Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/f2d7e10a3f443a994b824f8678562687a0eec626.roa
File: f2d7e10a3f443a994b824f8678562687a0eec626.roa (raw, json)
Hash identifier: FGXnpWfXtERp8/Y2vWbZDUT4rG9dYvN5mx8qMf1IXDI=
Subject key identifier: E9:CD:B5:54:27:E0:57:AE:98:98:6A:F2:08:DE:ED:38:11:03:74:4A
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 20C6F6
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/f2d7e10a3f443a994b824f8678562687a0eec626.roa
Signing time: Tue 24 Jan 2023 13:58:16 +0000
ROA not before: Mon 19 Apr 2021 03:00:00 +0000
ROA not after: Thu 11 May 2023 03:00:00 +0000
asID: 262589
IP address blocks: 190.90.0.0/21 maxlen: 21
190.90.8.0/21 maxlen: 21
190.90.16.0/21 maxlen: 21
190.90.24.0/24 maxlen: 24
190.90.28.0/22 maxlen: 24
190.90.33.0/24 maxlen: 24
190.90.34.0/24 maxlen: 24
190.90.36.0/22 maxlen: 24
190.90.52.0/22 maxlen: 24
190.90.60.0/22 maxlen: 24
190.90.64.0/20 maxlen: 24
190.90.80.0/20 maxlen: 24
190.90.96.0/20 maxlen: 24
190.90.112.0/21 maxlen: 24
190.90.120.0/21 maxlen: 24
190.90.128.0/20 maxlen: 24
190.90.144.0/21 maxlen: 24
190.90.154.0/24 maxlen: 24
190.90.191.0/24 maxlen: 24
190.90.192.0/20 maxlen: 24
190.90.208.0/21 maxlen: 24
190.90.224.0/21 maxlen: 24
190.90.232.0/21 maxlen: 24
190.90.240.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148086 (0x20c6f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Apr 19 03:00:00 2021 GMT
Not After : May 11 03:00:00 2023 GMT
Subject: CN=f2d7e10a3f443a994b824f8678562687a0eec626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e2:de:7f:29:db:c7:5c:94:79:1e:44:55:c9:
e9:eb:30:28:9c:fc:e1:8d:10:fe:c1:bc:d9:48:8b:
3c:82:d6:8f:30:17:72:cc:20:b6:4b:2d:df:49:94:
cd:9c:78:2a:ae:cf:a2:c3:73:92:e0:ae:2a:66:de:
20:70:b5:54:60:23:b8:8d:40:7b:09:b2:4a:98:d0:
6d:40:d5:a8:6b:96:da:74:d8:02:e9:9c:a8:f0:0a:
6e:d4:13:ed:40:cf:ef:d8:f1:ea:d1:3c:4c:fd:82:
23:b3:8a:9d:7b:76:76:10:31:d5:a8:9b:54:d4:1e:
e8:ea:cb:a9:29:f6:73:fe:bc:2f:4c:09:6e:71:ae:
fb:36:b7:26:cf:e8:61:47:f0:09:2f:30:7e:53:35:
2e:f2:61:0e:56:1f:6e:a6:e5:0d:01:bf:0e:fe:6a:
f2:90:6f:6e:f1:b4:b6:bf:aa:13:06:9c:8c:4a:d8:
1c:9b:c5:1c:a2:bb:5c:eb:04:33:18:f3:ed:0f:37:
fb:2b:ad:46:39:31:d5:e9:37:78:cf:8b:d4:8c:4a:
bf:4a:1d:34:7a:a3:4f:3a:46:57:44:96:96:bb:d0:
a0:88:2f:9d:48:49:d0:ea:51:81:f5:e1:ae:83:a8:
8b:c7:c8:27:44:52:1a:52:f2:23:42:6b:4f:e8:c3:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CD:B5:54:27:E0:57:AE:98:98:6A:F2:08:DE:ED:38:11:03:74:4A
