Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7206503aaec0a97fc8c285440d663cf33b2615a1.roa
File: 7206503aaec0a97fc8c285440d663cf33b2615a1.roa (raw, json)
Hash identifier: tzMyo+Rd/E9wQXwVAMF5YIxOGcm2GRMvuJkAFIDcclY=
Subject key identifier: 11:FA:F3:66:29:59:A0:A1:B2:44:A1:08:DA:27:BA:41:A6:9D:41:1E
Certificate issuer: /CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
Certificate serial: 19DAB9
Authority key identifier: ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7206503aaec0a97fc8c285440d663cf33b2615a1.roa
Signing time: Thu 20 Oct 2022 13:04:18 +0000
ROA not before: Tue 23 Mar 2021 14:30:32 +0000
ROA not after: Tue 24 Mar 2026 14:30:32 +0000
asID: 52363
IP address blocks: 190.104.32.0/20 maxlen: 24
190.112.176.0/20 maxlen: 24
2803:6800::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1694393 (0x19dab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
Validity
Not Before: Mar 23 14:30:32 2021 GMT
Not After : Mar 24 14:30:32 2026 GMT
Subject: CN=7206503aaec0a97fc8c285440d663cf33b2615a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:56:10:43:4f:bc:72:30:4e:bb:8a:20:ca:8f:
01:9f:58:ab:fd:c1:10:d1:ac:c3:ec:9e:a8:df:e1:
c7:63:0e:62:58:ef:56:b0:c6:d2:d9:66:af:15:98:
43:26:cc:78:b9:30:f9:47:db:2b:ca:64:9f:72:18:
32:1d:d8:0a:0e:ac:3c:ab:3d:cf:11:dc:75:74:8c:
af:1a:85:43:e7:f4:a7:15:86:e6:dc:50:82:b4:6e:
a8:62:99:29:db:0c:80:ba:ef:25:6e:ff:4b:18:b2:
9d:fc:bc:71:85:f6:a0:f0:22:67:8d:17:27:9a:1b:
76:78:89:5b:24:34:20:1b:ec:9e:35:22:ac:a5:d7:
df:bd:7a:1c:9c:37:87:2f:4c:d0:d0:04:4d:bb:b4:
63:74:ce:35:82:59:dd:af:96:c5:53:5f:84:50:be:
12:2a:8a:87:4f:63:7b:8d:71:94:be:7b:93:67:0e:
17:f2:cb:95:5a:23:0b:4c:80:9c:36:1f:e2:97:2a:
eb:3c:e4:2d:f1:c7:0f:39:2d:d4:73:b4:17:91:70:
46:bf:71:3a:16:9f:7d:47:b6:cb:a2:df:ca:ff:ea:
e7:2e:da:77:99:18:4e:75:35:26:76:b5:a1:a9:4f:
e4:a3:3b:c1:67:e6:5a:dd:60:2e:b8:f0:3f:fc:d6:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FA:F3:66:29:59:A0:A1:B2:44:A1:08:DA:27:BA:41:A6:9D:41:1E
X509v3 Authority Key Identifier:
keyid:ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7206503aaec0a97fc8c285440d663cf33b2615a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.104.32.0/20
190.112.176.0/20
IPv6:
2803:6800::/32
Signature Algorithm: sha256WithRSAEncryption
1a:0b:57:dc:f6:ae:91:2d:16:7e:9d:44:21:01:41:8b:92:b3:
fa:82:18:5b:40:5c:b3:bf:80:a1:ab:57:21:e4:7d:30:60:63:
6e:52:94:52:af:f2:01:8a:e4:be:64:0e:ae:c2:ad:21:13:18:
