Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/28554f4ebd9ec323f1f3883950efa25b1ddb8528.roa
File: 28554f4ebd9ec323f1f3883950efa25b1ddb8528.roa (raw, json)
Hash identifier: k/3lMTa4XgRpzZRXEEgZCI+U7A8bcfnX8AAwZQTvfNo=
Subject key identifier: DD:5F:36:8E:68:91:3E:87:C0:C4:4E:CD:9F:A3:58:10:38:98:0D:37
Certificate issuer: /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial: 15ACDD
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/28554f4ebd9ec323f1f3883950efa25b1ddb8528.roa
Signing time: Tue 04 Jan 2022 18:18:19 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 22368
IP address blocks: 190.13.0.0/20 maxlen: 23
181.174.0.0/18 maxlen: 24
190.13.24.0/21 maxlen: 23
190.13.32.0/21 maxlen: 22
190.13.40.0/21 maxlen: 22
190.96.128.0/21 maxlen: 22
190.96.160.0/20 maxlen: 24
190.96.176.0/21 maxlen: 23
190.96.192.0/21 maxlen: 24
190.96.208.0/20 maxlen: 24
190.124.96.0/19 maxlen: 24
190.184.128.0/18 maxlen: 24
201.221.128.0/20 maxlen: 24
201.221.144.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1420509 (0x15acdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=28554f4ebd9ec323f1f3883950efa25b1ddb8528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:81:0f:71:42:db:26:7d:fb:16:a4:94:b1:
cd:19:a8:71:1a:13:1c:ba:a4:93:d2:31:74:f5:ef:
b8:07:94:28:67:f1:87:59:38:f5:d3:dc:78:56:4b:
db:15:2a:7e:c0:ba:4f:53:bc:be:93:ff:b0:70:12:
3a:06:04:f9:67:b6:0a:b6:58:0f:86:63:9e:b0:88:
fe:5c:7e:32:95:99:c1:db:6f:2f:4d:2f:ac:d0:ed:
3f:05:15:02:b7:df:02:41:a8:80:91:b2:15:d2:f6:
a4:00:d1:c3:ce:60:81:c1:80:d7:ba:86:85:f9:ff:
01:33:13:41:e0:d0:d9:0d:f3:63:9b:c6:a4:f9:60:
96:64:d6:59:06:46:ff:78:e7:72:d0:26:57:5d:39:
62:2e:21:e1:ce:2f:bd:1f:f5:45:44:54:99:8c:28:
19:71:f6:9e:17:95:4c:2c:05:ac:ef:ea:06:cd:e7:
06:f7:d9:f3:a8:06:d5:d9:57:80:f9:f7:91:b8:dc:
9b:31:dc:6e:a9:9b:77:c7:5b:bc:7f:e6:f1:d3:18:
ca:73:7c:ea:aa:a9:24:93:04:0f:dd:8f:14:f0:91:
d5:5a:70:c2:d3:87:77:07:23:12:2e:ec:e9:dc:7f:
51:e3:9f:a5:df:d2:40:25:5c:f1:52:7a:c4:b1:04:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5F:36:8E:68:91:3E:87:C0:C4:4E:CD:9F:A3:58:10:38:98:0D:37
X509v3 Authority Key Identifier:
keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/28554f4ebd9ec323f1f3883950efa25b1ddb8528.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.174.0.0/18
190.13.0.0/20
190.13.24.0-190.13.47.255
190.96.128.0/21
190.96.160.0-190.96.183.255
190.96.192.0/21
190.96.208.0/20
190.124.96.0/19
190.184.128.0/18
201.221.128.0/19
Signature Algorithm: sha256WithRSAEncryption