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/f2d7e10a3f443a994b824f8678562687a0eec626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.0.0-190.90.24.255
190.90.28.0/22
190.90.33.0-190.90.34.255
190.90.36.0/22
190.90.52.0/22
190.90.60.0-190.90.151.255
190.90.154.0/24
190.90.191.0-190.90.215.255
190.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:9e:87:f6:a1:cc:0c:e3:a6:0f:53:02:28:62:a0:0c:f6:21:
75:7d:c8:4a:d8:b0:8d:52:b8:e7:e7:12:db:58:57:93:a9:33:
b7:6a:7f:30:58:7d:c2:e3:fb:a8:db:ca:b5:f8:4e:f9:20:f5:
57:5c:45:cb:33:ce:d9:33:de:00:5f:36:2f:5c:f9:8a:61:18:
6e:29:29:dd:71:90:b9:af:f2:ae:e5:aa:c5:f9:bf:38:57:23:
6e:84:24:3e:f5:6d:fe:6d:7b:9e:fd:6d:c1:af:3e:e3:4b:86:
37:7b:bd:08:86:0e:fe:33:7e:7f:cd:8e:ca:01:36:0c:20:32:
01:cd:68:6e:45:4e:54:d3:d2:7f:e9:39:62:1f:7c:37:64:99:
8e:75:79:eb:ac:32:b3:bd:be:d6:ac:2c:e7:5b:6b:fc:37:59:
df:fc:58:d7:b0:75:9f:50:a0:b7:c9:08:83:10:a3:c9:6e:0e:
e7:bc:49:f4:5a:af:97:80:1b:c7:c4:75:0a:f1:ae:68:26:cd:
9b:66:05:59:e8:78:df:3d:3b:eb:b4:fe:61:29:9e:ea:48:31:
fc:e9:b5:69:bc:88:72:75:26:bd:4c:9f:81:59:31:0e:1a:e0:
84:23:94:a2:67:ff:ff:33:fd:0a:d3:b9:5b:c8:5f:06:cf:d9:
8b:ba:9c:20
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDIMb2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwNDE5
MDMwMDAwWhcNMjMwNTExMDMwMDAwWjAzMTEwLwYDVQQDEyhmMmQ3ZTEwYTNmNDQz
YTk5NGI4MjRmODY3ODU2MjY4N2EwZWVjNjI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAieLefynbx1yUeR5EVcnp6zAonPzhjRD+wbzZSIs8gtaPMBdy
zCC2Sy3fSZTNnHgqrs+iw3OS4K4qZt4gcLVUYCO4jUB7CbJKmNBtQNWoa5badNgC
6Zyo8Apu1BPtQM/v2PHq0TxM/YIjs4qde3Z2EDHVqJtU1B7o6supKfZz/rwvTAlu
ca77Nrcmz+hhR/AJLzB+UzUu8mEOVh9upuUNAb8O/mrykG9u8bS2v6oTBpyMStgc
m8Ucortc6wQzGPPtDzf7K61GOTHV6Td4z4vUjEq/Sh00eqNPOkZXRJaWu9CgiC+d
SEnQ6lGB9eGug6iLx8gnRFIaUvIjQmtP6MOt/QIDAQABo4ICqjCCAqYwHQYDVR0O
BBYEFOnNtVQn4FeumJhq8gje7TgRA3RKMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5L2YyZDdlMTBhM2Y0NDNhOTk0YjgyNGY4Njc4NTYyNjg3YTBlZWM2MjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBuBggrBgEFBQcBBwEB/wRf
MF0wWwQCAAEwVTALAwMBvloDBAC+WhgDBAK+WhwwDAMEAL5aIQMEAL5aIgMEAr5a
JAMEAr5aNDAMAwQCvlo8AwQDvlqQAwQAvlqaMAwDBAC+Wr8DBAO+WtADBAW+WuAw
DQYJKoZIhvcNAQELBQADggEBAC+eh/ahzAzjpg9TAihioAz2IXV9yErYsI1SuOfn
EttYV5OpM7dqfzBYfcLj+6jbyrX4Tvkg9VdcRcszztkz3gBfNi9c+YphGG4pKd1x
kLmv8q7lqsX5vzhXI26EJD71bf5te579bcGvPuNLhjd7vQiGDv4zfn/NjsoBNgwg
MgHNaG5FTlTT0n/pOWIffDdkmY51eeusMrO9vtasLOdba/w3Wd/8WNewdZ9QoLfJ
CIMQo8luDue8SfRar5eAG8fEdQrxrmgmzZtmBVnoeN89O+u0/mEpnupIMfzptWm8
iHJ1Jr1Mn4FZMQ4a4IQjlKJn//8z/QrTuVvIXwbP2Yu6nCA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org