Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/beeb9adfe1d01618b0626d9c52e11fb207edefb3.roa
File: beeb9adfe1d01618b0626d9c52e11fb207edefb3.roa (raw, json)
Hash identifier: ReRHOV2yD39Dw111Cvyvx6oW0MnY5TFr09xAZvhvrQU=
Subject key identifier: 30:85:25:2E:78:45:13:01:89:5D:5C:FF:1E:51:5F:D3:41:CF:2F:55
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 208D0B
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/beeb9adfe1d01618b0626d9c52e11fb207edefb3.roa
Signing time: Sun 22 Jan 2023 22:12:43 +0000
ROA not before: Thu 22 Apr 2021 03:00:00 +0000
ROA not after: Thu 11 May 2023 03:00:00 +0000
asID: 262589
IP address blocks: 190.90.0.0/21 maxlen: 21
190.90.8.0/21 maxlen: 21
190.90.16.0/21 maxlen: 21
190.90.24.0/24 maxlen: 24
190.90.28.0/22 maxlen: 24
190.90.33.0/24 maxlen: 24
190.90.34.0/24 maxlen: 24
190.90.36.0/22 maxlen: 24
190.90.52.0/22 maxlen: 24
190.90.60.0/22 maxlen: 24
190.90.64.0/20 maxlen: 24
190.90.80.0/20 maxlen: 24
190.90.96.0/20 maxlen: 24
190.90.112.0/21 maxlen: 24
190.90.128.0/20 maxlen: 24
190.90.144.0/21 maxlen: 24
190.90.154.0/24 maxlen: 24
190.90.191.0/24 maxlen: 24
190.90.192.0/24 maxlen: 24
190.90.200.0/23 maxlen: 24
190.90.204.0/24 maxlen: 24
190.90.208.0/21 maxlen: 24
190.90.224.0/21 maxlen: 24
190.90.232.0/21 maxlen: 24
190.90.240.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2133259 (0x208d0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Apr 22 03:00:00 2021 GMT
Not After : May 11 03:00:00 2023 GMT
Subject: CN=beeb9adfe1d01618b0626d9c52e11fb207edefb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:41:26:60:01:94:16:94:c5:82:5f:83:43:44:
12:2a:08:c4:70:af:33:cf:b8:2a:26:fc:56:60:f5:
46:95:1b:e6:84:d6:d9:f7:0e:8e:4c:6c:cd:cd:ab:
05:68:a7:07:9d:af:f3:c5:f9:a2:f6:e3:65:84:10:
e9:1a:19:c5:fb:7f:00:f0:4a:9a:14:48:57:71:08:
4e:5e:8e:76:af:52:0e:5d:3a:69:1f:6b:a2:47:01:
c8:6a:07:d8:bc:b8:69:03:2c:cd:3d:06:0f:54:94:
0a:67:87:45:ff:00:fb:6e:07:96:19:ed:f3:5e:34:
00:6c:4a:bb:94:a7:05:92:f3:68:27:23:2f:cb:12:
7e:2d:6f:65:82:f5:85:e5:fd:b4:29:24:74:e7:aa:
41:29:29:55:fc:a8:6d:87:d0:a2:63:ea:5e:59:a6:
ba:89:86:4c:5e:01:6a:9b:ed:ba:a0:6d:b9:6a:41:
fd:f9:9a:53:4b:04:e6:52:3e:b4:90:cc:b4:e0:d1:
88:b2:9e:0f:d4:9b:c5:6b:4e:1a:8f:06:8d:d7:0a:
25:41:23:07:b1:d5:ac:7d:14:b8:87:b4:21:d3:15:
76:e0:1f:96:2a:f1:eb:a4:05:5f:91:44:1a:c7:8d:
f4:d3:0e:02:8e:a9:bd:cc:9c:e0:a4:3b:d5:b7:6c:
68:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:85:25:2E:78:45:13:01:89:5D:5C:FF:1E:51:5F:D3:41:CF:2F:55
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/beeb9adfe1d01618b0626d9c52e11fb207edefb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.0.0-190.90.24.255
