Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/4a92fb78c354cc60b9f0282587185107eabb289f.roa
File: 4a92fb78c354cc60b9f0282587185107eabb289f.roa (raw, json)
Hash identifier: PN0ySpPsU1DOe5xATuT7pcc9k2sV11sAcPf5qHAJlC0=
Subject key identifier: 1A:35:BF:16:5B:84:7E:9C:AB:CC:7B:08:EF:46:0C:34:96:06:43:8C
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 0D3438
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/4a92fb78c354cc60b9f0282587185107eabb289f.roa
Signing time: Wed 24 Mar 2021 14:35:22 +0000
ROA not before: Wed 24 Mar 2021 14:35:22 +0000
ROA not after: Tue 24 Mar 2026 14:35:22 +0000
asID: 26619
IP address blocks: 190.90.25.0/24 maxlen: 24
190.90.26.0/24 maxlen: 24
190.90.27.0/24 maxlen: 24
190.90.32.0/24 maxlen: 24
190.90.33.0/24 maxlen: 24
190.90.34.0/24 maxlen: 24
190.90.35.0/24 maxlen: 24
190.90.56.0/24 maxlen: 24
190.90.57.0/24 maxlen: 24
190.90.58.0/24 maxlen: 24
190.90.59.0/24 maxlen: 24
190.90.155.0/24 maxlen: 24
190.90.156.0/24 maxlen: 24
190.90.157.0/24 maxlen: 24
190.90.158.0/24 maxlen: 24
190.90.159.0/24 maxlen: 24
190.90.160.0/24 maxlen: 24
190.90.161.0/24 maxlen: 24
190.90.162.0/24 maxlen: 24
190.90.163.0/24 maxlen: 24
190.90.164.0/24 maxlen: 24
190.90.165.0/24 maxlen: 24
190.90.166.0/24 maxlen: 24
190.90.167.0/24 maxlen: 24
190.90.168.0/24 maxlen: 24
190.90.169.0/24 maxlen: 24
190.90.170.0/24 maxlen: 24
190.90.171.0/24 maxlen: 24
190.90.172.0/24 maxlen: 24
190.90.173.0/24 maxlen: 24
190.90.174.0/24 maxlen: 24
190.90.175.0/24 maxlen: 24
190.90.176.0/24 maxlen: 24
190.90.177.0/24 maxlen: 24
190.90.178.0/24 maxlen: 24
190.90.179.0/24 maxlen: 24
190.90.180.0/24 maxlen: 24
190.90.181.0/24 maxlen: 24
190.90.182.0/24 maxlen: 24
190.90.183.0/24 maxlen: 24
190.90.184.0/24 maxlen: 24
190.90.185.0/24 maxlen: 24
190.90.186.0/24 maxlen: 24
190.90.216.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865336 (0xd3438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Mar 24 14:35:22 2021 GMT
Not After : Mar 24 14:35:22 2026 GMT
Subject: CN=4a92fb78c354cc60b9f0282587185107eabb289f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:88:d8:69:75:0d:19:28:60:ba:97:81:42:
9c:9d:dd:5e:be:90:d0:ba:04:16:84:f7:e9:7f:42:
61:9c:ab:60:32:ac:40:c0:92:31:85:dc:db:f8:d2:
9d:cd:3f:07:3b:aa:18:03:71:56:90:5c:70:0b:92:
0f:bd:fa:f0:c2:c2:41:b1:82:cc:e9:b8:bf:bb:ae:
3d:8d:0d:cb:c2:79:d8:f1:bc:97:36:39:58:7b:3b:
30:aa:9d:96:78:9c:5a:3c:50:4d:06:d7:47:f5:d3:
59:e8:cb:ba:19:90:c2:25:27:e1:fd:b3:e7:6f:1a:
05:fa:f5:0e:9e:f5:25:fc:d9:bb:a4:e5:a5:9c:84:
7e:08:79:c5:94:07:03:8f:d1:db:bc:15:73:57:2f:
95:ef:bf:da:a5:e5:02:bc:ba:ce:ba:d1:66:21:67:
af:fd:5e:da:90:81:f4:19:6d:a5:77:54:fa:2b:0c:
1d:8e:8a:12:f5:61:3d:7f:c3:9a:e1:4e:80:2f:34:
b6:6e:38:00:78:8e:1a:47:be:fd:97:53:fb:ab:2c:
