by rpki-client on console-ams.rpki-client.org