Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/1f2513ddc2ea9847bc54479ff39ea81aeff78975.roa
File: 1f2513ddc2ea9847bc54479ff39ea81aeff78975.roa (raw, json)
Hash identifier: E5eJ9ekQtBO2wBFoBX+aTjW4K7sKiv+45K1IrputttY=
Subject key identifier: 05:47:1F:31:9B:67:DB:55:D0:53:63:31:A4:13:DA:46:E0:B3:BB:18
Certificate issuer: /CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Certificate serial: 1E6A0D
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/1f2513ddc2ea9847bc54479ff39ea81aeff78975.roa
Signing time: Thu 23 Mar 2023 08:30:29 +0000
ROA not before: Wed 22 Mar 2023 08:30:29 +0000
ROA not after: Fri 21 Mar 2025 08:30:29 +0000
asID: 7438
IP address blocks: 200.36.161.0/24 maxlen: 24
200.36.162.0/24 maxlen: 24
200.36.163.0/24 maxlen: 24
200.36.164.0/24 maxlen: 24
200.36.166.0/23 maxlen: 23
200.36.166.0/24 maxlen: 24
200.36.167.0/24 maxlen: 24
200.36.168.0/24 maxlen: 24
200.36.169.0/24 maxlen: 24
200.36.170.0/24 maxlen: 24
200.36.171.0/24 maxlen: 24
200.36.172.0/24 maxlen: 24
200.36.173.0/24 maxlen: 24
200.36.174.0/24 maxlen: 24
200.36.175.0/24 maxlen: 24
200.36.176.0/24 maxlen: 24
200.36.177.0/24 maxlen: 24
200.36.178.0/23 maxlen: 23
200.36.178.0/24 maxlen: 24
200.36.180.0/23 maxlen: 23
200.36.180.0/24 maxlen: 24
200.36.182.0/23 maxlen: 23
200.36.182.0/24 maxlen: 24
200.36.183.0/24 maxlen: 24
200.36.184.0/22 maxlen: 22
200.36.184.0/24 maxlen: 24
200.36.185.0/24 maxlen: 24
200.36.186.0/23 maxlen: 23
200.36.186.0/24 maxlen: 24
200.36.187.0/24 maxlen: 24
200.36.188.0/22 maxlen: 22
200.36.188.0/23 maxlen: 23
200.36.189.0/24 maxlen: 24
200.36.190.0/23 maxlen: 24
200.36.190.0/24 maxlen: 24
200.36.191.0/24 maxlen: 24
200.39.0.0/23 maxlen: 23
200.39.11.0/24 maxlen: 24
200.39.13.0/24 maxlen: 24
200.39.14.0/23 maxlen: 23
200.39.14.0/24 maxlen: 24
200.39.15.0/24 maxlen: 24
200.39.18.0/24 maxlen: 24
200.39.2.0/24 maxlen: 24
200.39.20.0/24 maxlen: 24
200.39.21.0/24 maxlen: 24
200.39.22.0/24 maxlen: 24
200.39.23.0/24 maxlen: 24
200.39.24.0/22 maxlen: 22
200.39.25.0/24 maxlen: 24
200.39.26.0/24 maxlen: 24
200.39.28.0/23 maxlen: 23
200.39.28.0/24 maxlen: 24
200.39.29.0/24 maxlen: 24
200.39.30.0/24 maxlen: 24
200.39.31.0/24 maxlen: 24
200.39.7.0/24 maxlen: 24
200.39.8.0/24 maxlen: 24
200.39.9.0/24 maxlen: 24
200.76.80.0/21 maxlen: 21
200.76.82.0/24 maxlen: 24
200.76.88.0/23 maxlen: 23
200.76.90.0/23 maxlen: 24
200.76.92.0/22 maxlen: 22
201.162.128.0/18 maxlen: 18
