Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/fd1e8b8f1994e94c9b54dd762a9cb363b22f1c3e.roa
File: fd1e8b8f1994e94c9b54dd762a9cb363b22f1c3e.roa (raw, json)
Hash identifier: 4RlQqOwdCye+nt+mJS0f2UA7HBtejRssbm9GhNxfj94=
Subject key identifier: E3:C6:EE:BF:D2:69:6C:77:5E:85:15:FD:45:B6:77:6F:03:2F:57:93
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 1B210B
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/fd1e8b8f1994e94c9b54dd762a9cb363b22f1c3e.roa
Signing time: Mon 05 Sep 2022 15:04:55 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 262589
IP address blocks: 190.90.208.0/23 maxlen: 24
179.1.92.0/22 maxlen: 24
179.1.96.0/24 maxlen: 24
190.90.148.0/24 maxlen: 24
190.90.207.0/24 maxlen: 24
190.90.235.0/24 maxlen: 24
190.90.13.0/24 maxlen: 24
190.90.83.0/24 maxlen: 24
190.90.245.0/24 maxlen: 24
179.1.77.0/24 maxlen: 24
179.1.66.0/24 maxlen: 24
179.1.67.0/24 maxlen: 24
179.1.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1777931 (0x1b210b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=fd1e8b8f1994e94c9b54dd762a9cb363b22f1c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:19:9b:ae:b8:e0:a9:3b:21:37:8d:1b:dc:a4:
14:fe:ac:7c:a0:a4:15:e4:a2:78:cf:4d:61:4a:ab:
e8:1d:9b:da:0e:fe:2f:41:25:73:cc:72:a0:01:f7:
c1:ed:f9:6a:55:8b:cc:fb:73:c4:c1:d0:30:ef:a7:
8c:2e:03:9d:f4:39:e4:cd:b2:b5:b6:88:c1:9f:d7:
19:fd:d2:14:98:6f:42:f1:02:f6:a2:be:0a:d1:54:
44:be:54:0d:a5:d6:36:0e:3f:bc:62:f6:7d:0c:15:
ce:41:6b:08:e2:99:7f:71:24:21:c3:21:03:57:75:
7a:b9:bb:e7:3e:e1:65:0b:f8:99:ca:0f:f8:c9:34:
6c:58:5f:af:87:d0:16:f0:05:25:e4:79:7d:6e:d7:
87:b0:54:4e:e3:e1:b8:12:35:b8:1c:0d:6f:d7:85:
ce:b5:cc:ac:d4:83:bc:ca:98:41:83:01:a2:23:f3:
59:80:86:4b:9f:f3:8c:d2:4e:3c:a9:fc:3e:8e:d6:
5b:4e:eb:fa:cf:ac:03:a3:49:64:e5:94:30:b8:88:
4a:85:8e:b2:36:46:f0:92:06:bc:fd:39:66:5a:56:
f3:f3:1a:23:b4:96:cc:2b:16:7b:78:03:af:c2:20:
7a:72:f3:6d:94:bf:2e:4b:40:cc:19:46:52:d1:c2:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C6:EE:BF:D2:69:6C:77:5E:85:15:FD:45:B6:77:6F:03:2F:57:93
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/fd1e8b8f1994e94c9b54dd762a9cb363b22f1c3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.1.66.0-179.1.68.255
179.1.77.0/24
179.1.92.0-179.1.96.255
190.90.13.0/24
190.90.83.0/24
190.90.148.0/24
