Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/e4e3567788dd42bfb866cb2a4555a4d0586bf19c.roa
File: e4e3567788dd42bfb866cb2a4555a4d0586bf19c.roa (raw, json)
Hash identifier: cn/FrXc2pnmhqjVhlQIhRJs7mwOa+KkpjMs7IoQiVaw=
Subject key identifier: C1:C2:86:54:B7:84:E0:9A:86:46:1B:92:EE:23:02:78:54:A2:A3:18
Certificate issuer: /CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Certificate serial: 0D3C96
Authority key identifier: D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/e4e3567788dd42bfb866cb2a4555a4d0586bf19c.roa
Signing time: Wed 24 Mar 2021 14:39:23 +0000
ROA not before: Wed 24 Mar 2021 14:39:22 +0000
ROA not after: Tue 24 Mar 2026 14:39:22 +0000
asID: 27738
IP address blocks: 190.130.128.0/17 maxlen: 24
190.131.0.0/18 maxlen: 24
190.131.128.0/18 maxlen: 24
190.131.64.0/18 maxlen: 24
200.124.224.0/20 maxlen: 28
200.124.240.0/20 maxlen: 24
201.183.0.0/16 maxlen: 24
2800:440::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jan 2024 15:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867478 (0xd3c96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Validity
Not Before: Mar 24 14:39:22 2021 GMT
Not After : Mar 24 14:39:22 2026 GMT
Subject: CN=e4e3567788dd42bfb866cb2a4555a4d0586bf19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:36:e5:50:c4:29:8f:f5:04:66:cd:f8:bb:
95:ac:17:d4:98:90:f6:59:72:f1:58:43:4d:dc:2f:
d4:7d:79:e7:65:5d:ec:11:01:d9:52:06:13:3d:f3:
25:75:7e:ec:dd:02:a7:a6:8b:a8:ee:98:83:23:2d:
f1:9f:ba:2f:5f:bb:89:3e:1a:2e:84:89:92:5d:c3:
3f:05:0b:7e:15:ef:b8:ba:ae:17:01:d1:c3:86:f3:
76:60:a5:76:ad:9a:1f:41:4b:cb:27:41:70:bd:cb:
6d:d8:65:37:50:6b:44:00:2e:c0:9b:4f:4f:79:54:
d6:a1:24:08:a0:f2:d7:13:5f:d8:f5:ef:75:27:f6:
21:4f:9e:47:11:36:dc:19:72:47:df:90:9f:94:dd:
44:57:e9:58:48:9a:af:f2:90:6e:17:fe:50:19:b8:
68:d9:f5:da:95:79:49:0b:dd:cd:9a:34:45:c4:d1:
45:f5:6d:91:af:ce:18:0a:7c:7e:d6:6b:89:ac:9f:
31:b2:d7:d0:b7:7b:71:a1:67:e8:a2:f3:50:2f:e4:
b1:56:6c:1c:f6:76:47:ff:e0:f0:d5:f5:e4:f9:32:
a0:da:c8:5a:a8:e0:15:81:b2:b1:3a:f9:b3:55:f7:
4e:90:6c:b3:91:38:07:08:e3:15:53:72:ea:58:72:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C2:86:54:B7:84:E0:9A:86:46:1B:92:EE:23:02:78:54:A2:A3:18
X509v3 Authority Key Identifier:
keyid:D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/e4e3567788dd42bfb866cb2a4555a4d0586bf19c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.130.128.0-190.131.191.255
200.124.224.0/19
201.183.0.0/16
IPv6:
2800:440::/32
Signature Algorithm: sha256WithRSAEncryption
78:83:bc:86:af:5b:4e:87:ae:6a:30:bc:82:e4:21:aa:12:9c:
