Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/bdba89eaa4c67bfe4ed736c39d0fa403fa4e8465.roa
File: bdba89eaa4c67bfe4ed736c39d0fa403fa4e8465.roa (raw, json)
Hash identifier: BvIEuVg4AbrBuRVQzUxdaTCydMxXUj+218359OsT2lo=
Subject key identifier: 0C:EA:D4:F2:CE:7D:7B:AD:85:81:E7:10:41:53:0A:68:6D:A8:39:5A
Certificate issuer: /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial: 0F0A48
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/bdba89eaa4c67bfe4ed736c39d0fa403fa4e8465.roa
Signing time: Wed 05 May 2021 08:17:35 +0000
ROA not before: Wed 05 May 2021 03:00:00 +0000
ROA not after: Tue 05 May 2026 03:00:00 +0000
asID: 12956
IP address blocks: 190.98.135.0/24 maxlen: 24
190.98.140.0/24 maxlen: 24
190.98.145.0/24 maxlen: 24
190.98.152.0/24 maxlen: 24
190.98.153.0/24 maxlen: 24
190.98.154.0/23 maxlen: 23
190.98.160.0/24 maxlen: 24
190.98.164.0/23 maxlen: 23
190.98.166.0/24 maxlen: 24
190.98.172.0/23 maxlen: 23
190.98.174.0/23 maxlen: 23
190.98.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985672 (0xf0a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Validity
Not Before: May 5 03:00:00 2021 GMT
Not After : May 5 03:00:00 2026 GMT
Subject: CN=bdba89eaa4c67bfe4ed736c39d0fa403fa4e8465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b6:eb:cf:34:05:cf:62:5b:1c:16:43:6e:82:
19:84:96:4f:6c:a1:c3:ee:1a:da:ac:44:34:33:aa:
9a:e5:96:ba:a3:5e:8c:46:a1:fb:21:e4:7c:58:9b:
b8:de:6f:28:4b:46:32:3c:59:f0:b1:aa:4f:1b:b9:
37:30:7a:44:10:7b:12:26:d0:f2:cf:3f:28:39:42:
e1:79:42:3e:17:cb:3e:4e:68:76:f7:71:60:5c:82:
8d:ad:c6:ef:eb:91:c9:27:74:b9:16:09:f9:f4:88:
b5:d3:c7:ff:e9:75:1c:33:b8:2c:be:ba:29:6f:db:
16:85:ed:e0:40:bc:43:da:a7:02:19:41:9d:5d:64:
58:4c:a6:0a:79:2c:62:23:58:4b:4a:ec:0a:2d:64:
ff:c9:08:42:bb:b6:17:77:00:6c:54:22:22:02:6b:
8f:15:f4:13:93:f1:23:b7:b4:f6:d5:a2:b0:2c:aa:
d6:05:6e:b1:a5:61:15:51:62:e3:2e:45:23:b0:9a:
4a:82:97:01:c6:41:aa:1a:81:7e:35:7a:ba:3f:60:
56:96:fa:d1:07:af:89:59:7d:33:4e:2d:32:3e:cd:
cd:e5:2b:25:09:cb:14:c8:28:4c:2c:fa:d0:93:eb:
cd:7e:5f:5b:15:fe:9d:df:d7:fc:29:7a:62:58:b0:
9f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EA:D4:F2:CE:7D:7B:AD:85:81:E7:10:41:53:0A:68:6D:A8:39:5A
X509v3 Authority Key Identifier:
keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/bdba89eaa4c67bfe4ed736c39d0fa403fa4e8465.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.98.135.0/24
190.98.140.0/24
190.98.145.0/24
190.98.152.0/22
190.98.160.0/24
190.98.164.0-190.98.166.255
190.98.172.0-190.98.176.255
Signature Algorithm: sha256WithRSAEncryption
67:08:40:3c:03:49:38:49:26:65:6b:3d:eb:5d:3e:96:aa:3e:
ae:27:3b:15:b9:3e:9d:0c:6d:1e:09:d2:fa:ef:2c:1a:82:f9:
2e:b2:35:8b:fa:d8:18:2d:b3:0a:60:c9:90:8c:41:16:51:4d:
c8:28:b5:90:c6:d2:0a:29:a1:80:27:4f:e7:84:7e:c5:b2:e5:
05:54:2d:bf:c0:78:dd:f5:4f:d2:cd:6d:99:59:96:83:ff:8e:
bf:65:13:f1:ab:34:46:68:63:1d:a6:0d:f9:92:84:70:6f:87:
76:02:ac:9c:91:29:8d:dc:b5:32:9a:93:84:21:74:59:ee:60:
ba:c8:73:68:06:ce:ff:8c:80:8e:37:d5:fb:3e:93:6a:0f:da:
6b:a4:05:a2:2a:9b:45:c2:27:b0:91:d5:e0:76:7c:75:1a:39:
c9:cd:a8:89:74:10:26:04:28:4d:af:ea:c7:f3:3f:9f:11:1d:
88:02:bb:14:5e:5e:2d:3a:10:c5:1f:1c:72:14:61:b4:ee:fe:
c5:96:1b:e8:b0:6e:52:c8:ff:80:44:fb:c9:58:65:ef:ce:96:
96:1a:3a:23:68:7f:4e:de:68:96:63:48:ec:a3:6b:ed:5c:82:
41:ef:7b:41:48:d7:ed:00:b8:31:ee:e9:88:5a:3d:90:95:ec:
ec:ec:4f:04
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIDDwpIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
Mjg1M2NjODVjMWU1NWM2NWU3NjMyOTliYTA4ODk0ZjhjZThkNTEwHhcNMjEwNTA1
MDMwMDAwWhcNMjYwNTA1MDMwMDAwWjAzMTEwLwYDVQQDEyhiZGJhODllYWE0YzY3
YmZlNGVkNzM2YzM5ZDBmYTQwM2ZhNGU4NDY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg7brzzQFz2JbHBZDboIZhJZPbKHD7hrarEQ0M6qa5Za6o16M
RqH7IeR8WJu43m8oS0YyPFnwsapPG7k3MHpEEHsSJtDyzz8oOULheUI+F8s+Tmh2
93FgXIKNrcbv65HJJ3S5Fgn59Ii108f/6XUcM7gsvropb9sWhe3gQLxD2qcCGUGd
XWRYTKYKeSxiI1hLSuwKLWT/yQhCu7YXdwBsVCIiAmuPFfQTk/Ejt7T21aKwLKrW
BW6xpWEVUWLjLkUjsJpKgpcBxkGqGoF+NXq6P2BWlvrRB6+JWX0zTi0yPs3N5Ssl
CcsUyChMLPrQk+vNfl9bFf6d39f8KXpiWLCfKQIDAQABo4ICjzCCAoswHQYDVR0O
BBYEFAzq1PLOfXuthYHnEEFTCmhtqDlaMB8GA1UdIwQYMBaAFI1zxHehMa1tUWdm
3vRyzC5gSH+tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2YyODUz
Y2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRmOGNlOGQ1MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDZmMjFhOGMtM2E3MS00N2E3LTlmNmUtYzliNDQx
NDI3ZmNkL2JkYmE4OWVhYTRjNjdiZmU0ZWQ3MzZjMzlkMGZhNDAzZmE0ZTg0NjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNmYyMWE4Yy0zYTcxLTQ3YTctOWY2ZS1jOWI0
NDE0MjdmY2QvY2YyODUzY2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRmOGNlOGQ1
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBTBggrBgEFBQcBBwEB/wRE
MEIwQAQCAAEwOgMEAL5ihwMEAL5ijAMEAL5ikQMEAr5imAMEAL5ioDAMAwQCvmKk
AwQAvmKmMAwDBAK+YqwDBAC+YrAwDQYJKoZIhvcNAQELBQADggEBAGcIQDwDSThJ
JmVrPetdPpaqPq4nOxW5Pp0MbR4J0vrvLBqC+S6yNYv62BgtswpgyZCMQRZRTcgo
tZDG0gopoYAnT+eEfsWy5QVULb/AeN31T9LNbZlZloP/jr9lE/GrNEZoYx2mDfmS
hHBvh3YCrJyRKY3ctTKak4QhdFnuYLrIc2gGzv+MgI431fs+k2oP2mukBaIqm0XC
J7CR1eB2fHUaOcnNqIl0ECYEKE2v6sfzP58RHYgCuxReXi06EMUfHHIUYbTu/sWW
G+iwblLI/4BE+8lYZe/OlpYaOiNof07eaJZjSOyja+1cgkHve0FI1+0AuDHu6Yha
PZCV7OzsTwQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org