190.90.207.0-190.90.209.255
190.90.235.0/24
190.90.245.0/24
Signature Algorithm: sha256WithRSAEncryption
57:dd:51:70:8a:46:98:96:88:d7:c0:e3:28:85:4c:96:f4:4a:
69:0f:b1:c2:27:9b:4f:43:10:ac:7d:1d:6b:f3:3f:d4:56:04:
52:c2:fe:90:05:f6:52:2c:4f:c7:c6:ae:2d:7b:af:69:93:5e:
b4:8b:64:11:24:ac:54:ff:af:6b:bc:11:9b:1f:49:3a:5a:45:
35:26:88:41:e6:e7:0f:2c:6b:69:de:13:34:a1:0a:9b:e0:90:
e1:39:2f:14:74:9d:13:be:f5:18:8f:d3:b8:a7:ff:19:15:ab:
25:83:d6:0a:6a:42:1f:10:fa:3c:d1:21:a4:a7:1d:c4:a3:88:
fb:3c:99:c3:57:b7:5b:84:59:bd:87:f8:9d:b5:5b:4b:05:c3:
43:e4:30:9f:fe:b2:23:b2:96:70:1a:0c:0d:c3:e4:21:d6:d2:
5d:cb:47:6a:9e:3f:57:8a:94:68:e5:e5:4f:8e:cc:2a:30:00:
09:1b:99:39:57:70:e6:03:31:3a:80:50:bb:dd:5d:cc:d3:db:
31:86:87:70:c3:6a:6c:b4:c9:82:3b:88:1e:ce:b2:46:c5:bc:
aa:ad:82:f6:4a:5f:86:e1:c5:c4:19:9c:8d:4e:3d:d2:1c:f7:
6e:9e:59:52:4e:30:70:b7:ed:af:50:f5:ac:2f:c5:15:5c:e0:
e0:ed:d0:52
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIDGyELMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhmZDFlOGI4ZjE5OTRl
OTRjOWI1NGRkNzYyYTljYjM2M2IyMmYxYzNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAixmbrrjgqTshN40b3KQU/qx8oKQV5KJ4z01hSqvoHZvaDv4v
QSVzzHKgAffB7flqVYvM+3PEwdAw76eMLgOd9DnkzbK1tojBn9cZ/dIUmG9C8QL2
or4K0VREvlQNpdY2Dj+8YvZ9DBXOQWsI4pl/cSQhwyEDV3V6ubvnPuFlC/iZyg/4
yTRsWF+vh9AW8AUl5Hl9bteHsFRO4+G4EjW4HA1v14XOtcys1IO8yphBgwGiI/NZ
gIZLn/OM0k48qfw+jtZbTuv6z6wDo0lk5ZQwuIhKhY6yNkbwkga8/TlmWlbz8xoj
tJbMKxZ7eAOvwiB6cvNtlL8uS0DMGUZS0cJoLQIDAQABo4ICozCCAp8wHQYDVR0O
BBYEFOPG7r/SaWx3XoUV/UW2d28DL1eTMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5L2ZkMWU4YjhmMTk5NGU5NGM5YjU0ZGQ3NjJhOWNiMzYzYjIyZjFjM2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBnBggrBgEFBQcBBwEB/wRY
MFYwVAQCAAEwTjAMAwQBswFCAwQAswFEAwQAswFNMAwDBAKzAVwDBACzAWADBAC+
Wg0DBAC+WlMDBAC+WpQwDAMEAL5azwMEAb5a0AMEAL5a6wMEAL5a9TANBgkqhkiG
9w0BAQsFAAOCAQEAV91RcIpGmJaI18DjKIVMlvRKaQ+xwiebT0MQrH0da/M/1FYE
UsL+kAX2UixPx8auLXuvaZNetItkESSsVP+va7wRmx9JOlpFNSaIQebnDyxrad4T
NKEKm+CQ4TkvFHSdE771GI/TuKf/GRWrJYPWCmpCHxD6PNEhpKcdxKOI+zyZw1e3
W4RZvYf4nbVbSwXDQ+Qwn/6yI7KWcBoMDcPkIdbSXctHap4/V4qUaOXlT47MKjAA
CRuZOVdw5gMxOoBQu91dzNPbMYaHcMNqbLTJgjuIHs6yRsW8qq2C9kpfhuHFxBmc
jU490hz3bp5ZUk4wcLftr1D1rC/FFVzg4O3QUg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org