Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/da12f04d4dc254243b374556c7efd3afa54982c0.roa
File: da12f04d4dc254243b374556c7efd3afa54982c0.roa (raw, json)
Hash identifier: dawca/TAqxDo2BTrcU9LIX7NNREMqFxZEYF9brUmRSQ=
Subject key identifier: B0:91:AD:23:7A:A7:5B:53:CA:4D:67:CE:76:F7:F2:1F:A5:75:3D:1F
Certificate issuer: /CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
Certificate serial: 0BD7D8
Authority key identifier: 5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/da12f04d4dc254243b374556c7efd3afa54982c0.roa
Signing time: Wed 24 Mar 2021 14:47:10 +0000
ROA not before: Wed 24 Mar 2021 14:47:10 +0000
ROA not after: Tue 24 Mar 2026 14:47:10 +0000
asID: 20473
IP address blocks: 190.112.202.0/24 maxlen: 24
200.35.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 776152 (0xbd7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
Validity
Not Before: Mar 24 14:47:10 2021 GMT
Not After : Mar 24 14:47:10 2026 GMT
Subject: CN=da12f04d4dc254243b374556c7efd3afa54982c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:1f:aa:62:f6:74:72:b9:02:4c:2f:7b:29:
96:24:a4:f8:30:59:a7:c1:97:19:29:ab:12:99:ae:
8d:b2:68:c8:1b:eb:27:0a:75:d6:d3:a9:1e:b9:bb:
15:85:49:e9:7b:dd:31:45:d0:e1:92:29:cc:3f:14:
78:8e:19:51:c6:c2:3c:3e:3a:c4:32:aa:68:49:1d:
dc:22:6d:bf:87:ca:4a:70:a6:65:34:7f:87:c7:ad:
b0:b5:1c:a5:2a:ca:fc:6d:91:34:c6:9e:5c:c8:e6:
90:1c:7a:61:b6:e9:9f:b3:69:46:f2:f5:b5:dd:41:
70:f0:c8:55:39:7e:49:73:20:68:09:02:8e:4b:0b:
e9:1d:59:38:ea:a8:0c:a0:c3:6a:33:3d:4a:c7:83:
c0:fd:d9:53:83:be:c5:75:b5:4c:09:cd:93:4a:cd:
f5:fe:1d:07:8a:dd:9f:2a:cc:23:a9:59:ad:f3:a0:
90:fe:89:c3:f6:31:fd:3a:07:c5:a2:5d:b2:a9:c2:
b5:33:59:d3:91:35:24:fe:ac:d8:93:42:97:ef:cd:
69:45:0b:aa:b5:e9:62:a9:76:e7:f1:31:a1:e7:86:
a6:93:4a:fb:3f:42:c4:62:51:3b:97:b1:a2:c7:62:
6f:56:9b:c5:b4:b0:ed:7c:04:a7:02:95:e8:7a:7b:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:91:AD:23:7A:A7:5B:53:CA:4D:67:CE:76:F7:F2:1F:A5:75:3D:1F
X509v3 Authority Key Identifier:
keyid:5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/da12f04d4dc254243b374556c7efd3afa54982c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.202.0/24
200.35.153.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ac:bd:f6:2e:40:61:ef:8b:c3:6a:81:42:75:92:fd:06:8e:
db:b8:3f:50:1d:cd:ba:5c:0d:d7:db:7c:89:b6:61:12:9a:bc:
53:19:6a:11:66:52:7b:80:5b:b7:7a:4c:62:97:90:b5:1b:ca:
1d:47:57:74:ac:e3:01:d0:77:35:fd:2f:7c:9f:4c:40:3e:82:
83:82:a5:b7:43:53:9e:8b:da:d5:7a:97:55:ad:cd:5f:e3:8a:
c4:d8:c5:30:86:c8:50:47:5a:12:42:8e:8b:d6:8f:bf:15:65:
6a:53:ee:17:fb:ee:c6:10:d8:79:c0:1c:0e:c4:bc:bf:8a:10:
72:1b:dd:80:b6:76:ca:7e:6c:1f:f4:bc:9e:e9:31:c4:ee:71:
8f:d2:31:ec:7c:60:64:50:be:ec:fe:40:69:ac:d3:2f:48:7d:
82:93:34:70:e6:0e:0f:99:ee:91:be:20:a9:9f:fe:75:af:d1:
f3:10:49:07:07:29:69:3f:a5:39:2c:f5:b2:85:c8:a5:ef:83:
a2:0c:78:2c:8c:1b:1f:42:f7:e4:62:4b:02:f9:8f:e2:31:ac:
5c:7f:a0:c0:70:93:7a:26:17:b1:6e:e9:33:5c:68:9f:30:58:
92:bb:bb:fc:60:17:16:2d:1c:85:d0:d6:65:97:4e:95:6e:c7:
06:ad:d9:bb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDC9fYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
YTZjZmU4MmEyYzM4OWI1ZTNmY2U4MTUxM2QzYmEwZGRmM2E4ZTcwHhcNMjEwMzI0
MTQ0NzEwWhcNMjYwMzI0MTQ0NzEwWjAzMTEwLwYDVQQDEyhkYTEyZjA0ZDRkYzI1
NDI0M2IzNzQ1NTZjN2VmZDNhZmE1NDk4MmMwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApLkfqmL2dHK5AkwveymWJKT4MFmnwZcZKasSma6NsmjIG+sn
CnXW06keubsVhUnpe90xRdDhkinMPxR4jhlRxsI8PjrEMqpoSR3cIm2/h8pKcKZl
NH+Hx62wtRylKsr8bZE0xp5cyOaQHHphtumfs2lG8vW13UFw8MhVOX5JcyBoCQKO
SwvpHVk46qgMoMNqMz1Kx4PA/dlTg77FdbVMCc2TSs31/h0Hit2fKswjqVmt86CQ
/onD9jH9OgfFol2yqcK1M1nTkTUk/qzYk0KX781pRQuqteliqXbn8TGh54amk0r7
P0LEYlE7l7Gix2JvVpvFtLDtfASnApXoensH5wIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFLCRrSN6p1tTyk1nznb38h+ldT0fMB8GA1UdIwQYMBaAFFqUMHnHoXRoE1gO
GANZ3oDZpsO3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTlhNmNm
ZTgyYTJjMzg5YjVlM2ZjZTgxNTEzZDNiYTBkZGYzYThlNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTQ0ZWYzNTktZDM3Ny00YjViLWI2OGMtMjZlZmJi
ZDdlYmZjL2RhMTJmMDRkNGRjMjU0MjQzYjM3NDU1NmM3ZWZkM2FmYTU0OTgyYzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNDRlZjM1OS1kMzc3LTRiNWItYjY4Yy0yNmVm
YmJkN2ViZmMvYTlhNmNmZTgyYTJjMzg5YjVlM2ZjZTgxNTEzZDNiYTBkZGYzYThl
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL5wygMEAMgjmTANBgkqhkiG9w0BAQsFAAOCAQEAHqy99i5A
Ye+Lw2qBQnWS/QaO27g/UB3NulwN19t8ibZhEpq8UxlqEWZSe4Bbt3pMYpeQtRvK
HUdXdKzjAdB3Nf0vfJ9MQD6Cg4Klt0NTnova1XqXVa3NX+OKxNjFMIbIUEdaEkKO
i9aPvxVlalPuF/vuxhDYecAcDsS8v4oQchvdgLZ2yn5sH/S8nukxxO5xj9Ix7Hxg
ZFC+7P5AaazTL0h9gpM0cOYOD5nukb4gqZ/+da/R8xBJBwcpaT+lOSz1soXIpe+D
ogx4LIwbH0L35GJLAvmP4jGsXH+gwHCTeiYXsW7pM1xonzBYkru7/GAXFi0chdDW
ZZdOlW7HBq3Zuw==
-----END CERTIFICATE-----
Generated at Sun Sep 17 21:38:49 2023 by rpki-client on console-ams.rpki-client.org