4b:8c:dc:0d:7e:6f:62:66:99:e3:2e:88:b7:0d:5f:64:10:cd:
a3:fd:fd:4d:86:4d:a0:55:5a:d8:05:9f:f6:4b:63:a9:8a:03:
c0:d8:f8:59:4c:f2:ed:78:bb:6f:33:95:1d:fe:72:18:c0:27:
c9:84:7a:a4:f5:25:77:76:95:4f:28:25:0c:1b:e4:45:52:d7:
aa:16:40:1c:20:17:58:4d:5a:cf:5d:61:1b:ce:c0:1c:7c:b4:
79:5f:02:3f:8e:12:4f:7a:3f:50:6a:f9:a9:e3:96:44:84:5f:
71:3d:e4:b7:b4:76:f5:c8:55:a9:2d:21:c8:8c:c9:a5:ab:34:
7f:45:cd:d2:ba:ea:c8:4d:19:1d:fe:ea:01:a5:de:cc:a7:5d:
83:ee:8e:c7:9a:ca:31:60:94:61:25:81:cb:0f:dd:f1:dd:a4:
26:c8:98:3f:6e:9a:50:54:71:4e:01:92:77:2d:d7:b7:f0:b6:
8d:de:a3:90:d7:65:c2:ac:83:23:b0:68:8d:e0:5a:77:b6:74:
a3:3b:9e:07
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDGdq5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdm
YTk2YWQ0Njg4NGY5MjBiYzhmM2I4ZjljMmZiYjY2MGZmZDliNjgwHhcNMjEwMzIz
MTQzMDMyWhcNMjYwMzI0MTQzMDMyWjAzMTEwLwYDVQQDEyg3MjA2NTAzYWFlYzBh
OTdmYzhjMjg1NDQwZDY2M2NmMzNiMjYxNWExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAglYQQ0+8cjBOu4ogyo8Bn1ir/cEQ0azD7J6o3+HHYw5iWO9W
sMbS2WavFZhDJsx4uTD5R9srymSfchgyHdgKDqw8qz3PEdx1dIyvGoVD5/SnFYbm
3FCCtG6oYpkp2wyAuu8lbv9LGLKd/Lxxhfag8CJnjRcnmht2eIlbJDQgG+yeNSKs
pdffvXocnDeHL0zQ0ARNu7RjdM41glndr5bFU1+EUL4SKoqHT2N7jXGUvnuTZw4X
8suVWiMLTICcNh/ilyrrPOQt8ccPOS3Uc7QXkXBGv3E6Fp99R7bLot/K/+rnLtp3
mRhOdTUmdrWhqU/kozvBZ+Za3WAuuPA//NY5jwIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFBH682YpWaChskShCNonukGmnUEeMB8GA1UdIwQYMBaAFO0CLaOSte73ycfy
75hBfrVfNtboMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2ZhOTZh
ZDQ2ODg0ZjkyMGJjOGYzYjhmOWMyZmJiNjYwZmZkOWI2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTFmMGI4ODktNGE3Mi00ODU2LTlhMWYtNzg1ZjU1
OTM4YzAzLzcyMDY1MDNhYWVjMGE5N2ZjOGMyODU0NDBkNjYzY2YzM2IyNjE1YTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMWYwYjg4OS00YTcyLTQ4NTYtOWExZi03ODVm
NTU5MzhjMDMvN2ZhOTZhZDQ2ODg0ZjkyMGJjOGYzYjhmOWMyZmJiNjYwZmZkOWI2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEBL5oIAMEBL5wsDANBAIAAjAHAwUAKANoADANBgkqhkiG9w0B
AQsFAAOCAQEAGgtX3PaukS0Wfp1EIQFBi5Kz+oIYW0Bcs7+AoatXIeR9MGBjblKU
Uq/yAYrkvmQOrsKtIRMYS4zcDX5vYmaZ4y6Itw1fZBDNo/39TYZNoFVa2AWf9ktj
qYoDwNj4WUzy7Xi7bzOVHf5yGMAnyYR6pPUld3aVTyglDBvkRVLXqhZAHCAXWE1a
z11hG87AHHy0eV8CP44ST3o/UGr5qeOWRIRfcT3kt7R29chVqS0hyIzJpas0f0XN
0rrqyE0ZHf7qAaXezKddg+6Ox5rKMWCUYSWByw/d8d2kJsiYP26aUFRxTgGSdy3X
t/C2jd6jkNdlwqyDI7BojeBad7Z0ozueBw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org