Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/25ffd6b9ed7955fd8ad6da72bf7753e915b640c3.roa
File: 25ffd6b9ed7955fd8ad6da72bf7753e915b640c3.roa (raw, json)
Hash identifier: myN9v9aN3CB1deeT5kGDmnXNwetxLEIvK+lWskkIJns=
Subject key identifier: 9C:36:75:BE:EE:FF:78:6C:EB:71:3F:E0:B0:7A:89:C0:96:9F:A2:D5
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 23FB63
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/25ffd6b9ed7955fd8ad6da72bf7753e915b640c3.roa
Signing time: Wed 10 May 2023 08:30:06 +0000
ROA not before: Tue 09 May 2023 08:30:06 +0000
ROA not after: Thu 08 May 2025 08:30:06 +0000
asID: 262589
IP address blocks: 190.90.0.0/17 maxlen: 17
190.90.0.0/21 maxlen: 24
190.90.8.0/21 maxlen: 24
190.90.16.0/21 maxlen: 24
190.90.24.0/21 maxlen: 24
190.90.32.0/21 maxlen: 24
190.90.52.0/22 maxlen: 24
190.90.60.0/22 maxlen: 24
190.90.64.0/20 maxlen: 24
190.90.80.0/20 maxlen: 24
190.90.96.0/20 maxlen: 24
190.90.112.0/21 maxlen: 24
190.90.120.0/21 maxlen: 24
190.90.128.0/20 maxlen: 24
190.90.144.0/21 maxlen: 24
190.90.152.0/22 maxlen: 24
190.90.172.0/22 maxlen: 24
190.90.176.0/23 maxlen: 24
190.90.188.0/22 maxlen: 24
190.90.191.0/24 maxlen: 24
190.90.192.0/20 maxlen: 24
190.90.208.0/21 maxlen: 24
190.90.219.0/24 maxlen: 24
190.90.224.0/21 maxlen: 24
190.90.232.0/21 maxlen: 24
190.90.240.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2358115 (0x23fb63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: May 9 08:30:06 2023 GMT
Not After : May 8 08:30:06 2025 GMT
Subject: CN=25ffd6b9ed7955fd8ad6da72bf7753e915b640c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d5:9a:f6:c7:6d:9d:40:98:49:e1:ff:91:8d:
50:d3:9b:42:49:35:31:fd:f1:0a:df:27:7b:b2:d5:
90:aa:bd:ef:9c:75:00:79:57:aa:f0:d2:fd:35:6c:
e9:60:39:c5:82:50:c4:91:7d:e0:09:e7:28:d2:ac:
b4:82:7d:bd:9d:97:99:24:9a:aa:df:d7:e2:dc:99:
10:05:ff:e7:24:48:42:7e:21:ba:fa:6a:2b:82:76:
16:7a:b7:08:15:1e:08:33:a7:6c:f8:a8:0c:0b:97:
10:bf:c0:4e:db:d2:3d:29:ba:ce:8e:e9:5f:cd:04:
22:aa:f6:0c:5b:a3:76:0d:12:fa:66:c6:0e:bc:d9:
08:35:a7:b8:c0:b3:9f:39:b3:8c:90:d7:06:d3:db:
09:4c:f2:6f:82:53:8b:a9:14:f0:33:5a:f5:20:d4:
f0:16:2c:ab:a6:19:2b:12:08:85:b9:5c:74:c5:3c:
29:f0:d9:2d:83:58:7b:8d:b1:80:dd:02:59:0b:41:
c4:49:b7:5e:83:5d:98:f1:da:1a:52:9f:4e:2f:4a:
66:2a:cf:2a:87:64:ba:ca:94:6d:e8:d3:09:d5:e8:
19:d0:ac:30:03:53:0a:6c:cc:36:fb:88:b0:71:50:
b6:61:57:b2:fb:21:79:59:4c:47:58:09:85:d3:d6:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:36:75:BE:EE:FF:78:6C:EB:71:3F:E0:B0:7A:89:C0:96:9F:A2:D5