40:22:1e:43:11:cc:db:cb:87:da:bb:5c:d1:5d:7c:f4:9e:0b:
3b:97:3b:6a:65:84:ab:73:31:82:16:63:71:2a:89:bd:54:08:
48:fc:8f:3d:26:ab:ac:35:9e:13:de:3b:60:4c:36:63:46:1f:
13:00:66:2e:0c:fe:17:71:dd:00:56:cc:9f:46:09:fc:df:96:
31:ec:d0:5c:b9:38:d5:83:a3:5c:1f:9e:62:4f:7c:29:41:f0:
37:d9:22:be:4b:1e:0d:32:aa:0a:47:3a:46:0e:ed:1c:e8:35:
7b:8c:e1:8a:a4:2d:46:48:ce:fe:79:1f:01:2e:60:47:e0:80:
cb:90:51:52:85:c9:c1:7b:76:84:89:05:b2:ce:c5:8e:c5:e8:
bc:f0:fb:1b:35:26:d6:e2:8a:00:7a:e7:10:cc:3b:5e:f2:b5:
93:e0:f5:57:33:ae:2f:52:92:a7:58:00:dc:30:c8:0b:91:4e:
c1:e5:6b:b4:c2:0c:f7:44:c4:3d:a2:c7:cf:21:f1:06:34:06:
09:69:44:d4:80:1a:97:67:88:a5:b3:f6:37:f2:32:f5:d7:9f:
e6:0c:bb:79:fd:0b:a8:80:88:13:0f:16:7a:41:e6:bb:34:79:
e0:cc:87:86
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgIDDTyWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
Y2MzYmRkNGVkZmM0OThkMmM5MjQ3ODNhNDBjOWZmMjU1MTIwYjgwHhcNMjEwMzI0
MTQzOTIyWhcNMjYwMzI0MTQzOTIyWjAzMTEwLwYDVQQDEyhlNGUzNTY3Nzg4ZGQ0
MmJmYjg2NmNiMmE0NTU1YTRkMDU4NmJmMTljMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl3c25VDEKY/1BGbN+LuVrBfUmJD2WXLxWENN3C/UfXnnZV3s
EQHZUgYTPfMldX7s3QKnpouo7piDIy3xn7ovX7uJPhouhImSXcM/BQt+Fe+4uq4X
AdHDhvN2YKV2rZofQUvLJ0Fwvctt2GU3UGtEAC7Am09PeVTWoSQIoPLXE1/Y9e91
J/YhT55HETbcGXJH35CflN1EV+lYSJqv8pBuF/5QGbho2fXalXlJC93NmjRFxNFF
9W2Rr84YCnx+1muJrJ8xstfQt3txoWfoovNQL+SxVmwc9nZH/+Dw1fXk+TKg2sha
qOAVgbKxOvmzVfdOkGyzkTgHCOMVU3LqWHJYiwIDAQABo4ICfTCCAnkwHQYDVR0O
BBYEFMHChlS3hOCahkYbku4jAnhUoqMYMB8GA1UdIwQYMBaAFNGqfDUMMnUcXXct
+8TNjbNXzHCTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNjYzNi
ZGQ0ZWRmYzQ5OGQyYzkyNDc4M2E0MGM5ZmYyNTUxMjBiOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmMyMDEwYzMtNDE1Yy00MjgwLWJiMzEtNzZhY2Mw
MmVkOTdkL2U0ZTM1Njc3ODhkZDQyYmZiODY2Y2IyYTQ1NTVhNGQwNTg2YmYxOWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYzIwMTBjMy00MTVjLTQyODAtYmIzMS03NmFj
YzAyZWQ5N2QvMzNjYzNiZGQ0ZWRmYzQ5OGQyYzkyNDc4M2E0MGM5ZmYyNTUxMjBi
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBBBggrBgEFBQcBBwEB/wQy
MDAwHwQCAAEwGTAMAwQHvoKAAwQGvoOAAwQFyHzgAwMAybcwDQQCAAIwBwMFACgA
BEAwDQYJKoZIhvcNAQELBQADggEBAHiDvIavW06HrmowvILkIaoSnEAiHkMRzNvL
h9q7XNFdfPSeCzuXO2plhKtzMYIWY3Eqib1UCEj8jz0mq6w1nhPeO2BMNmNGHxMA
Zi4M/hdx3QBWzJ9GCfzfljHs0Fy5ONWDo1wfnmJPfClB8DfZIr5LHg0yqgpHOkYO
7RzoNXuM4YqkLUZIzv55HwEuYEfggMuQUVKFycF7doSJBbLOxY7F6Lzw+xs1Jtbi
igB65xDMO17ytZPg9Vczri9SkqdYANwwyAuRTsHla7TCDPdExD2ix88h8QY0Bglp
RNSAGpdniKWz9jfyMvXXn+YMu3n9C6iAiBMPFnpB5rs0eeDMh4Y=
-----END CERTIFICATE-----
Generated at Tue Jan 9 18:34:31 2024 by rpki-client on console-fra.rpki-client.org