Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/7a2b0923e6ee32f97c377ecfde9b912567e3a731.roa
File: 7a2b0923e6ee32f97c377ecfde9b912567e3a731.roa (raw, json)
Hash identifier: nNnExwXxgPXrlfRmkZRz8L+7zmHzc03OGo4OSAAxVaU=
Subject key identifier: 70:35:34:1B:32:EB:17:23:E2:31:6A:79:33:26:1C:35:A6:28:43:E8
Certificate issuer: /CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Certificate serial: 0D3795
Authority key identifier: D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/7a2b0923e6ee32f97c377ecfde9b912567e3a731.roa
Signing time: Wed 24 Mar 2021 14:39:23 +0000
ROA not before: Wed 24 Mar 2021 14:39:22 +0000
ROA not after: Tue 24 Mar 2026 14:39:22 +0000
asID: 27738
IP address blocks: 190.130.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 15:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866197 (0xd3795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Validity
Not Before: Mar 24 14:39:22 2021 GMT
Not After : Mar 24 14:39:22 2026 GMT
Subject: CN=7a2b0923e6ee32f97c377ecfde9b912567e3a731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:14:68:c2:a1:2c:7c:4f:e2:5c:dd:2b:2f:
4f:e4:fd:07:fd:d3:aa:24:0d:40:fb:51:48:41:22:
b5:e5:4d:96:9e:ad:58:1f:0a:d4:7f:9d:51:6c:e7:
e8:e0:0b:b8:9f:45:a4:53:10:d7:eb:d0:63:e3:82:
72:58:64:0c:11:6d:78:ee:55:72:79:d0:ba:7b:cc:
ed:31:bc:d7:c0:3e:09:bb:30:39:90:3c:ec:15:95:
8e:88:9b:b7:81:51:ac:2e:90:fb:6c:35:f5:39:cd:
19:bb:a3:3f:ca:a7:77:08:bd:2d:8e:88:0c:60:a8:
1d:91:d2:99:14:25:45:75:c6:94:da:c1:e7:84:b3:
75:53:ba:61:b3:92:37:bb:31:2a:d6:68:72:8f:26:
c5:39:7f:65:4a:3c:20:fe:30:13:33:ff:54:70:bc:
8f:3a:f1:fc:4d:62:cf:ef:f9:de:ef:76:e4:9c:9a:
7f:a1:e1:21:84:bd:6d:a3:63:80:a1:b1:7f:2d:a2:
fc:8a:2b:c2:70:8e:61:ac:d4:10:07:8e:6d:f1:79:
67:ce:65:df:63:6d:ab:cf:bc:e3:66:a5:4b:cf:f8:
63:3f:8d:a7:70:e6:09:ef:82:77:a0:b8:61:68:5c:
22:03:02:32:3c:47:ed:24:10:41:45:ad:93:7f:db:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:35:34:1B:32:EB:17:23:E2:31:6A:79:33:26:1C:35:A6:28:43:E8
X509v3 Authority Key Identifier:
keyid:D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/7a2b0923e6ee32f97c377ecfde9b912567e3a731.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.130.128.0/17
Signature Algorithm: sha256WithRSAEncryption
02:75:26:72:86:8a:22:6c:df:a0:c4:65:aa:ad:9a:e2:66:fb:
e1:cc:e7:00:1c:ea:b4:bb:a1:cb:68:6d:1e:c2:57:0c:01:fa:
71:df:90:f1:8d:bc:45:df:a0:1f:ba:f4:5f:9e:42:98:f1:5f:
a4:46:1d:d5:5b:9b:b9:33:b5:b6:7e:06:21:65:67:f5:0c:8d:
79:b8:de:1b:5c:2a:c1:9f:1b:0a:05:b9:67:d3:cb:b4:e8:59:
ff:49:d9:78:74:4b:a6:ae:b4:e7:29:1c:2e:f6:6b:01:db:f7:
ea:e7:59:3a:37:b9:a8:05:35:97:57:3f:c6:89:be:dc:9b:fc:
c2:a1:a8:7f:e9:e7:d7:8b:ad:4a:f0:5a:60:3b:74:13:12:89:
6d:78:aa:4e:1e:cc:91:61:de:a9:57:a4:69:bf:17:cd:2b:28:
6f:0f:f6:89:92:54:a8:af:70:dd:27:26:c9:63:8c:26:03:a2:
84:eb:16:ba:f8:39:18:29:f5:28:0a:0d:fa:8a:ff:d8:a1:5b:
43:7e:d4:8e:e7:da:ab:ef:a8:fa:97:0b:6b:ad:cc:db:d5:b0:
0d:72:35:1f:b5:d9:ef:ab:80:1d:3e:34:c4:76:93:2b:18:a0:
c3:9b:d9:3c:05:5a:97:b3:be:69:05:49:c4:6d:4f:9e:5b:c2:
f1:b5:3d:f2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDTeVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
Y2MzYmRkNGVkZmM0OThkMmM5MjQ3ODNhNDBjOWZmMjU1MTIwYjgwHhcNMjEwMzI0
MTQzOTIyWhcNMjYwMzI0MTQzOTIyWjAzMTEwLwYDVQQDEyg3YTJiMDkyM2U2ZWUz
MmY5N2MzNzdlY2ZkZTliOTEyNTY3ZTNhNzMxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArs8UaMKhLHxP4lzdKy9P5P0H/dOqJA1A+1FIQSK15U2Wnq1Y
HwrUf51RbOfo4Au4n0WkUxDX69Bj44JyWGQMEW147lVyedC6e8ztMbzXwD4JuzA5
kDzsFZWOiJu3gVGsLpD7bDX1Oc0Zu6M/yqd3CL0tjogMYKgdkdKZFCVFdcaU2sHn
hLN1U7phs5I3uzEq1mhyjybFOX9lSjwg/jATM/9UcLyPOvH8TWLP7/ne73bknJp/
oeEhhL1to2OAobF/LaL8iivCcI5hrNQQB45t8XlnzmXfY22rz7zjZqVLz/hjP42n
cOYJ74J3oLhhaFwiAwIyPEftJBBBRa2Tf9s35QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHA1NBsy6xcj4jFqeTMmHDWmKEPoMB8GA1UdIwQYMBaAFNGqfDUMMnUcXXct
+8TNjbNXzHCTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNjYzNi
ZGQ0ZWRmYzQ5OGQyYzkyNDc4M2E0MGM5ZmYyNTUxMjBiOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmMyMDEwYzMtNDE1Yy00MjgwLWJiMzEtNzZhY2Mw
MmVkOTdkLzdhMmIwOTIzZTZlZTMyZjk3YzM3N2VjZmRlOWI5MTI1NjdlM2E3MzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYzIwMTBjMy00MTVjLTQyODAtYmIzMS03NmFj
YzAyZWQ5N2QvMzNjYzNiZGQ0ZWRmYzQ5OGQyYzkyNDc4M2E0MGM5ZmYyNTUxMjBi
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEB76CgDANBgkqhkiG9w0BAQsFAAOCAQEAAnUmcoaKImzfoMRl
qq2a4mb74cznABzqtLuhy2htHsJXDAH6cd+Q8Y28Rd+gH7r0X55CmPFfpEYd1Vub
uTO1tn4GIWVn9QyNebjeG1wqwZ8bCgW5Z9PLtOhZ/0nZeHRLpq605ykcLvZrAdv3
6udZOje5qAU1l1c/xom+3Jv8wqGof+nn14utSvBaYDt0ExKJbXiqTh7MkWHeqVek
ab8XzSsobw/2iZJUqK9w3ScmyWOMJgOihOsWuvg5GCn1KAoN+or/2KFbQ37Ujufa
q++o+pcLa63M29WwDXI1H7XZ76uAHT40xHaTKxigw5vZPAVal7O+aQVJxG1PnlvC
8bU98g==
-----END CERTIFICATE-----
Generated at Tue Jan 9 19:43:18 2024 by rpki-client on console-ams.rpki-client.org