b2:9a:9d:c0:7c:76:c0:51:58:73:7e:86:95:5d:6f:
b8:09:1f:26:7b:72:1e:3d:00:35:78:1c:9f:9f:55:
35:5f:c8:e0:15:ab:7a:3a:b2:c3:b2:78:fd:22:7b:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:35:BF:16:5B:84:7E:9C:AB:CC:7B:08:EF:46:0C:34:96:06:43:8C
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/4a92fb78c354cc60b9f0282587185107eabb289f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.25.0-190.90.27.255
190.90.32.0/22
190.90.56.0/22
190.90.155.0-190.90.186.255
190.90.216.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:6c:65:5c:6c:a0:ac:83:3b:41:37:4f:cb:10:72:1b:13:e0:
4c:e5:0f:eb:26:8d:15:45:74:1c:e0:bc:06:62:9f:33:3d:94:
7b:b4:a8:e4:8a:fe:cd:84:33:fc:7c:8e:19:b5:e9:4a:d1:22:
ee:89:08:19:85:4b:18:6b:fd:6d:49:35:ca:47:86:79:80:b4:
31:f4:4f:df:bd:0c:37:f0:59:d8:dd:4d:83:a4:a1:65:08:6c:
c6:89:7f:ec:e9:6d:f2:85:18:89:a5:93:f6:7d:84:68:55:b9:
19:cf:9f:11:d1:10:d8:d0:98:6f:57:5a:42:c3:95:ee:38:0d:
45:c8:2f:c9:fa:d7:20:d4:8e:60:9e:7d:66:a1:87:60:ec:ea:
39:4c:d7:c5:03:8d:63:9f:ce:16:4e:84:74:0f:83:1a:db:7f:
8f:5f:26:d5:94:3d:2d:08:9b:95:6b:b3:e1:79:7d:5a:3b:07:
29:eb:d7:52:2d:50:5f:fd:68:61:9f:33:11:75:b6:30:bd:e6:
0a:24:c3:72:32:96:df:82:c2:36:cd:1c:b1:9d:b3:3b:23:9e:
12:14:37:89:f5:a1:38:65:e0:89:cc:5d:b7:f1:57:d3:92:c3:
16:15:9c:e3:41:f3:9f:7f:c3:c5:dd:d7:eb:fa:f6:8f:78:8b:
c4:3d:6e:50
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgIDDTQ4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwMzI0
MTQzNTIyWhcNMjYwMzI0MTQzNTIyWjAzMTEwLwYDVQQDEyg0YTkyZmI3OGMzNTRj
YzYwYjlmMDI4MjU4NzE4NTEwN2VhYmIyODlmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAz0qI2Gl1DRkoYLqXgUKcnd1evpDQugQWhPfpf0JhnKtgMqxA
wJIxhdzb+NKdzT8HO6oYA3FWkFxwC5IPvfrwwsJBsYLM6bi/u649jQ3LwnnY8byX
NjlYezswqp2WeJxaPFBNBtdH9dNZ6Mu6GZDCJSfh/bPnbxoF+vUOnvUl/Nm7pOWl
nIR+CHnFlAcDj9HbvBVzVy+V77/apeUCvLrOutFmIWev/V7akIH0GW2ld1T6Kwwd
jooS9WE9f8Oa4U6ALzS2bjgAeI4aR779l1P7qyyymp3AfHbAUVhzfoaVXW+4CR8m
e3IePQA1eByfn1U1X8jgFat6OrLDsnj9Inuk4QIDAQABo4ICgzCCAn8wHQYDVR0O
BBYEFBo1vxZbhH6cq8x7CO9GDDSWBkOMMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5LzRhOTJmYjc4YzM1NGNjNjBiOWYwMjgyNTg3MTg1MTA3ZWFiYjI4OWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBHBggrBgEFBQcBBwEB/wQ4
MDYwNAQCAAEwLjAMAwQAvloZAwQCvloYAwQCvlogAwQCvlo4MAwDBAC+WpsDBAC+
WroDBAG+WtgwDQYJKoZIhvcNAQELBQADggEBAIxsZVxsoKyDO0E3T8sQchsT4Ezl
D+smjRVFdBzgvAZinzM9lHu0qOSK/s2EM/x8jhm16UrRIu6JCBmFSxhr/W1JNcpH
hnmAtDH0T9+9DDfwWdjdTYOkoWUIbMaJf+zpbfKFGImlk/Z9hGhVuRnPnxHRENjQ
mG9XWkLDle44DUXIL8n61yDUjmCefWahh2Ds6jlM18UDjWOfzhZOhHQPgxrbf49f
JtWUPS0Im5Vrs+F5fVo7Bynr11ItUF/9aGGfMxF1tjC95gokw3Iylt+CwjbNHLGd
szsjnhIUN4n1oThl4InMXbfxV9OSwxYVnONB859/w8Xd1+v69o94i8Q9blA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org