c5:09:ac:98:b4:57:0e:5d:dd:8d:ed:4c:8f:e1:bf:ea:bd:5a:
ed:39:5c:f5:29:79:f2:f1:eb:fe:b4:09:19:b1:38:69:f0:1b:
b4:56:6b:3e:c6:27:19:f6:97:ac:0c:ce:ae:c6:b2:a0:f9:6b:
05:63:9d:3f:46:58:9e:f2:1f:e6:10:34:f7:54:22:dd:24:ee:
57:ba:fa:59:06:16:bf:dc:db:97:00:1d:cf:ac:54:87:4a:f3:
45:5a:2c:1c:1d:54:a8:2d:66:aa:e2:4d:d5:34:bb:24:ed:81:
d2:da:ec:2b:e8:2e:92:99:28:ca:10:6c:b0:e3:aa:f1:53:25:
02:35:13:e7:04:a1:6c:d1:49:4b:35:12:3a:0b:2f:05:c2:55:
82:56:cc:26:d1:d8:67:a2:b7:36:97:57:e3:6d:ef:e0:53:2f:
a7:4d:30:11:37:8e:26:20:db:b4:45:d6:fc:fd:4c:ab:0a:c5:
2f:dc:34:c2:bd:2a:b9:ef:bb:b2:70:18:0f:49:56:80:c9:d0:
1d:5c:2e:8d:81:01:1b:80:74:d3:88:32:65:a7:37:ee:3f:09:
5b:e2:47:e3:a1:bd:0c:8e:80:93:f2:d5:5a:6b:99:08:27:e7:
6e:bd:15:20:79:11:2b:48:79:70:a9:e0:7d:71:5f:03:93:23:
06:41:1f:6f
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgIDFazdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
N2QzMzA5NDdkMjY0YzgxYjQ1MDNkZjNiMWVmNjdkNDVjYzJkYzQwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygyODU1NGY0ZWJkOWVj
MzIzZjFmMzg4Mzk1MGVmYTI1YjFkZGI4NTI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmpeBD3FC2yZ9+xaklLHNGahxGhMcuqST0jF09e+4B5QoZ/GH
WTj109x4VkvbFSp+wLpPU7y+k/+wcBI6BgT5Z7YKtlgPhmOesIj+XH4ylZnB228v
TS+s0O0/BRUCt98CQaiAkbIV0vakANHDzmCBwYDXuoaF+f8BMxNB4NDZDfNjm8ak
+WCWZNZZBkb/eOdy0CZXXTliLiHhzi+9H/VFRFSZjCgZcfaeF5VMLAWs7+oGzecG
99nzqAbV2VeA+feRuNybMdxuqZt3x1u8f+bx0xjKc3zqqqkkkwQP3Y8U8JHVWnDC
04d3ByMSLuzp3H9R45+l39JAJVzxUnrEsQQtDwIDAQABo4ICoTCCAp0wHQYDVR0O
BBYEFN1fNo5okT6HwMROzZ+jWBA4mA03MB8GA1UdIwQYMBaAFGG2jf2H687Wyisk
4qqP9wfaY14ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzM3ZDMz
MDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjNlNWRkOWUtYmJjYS00YzQ5LTkyZjUtOGM2NzUx
MTY1ZTkyLzI4NTU0ZjRlYmQ5ZWMzMjNmMWYzODgzOTUwZWZhMjViMWRkYjg1Mjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iM2U1ZGQ5ZS1iYmNhLTRjNDktOTJmNS04YzY3
NTExNjVlOTIvMzM3ZDMzMDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBggrBgEFBQcBBwEB/wRW
MFQwUgQCAAEwTAMEBrWuAAMEBL4NADAMAwQDvg0YAwQEvg0gAwQDvmCAMAwDBAW+
YKADBAO+YLADBAO+YMADBAS+YNADBAW+fGADBAa+uIADBAXJ3YAwDQYJKoZIhvcN
AQELBQADggEBAMUJrJi0Vw5d3Y3tTI/hv+q9Wu05XPUpefLx6/60CRmxOGnwG7RW
az7GJxn2l6wMzq7GsqD5awVjnT9GWJ7yH+YQNPdUIt0k7le6+lkGFr/c25cAHc+s
VIdK80VaLBwdVKgtZqriTdU0uyTtgdLa7CvoLpKZKMoQbLDjqvFTJQI1E+cEoWzR
SUs1EjoLLwXCVYJWzCbR2GeitzaXV+Nt7+BTL6dNMBE3jiYg27RF1vz9TKsKxS/c
NMK9Krnvu7JwGA9JVoDJ0B1cLo2BARuAdNOIMmWnN+4/CVviR+OhvQyOgJPy1Vpr
mQgn5269FSB5EStIeXCp4H1xXwOTIwZBH28=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org