190.90.28.0/22
190.90.33.0-190.90.34.255
190.90.36.0/22
190.90.52.0/22
190.90.60.0-190.90.119.255
190.90.128.0-190.90.151.255
190.90.154.0/24
190.90.191.0-190.90.192.255
190.90.200.0/23
190.90.204.0/24
190.90.208.0/21
190.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:60:09:f5:cd:a1:c7:0f:0d:9d:ae:90:4a:7f:57:43:e1:88:
a6:42:96:c5:b2:21:1e:c7:3f:39:36:43:d8:5c:97:e3:10:c0:
20:6e:b7:5b:4b:c7:63:73:34:e4:c4:b7:3c:7d:4e:0e:f0:18:
1f:f7:71:33:a2:d9:7d:fa:b3:57:34:01:2b:48:74:13:e7:3a:
cf:ec:0b:23:2a:8e:93:ed:45:e4:67:2c:5c:17:64:ad:72:ff:
df:80:35:f2:ab:f7:d9:33:77:34:0e:2a:84:97:7f:4a:36:0e:
d8:36:19:e8:e2:9d:74:7f:f3:e6:cb:b5:2e:9e:93:32:d6:90:
db:d3:a0:ba:fd:b9:61:cf:4b:0c:51:f7:45:40:83:89:c1:a0:
e5:99:22:dd:3d:0d:2e:0d:56:f3:c0:97:16:b5:d8:a9:92:2a:
64:57:b1:86:36:fe:0e:54:a0:49:9f:a6:1e:84:ce:62:d5:c0:
77:76:dd:16:ea:d8:29:51:e2:91:43:f1:fb:97:40:82:08:ba:
b0:1e:8a:07:d0:a7:5f:f8:c8:49:6a:04:1a:84:8d:3e:f7:1f:
74:33:f2:f0:cc:c9:91:6e:a8:01:ca:14:4a:c2:55:99:65:c1:
ef:9b:08:3a:6f:e5:d4:65:eb:14:08:49:11:93:bd:f6:cd:87:
2b:17:48:26
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIDII0LMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwNDIy
MDMwMDAwWhcNMjMwNTExMDMwMDAwWjAzMTEwLwYDVQQDEyhiZWViOWFkZmUxZDAx
NjE4YjA2MjZkOWM1MmUxMWZiMjA3ZWRlZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiUEmYAGUFpTFgl+DQ0QSKgjEcK8zz7gqJvxWYPVGlRvmhNbZ
9w6OTGzNzasFaKcHna/zxfmi9uNlhBDpGhnF+38A8EqaFEhXcQhOXo52r1IOXTpp
H2uiRwHIagfYvLhpAyzNPQYPVJQKZ4dF/wD7bgeWGe3zXjQAbEq7lKcFkvNoJyMv
yxJ+LW9lgvWF5f20KSR056pBKSlV/Khth9CiY+peWaa6iYZMXgFqm+26oG25akH9
+ZpTSwTmUj60kMy04NGIsp4P1JvFa04ajwaN1wolQSMHsdWsfRS4h7Qh0xV24B+W
KvHrpAVfkUQax4300w4Cjqm9zJzgpDvVt2xonwIDAQABo4ICyzCCAscwHQYDVR0O
BBYEFDCFJS54RRMBiV1c/x5RX9NBzy9VMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5L2JlZWI5YWRmZTFkMDE2MThiMDYyNmQ5YzUyZTExZmIyMDdlZGVmYjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBjgYIKwYBBQUHAQcBAf8E
fzB9MHsEAgABMHUwCwMDAb5aAwQAvloYAwQCvlocMAwDBAC+WiEDBAC+WiIDBAK+
WiQDBAK+WjQwDAMEAr5aPAMEA75acDAMAwQHvlqAAwQDvlqQAwQAvlqaMAwDBAC+
Wr8DBAC+WsADBAG+WsgDBAC+WswDBAO+WtADBAW+WuAwDQYJKoZIhvcNAQELBQAD
ggEBAC1gCfXNoccPDZ2ukEp/V0PhiKZClsWyIR7HPzk2Q9hcl+MQwCBut1tLx2Nz
NOTEtzx9Tg7wGB/3cTOi2X36s1c0AStIdBPnOs/sCyMqjpPtReRnLFwXZK1y/9+A
NfKr99kzdzQOKoSXf0o2Dtg2GejinXR/8+bLtS6ekzLWkNvToLr9uWHPSwxR90VA
g4nBoOWZIt09DS4NVvPAlxa12KmSKmRXsYY2/g5UoEmfph6EzmLVwHd23Rbq2ClR
4pFD8fuXQIIIurAeigfQp1/4yElqBBqEjT73H3Qz8vDMyZFuqAHKFErCVZllwe+b
CDpv5dRl6xQISRGTvfbNhysXSCY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org