Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/5331534b6b26e435f2cc2f202b396825968f0487.roa
File: 5331534b6b26e435f2cc2f202b396825968f0487.roa (raw, json)
Hash identifier: S4Jn5vQUarvCfjsGAz1tWTKOYPo7SeXA2Ic9hSxWauU=
Subject key identifier: 62:BE:C8:FC:AE:F0:1A:B9:51:9A:67:A0:83:41:78:59:0C:DB:DE:77
Certificate issuer: /CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
Certificate serial: 2229EA
Authority key identifier: 5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/5331534b6b26e435f2cc2f202b396825968f0487.roa
Signing time: Wed 20 Sep 2023 14:37:37 +0000
ROA not before: Tue 19 Sep 2023 14:37:37 +0000
ROA not after: Sat 20 Sep 2025 14:37:37 +0000
asID: 18779
IP address blocks: 190.112.192.0/24 maxlen: 24
190.112.193.0/24 maxlen: 24
190.112.194.0/24 maxlen: 24
190.112.195.0/24 maxlen: 24
190.112.200.0/24 maxlen: 24
190.112.201.0/24 maxlen: 24
190.112.203.0/24 maxlen: 24
200.35.152.0/24 maxlen: 24
200.35.154.0/24 maxlen: 24
200.35.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2238954 (0x2229ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
Validity
Not Before: Sep 19 14:37:37 2023 GMT
Not After : Sep 20 14:37:37 2025 GMT
Subject: CN=5331534b6b26e435f2cc2f202b396825968f0487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:b9:0f:ea:69:bb:6a:3f:f8:85:12:e0:b0:
5e:7b:1b:dd:bf:55:22:54:66:d4:82:10:b9:57:42:
70:fd:65:76:ac:31:f8:14:02:24:bb:8e:6b:33:de:
e4:f4:7d:ba:32:04:f7:ab:5f:09:fb:6b:06:3e:b0:
f0:95:65:c9:19:6a:8b:cc:46:3a:a7:cd:ca:37:f7:
19:fe:7b:d8:60:5f:0e:c7:3d:9e:a5:22:83:91:db:
61:f1:67:f5:91:e5:7b:fb:7f:cf:83:5b:da:f1:bf:
eb:50:85:ad:ad:ba:7b:59:ea:d4:30:34:92:bb:48:
6a:ac:1f:b6:8d:80:6f:9e:c5:f0:fc:b8:8e:9c:19:
9e:af:35:a7:86:57:48:7f:e4:40:f5:6a:04:30:be:
d9:24:f6:67:93:48:89:59:db:bd:34:12:f4:8b:c2:
a8:13:c8:07:a6:9c:b5:01:e0:1a:49:cb:05:36:4a:
42:c4:8d:ee:53:dc:1b:19:e2:86:70:38:96:b9:f3:
69:b4:4a:fd:93:69:d8:66:d0:19:e7:a9:20:17:48:
b7:6d:a0:ab:2f:df:df:16:6c:f4:a5:95:e8:09:8a:
1e:06:25:ce:97:6c:0b:fb:61:38:9f:3b:20:b4:3f:
56:e8:de:ab:aa:a8:a5:ee:68:b6:9e:a8:ca:5a:8f:
3d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BE:C8:FC:AE:F0:1A:B9:51:9A:67:A0:83:41:78:59:0C:DB:DE:77
X509v3 Authority Key Identifier:
keyid:5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/5331534b6b26e435f2cc2f202b396825968f0487.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.192.0/22
190.112.200.0/23
190.112.203.0/24
200.35.152.0/24
200.35.154.0/23
Signature Algorithm: sha256WithRSAEncryption
18:c9:f8:af:ae:7c:de:2c:48:d6:94:85:b7:dc:f6:18:03:27:
6a:6c:31:18:74:8a:22:e8:6c:0a:ac:56:15:89:38:c2:65:1f:
84:5f:c1:48:0e:f1:71:ea:1b:07:c2:79:8a:09:45:07:05:4e:
e8:fd:e5:df:18:64:c9:04:f6:25:93:f4:bf:48:15:b7:a2:6c:
59:94:98:d2:6a:a0:b9:d3:01:3d:1e:03:16:64:90:15:a6:d6:
80:65:e0:f6:b9:95:fb:cb:9b:2a:88:be:93:87:93:3e:67:b4:
be:0d:e6:41:a2:10:2a:ee:01:7d:5f:32:34:22:00:1e:f9:92:
ef:07:20:50:f3:b7:a9:03:22:52:d9:26:1e:4f:7e:a2:54:ae:
0d:47:19:4b:62:1e:a2:d7:62:fe:f5:c0:fe:79:76:99:c8:b5:
8c:ef:34:52:e7:01:87:7f:82:17:70:8d:88:84:19:b6:d0:41:
5c:0a:e6:83:3c:5f:64:7d:df:2d:5f:58:b3:3a:f1:32:e2:37:
1c:ea:37:51:43:8b:f6:98:1a:53:a5:a1:57:9f:40:fe:a5:72:
dc:30:c4:26:5a:5c:7a:ee:29:5c:fb:ae:3c:d4:bd:54:2f:8b:
bc:36:75:ca:5c:66:11:88:2c:c3:95:d4:70:a7:18:39:5a:ad:
6b:29:0a:61
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDIinqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
YTZjZmU4MmEyYzM4OWI1ZTNmY2U4MTUxM2QzYmEwZGRmM2E4ZTcwHhcNMjMwOTE5
MTQzNzM3WhcNMjUwOTIwMTQzNzM3WjAzMTEwLwYDVQQDEyg1MzMxNTM0YjZiMjZl
NDM1ZjJjYzJmMjAyYjM5NjgyNTk2OGYwNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvb+5D+ppu2o/+IUS4LBeexvdv1UiVGbUghC5V0Jw/WV2rDH4
FAIku45rM97k9H26MgT3q18J+2sGPrDwlWXJGWqLzEY6p83KN/cZ/nvYYF8Oxz2e
pSKDkdth8Wf1keV7+3/Pg1va8b/rUIWtrbp7WerUMDSSu0hqrB+2jYBvnsXw/LiO
nBmerzWnhldIf+RA9WoEML7ZJPZnk0iJWdu9NBL0i8KoE8gHppy1AeAaScsFNkpC
xI3uU9wbGeKGcDiWufNptEr9k2nYZtAZ56kgF0i3baCrL9/fFmz0pZXoCYoeBiXO
l2wL+2E4nzsgtD9W6N6rqqil7mi2nqjKWo89KwIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFGK+yPyu8Bq5UZpnoINBeFkM2953MB8GA1UdIwQYMBaAFFqUMHnHoXRoE1gO
GANZ3oDZpsO3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTlhNmNm
ZTgyYTJjMzg5YjVlM2ZjZTgxNTEzZDNiYTBkZGYzYThlNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTQ0ZWYzNTktZDM3Ny00YjViLWI2OGMtMjZlZmJi
ZDdlYmZjLzUzMzE1MzRiNmIyNmU0MzVmMmNjMmYyMDJiMzk2ODI1OTY4ZjA0ODcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNDRlZjM1OS1kMzc3LTRiNWItYjY4Yy0yNmVm
YmJkN2ViZmMvYTlhNmNmZTgyYTJjMzg5YjVlM2ZjZTgxNTEzZDNiYTBkZGYzYThl
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwJAQCAAEwHgMEAr5wwAMEAb5wyAMEAL5wywMEAMgjmAMEAcgjmjANBgkqhkiG
9w0BAQsFAAOCAQEAGMn4r6583ixI1pSFt9z2GAMnamwxGHSKIuhsCqxWFYk4wmUf
hF/BSA7xceobB8J5iglFBwVO6P3l3xhkyQT2JZP0v0gVt6JsWZSY0mqgudMBPR4D
FmSQFabWgGXg9rmV+8ubKoi+k4eTPme0vg3mQaIQKu4BfV8yNCIAHvmS7wcgUPO3
qQMiUtkmHk9+olSuDUcZS2Ieotdi/vXA/nl2mci1jO80UucBh3+CF3CNiIQZttBB
XArmgzxfZH3fLV9YszrxMuI3HOo3UUOL9pgaU6WhV59A/qVy3DDEJlpceu4pXPuu
PNS9VC+LvDZ1ylxmEYgsw5XUcKcYOVqtaykKYQ==
-----END CERTIFICATE-----
Generated at Fri Oct 6 14:26:36 2023 by rpki-client on console-fra.rpki-client.org