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/25ffd6b9ed7955fd8ad6da72bf7753e915b640c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.0.0-190.90.155.255
190.90.172.0-190.90.177.255
190.90.188.0-190.90.215.255
190.90.219.0/24
190.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
69:e0:f0:1b:f7:34:fc:99:64:79:b6:c7:41:9b:93:47:f2:4e:
81:1f:8a:af:f3:9d:08:e6:b4:26:06:65:b1:b7:d6:a3:82:7a:
bc:d8:ae:fb:53:77:26:ff:56:54:59:35:84:38:1e:3c:2c:df:
20:33:7e:9b:15:f3:96:cc:ca:7a:a5:51:8f:1b:44:26:b4:72:
d5:58:3d:ff:6e:f6:2a:e8:c1:f4:34:12:01:4d:33:fe:15:c0:
86:65:25:15:04:3c:fa:5f:32:4c:e7:49:1d:0b:14:94:b4:bc:
7f:4f:38:2e:f2:68:7e:96:62:23:ad:34:d1:65:64:d0:82:f6:
3d:18:c0:71:c8:f9:ed:1d:a7:40:bd:a3:8a:71:7d:71:15:80:
e0:21:f9:dc:85:84:af:f5:9c:6e:9c:c8:d5:4a:61:59:d1:e8:
09:b7:db:33:db:d2:22:c1:b7:c5:3e:4f:3e:e1:e0:23:c1:cf:
97:2b:8d:63:3b:6c:3b:01:7e:e2:05:cc:2c:63:6d:fc:60:9d:
1c:30:94:5f:85:2e:f6:0b:aa:04:2a:a1:17:d1:ea:81:b9:ef:
fb:91:9e:0e:d9:ef:80:db:f1:68:88:f7:8e:12:ac:f1:13:ed:
4b:70:71:2d:09:4c:71:a4:66:2f:f5:2a:2f:b6:98:68:45:3e:
74:cd:07:ef
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIDI/tjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjMwNTA5
MDgzMDA2WhcNMjUwNTA4MDgzMDA2WjAzMTEwLwYDVQQDEygyNWZmZDZiOWVkNzk1
NWZkOGFkNmRhNzJiZjc3NTNlOTE1YjY0MGMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhNWa9sdtnUCYSeH/kY1Q05tCSTUx/fEK3yd7stWQqr3vnHUA
eVeq8NL9NWzpYDnFglDEkX3gCeco0qy0gn29nZeZJJqq39fi3JkQBf/nJEhCfiG6
+morgnYWercIFR4IM6ds+KgMC5cQv8BO29I9KbrOjulfzQQiqvYMW6N2DRL6ZsYO
vNkINae4wLOfObOMkNcG09sJTPJvglOLqRTwM1r1INTwFiyrphkrEgiFuVx0xTwp
8Nktg1h7jbGA3QJZC0HESbdeg12Y8doaUp9OL0pmKs8qh2S6ypRt6NMJ1egZ0Kww
A1MKbMw2+4iwcVC2YVey+yF5WUxHWAmF09aw0wIDAQABo4ICijCCAoYwHQYDVR0O
BBYEFJw2db7u/3hs63E/4LB6icCWn6LVMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5LzI1ZmZkNmI5ZWQ3OTU1ZmQ4YWQ2ZGE3MmJmNzc1M2U5MTViNjQwYzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBOBggrBgEFBQcBBwEB/wQ/
MD0wOwQCAAEwNTALAwMBvloDBAK+WpgwDAMEAr5arAMEAb5asDAMAwQCvlq8AwQD
vlrQAwQAvlrbAwQFvlrgMA0GCSqGSIb3DQEBCwUAA4IBAQBp4PAb9zT8mWR5tsdB
m5NH8k6BH4qv850I5rQmBmWxt9ajgnq82K77U3cm/1ZUWTWEOB48LN8gM36bFfOW
zMp6pVGPG0QmtHLVWD3/bvYq6MH0NBIBTTP+FcCGZSUVBDz6XzJM50kdCxSUtLx/
Tzgu8mh+lmIjrTTRZWTQgvY9GMBxyPntHadAvaOKcX1xFYDgIfnchYSv9ZxunMjV
SmFZ0egJt9sz29IiwbfFPk8+4eAjwc+XK41jO2w7AX7iBcwsY238YJ0cMJRfhS72
C6oEKqEX0eqBue/7kZ4O2e+A2/FoiPeOEqzxE+1LcHEtCUxxpGYv9SovtphoRT50
zQfv
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org