201.162.128.0/20 maxlen: 20
201.162.128.0/21 maxlen: 21
201.162.136.0/21 maxlen: 24
201.162.144.0/24 maxlen: 24
201.162.162.0/24 maxlen: 24
201.162.178.0/24 maxlen: 24
201.162.191.0/24 maxlen: 24
201.162.192.0/23 maxlen: 23
201.162.192.0/24 maxlen: 24
201.162.193.0/24 maxlen: 24
201.162.194.0/24 maxlen: 24
201.162.224.0/23 maxlen: 23
201.162.224.0/24 maxlen: 24
201.162.232.0/24 maxlen: 24
201.162.233.0/24 maxlen: 24
201.162.234.0/24 maxlen: 24
201.162.236.0/24 maxlen: 24
201.162.247.0/24 maxlen: 24
201.166.128.0/19 maxlen: 19
201.166.128.0/20 maxlen: 20
201.166.128.0/22 maxlen: 22
201.166.132.0/24 maxlen: 24
201.166.133.0/24 maxlen: 24
201.166.137.0/24 maxlen: 24
201.166.144.0/20 maxlen: 20
201.166.148.0/22 maxlen: 22
201.166.151.0/24 maxlen: 24
201.166.160.0/20 maxlen: 20
201.166.168.0/24 maxlen: 24
201.166.169.0/24 maxlen: 24
201.166.175.0/24 maxlen: 24
201.166.176.0/21 maxlen: 21
201.166.176.0/24 maxlen: 24
201.166.177.0/24 maxlen: 24
201.166.178.0/24 maxlen: 24
201.166.180.0/22 maxlen: 24
201.166.184.0/21 maxlen: 21
201.166.188.0/24 maxlen: 24
201.166.189.0/24 maxlen: 24
201.166.190.0/24 maxlen: 24
201.166.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1993229 (0x1e6a0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Validity
Not Before: Mar 22 08:30:29 2023 GMT
Not After : Mar 21 08:30:29 2025 GMT
Subject: CN=1f2513ddc2ea9847bc54479ff39ea81aeff78975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:c0:ea:6f:b2:71:74:b3:d6:44:2a:bb:39:
bc:e0:ec:fe:70:21:55:94:80:72:0c:a3:1e:18:a1:
5b:a5:b0:32:c8:3c:e4:f3:68:bf:86:f8:38:b6:76:
54:c2:8a:d0:b3:c5:f7:84:8b:75:ee:4a:f8:a3:97:
3c:20:81:48:bb:d3:a3:c9:d0:26:32:bf:68:5f:6f:
77:53:1f:af:a7:f9:87:87:32:5a:f9:c1:e4:9c:00:
59:3c:d5:c3:ee:99:8d:56:1d:00:5b:3c:35:0f:35:
e2:21:87:b4:e6:f7:82:28:6a:8d:b2:b6:7e:35:e9:
72:14:e5:8e:36:28:e6:bf:16:1e:cd:ce:f0:5a:ef:
7c:ae:0d:a1:c4:bd:05:e7:05:9c:97:6e:e1:8a:af:
17:3f:01:be:39:6a:9d:0d:68:9b:70:6f:f4:82:40:
20:c9:3f:c7:30:42:61:08:af:47:2a:72:9c:88:27:
20:bd:e9:e3:0f:50:6b:94:d8:32:b0:a5:ec:3b:91:
11:99:ca:a0:b4:90:6d:ff:6c:ff:a9:95:f1:50:45:
b2:d1:21:0d:fe:7e:d5:80:06:08:55:8a:09:c0:38:
dc:6b:2b:95:7d:9f:0f:38:94:fd:29:7b:76:46:d5:
af:92:3b:b8:99:1d:a3:60:f7:53:26:85:d1:71:1c:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:47:1F:31:9B:67:DB:55:D0:53:63:31:A4:13:DA:46:E0:B3:BB:18
X509v3 Authority Key Identifier:
keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/1f2513ddc2ea9847bc54479ff39ea81aeff78975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.36.161.0-200.36.164.255
200.36.166.0-200.36.191.255
200.39.0.0-200.39.2.255
200.39.7.0-200.39.9.255
200.39.11.0/24
200.39.13.0-200.39.15.255
200.39.18.0/24
200.39.20.0-200.39.31.255
200.76.80.0/20
201.162.128.0-201.162.194.255
201.162.224.0/23
201.162.232.0-201.162.234.255
201.162.236.0/24
201.162.247.0/24
201.166.128.0/18
Signature Algorithm: sha256WithRSAEncryption
34:43:c9:f3:fc:eb:e6:3b:a3:05:7a:72:68:44:9e:5b:4c:19:
14:ae:cd:83:49:eb:15:9a:59:a8:10:e9:aa:21:02:3b:db:22:
23:fd:32:e5:bd:0a:7e:12:50:bc:d8:35:95:d2:57:fa:02:ec:
71:85:a4:63:2a:74:1b:e9:77:15:80:b6:ee:59:ee:85:95:13:
1d:de:36:f8:95:5d:d0:b1:57:88:f1:be:57:2b:40:6b:9a:09:
a6:7f:fb:b5:f4:8e:42:fe:69:be:c5:c3:0a:50:70:61:c3:35:
0e:8f:2e:9c:cb:24:a3:2f:ae:15:ed:75:9e:8f:4f:db:d7:fc:
59:03:73:f2:7a:47:95:b8:3b:ee:ec:84:ce:75:29:ac:60:ca:
15:9f:52:d0:ce:e1:df:ef:5c:5d:61:7a:fc:93:63:eb:00:5b:
a8:73:5a:ce:8a:60:0c:c5:3e:e8:02:37:65:db:0d:d2:a2:38:
f4:5a:b5:74:af:29:e1:59:ad:36:af:9c:28:6d:1d:c4:4d:a6:
6e:2d:aa:b2:4b:45:43:91:d2:53:f6:4e:f9:ec:67:1f:8c:e2:
a8:32:f4:b3:14:c1:55:5a:6a:00:5a:ea:a9:75:08:a7:55:b3:
b1:e8:c2:da:5e:8d:61:19:fa:3a:d6:88:e5:fb:07:fd:0f:9a:
fc:60:a8:74
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIDHmoNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgy
YTBmM2I4Njk5MTU3ZDAyZTJlNzA1MTM5NjlmMmU3N2I2YjlkYjUwHhcNMjMwMzIy
MDgzMDI5WhcNMjUwMzIxMDgzMDI5WjAzMTEwLwYDVQQDEygxZjI1MTNkZGMyZWE5
ODQ3YmM1NDQ3OWZmMzllYTgxYWVmZjc4OTc1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkFjA6m+ycXSz1kQquzm84Oz+cCFVlIByDKMeGKFbpbAyyDzk
82i/hvg4tnZUworQs8X3hIt17kr4o5c8IIFIu9OjydAmMr9oX293Ux+vp/mHhzJa
+cHknABZPNXD7pmNVh0AWzw1DzXiIYe05veCKGqNsrZ+NelyFOWONijmvxYezc7w
Wu98rg2hxL0F5wWcl27hiq8XPwG+OWqdDWibcG/0gkAgyT/HMEJhCK9HKnKciCcg
venjD1BrlNgysKXsO5ERmcqgtJBt/2z/qZXxUEWy0SEN/n7VgAYIVYoJwDjcayuV
fZ8POJT9KXt2RtWvkju4mR2jYPdTJoXRcRwS6wIDAQABo4IC8zCCAu8wHQYDVR0O
BBYEFAVHHzGbZ9tV0FNjMaQT2kbgs7sYMB8GA1UdIwQYMBaAFCbkR03yh/f55N2E
qiumstDt5OpoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODJhMGYz
Yjg2OTkxNTdkMDJlMmU3MDUxMzk2OWYyZTc3YjZiOWRiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWFkOTllZGMtN2M0Ny00YzRkLWE0N2EtM2Y3MjYx
ZWFkMmUzLzFmMjUxM2RkYzJlYTk4NDdiYzU0NDc5ZmYzOWVhODFhZWZmNzg5NzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYWQ5OWVkYy03YzQ3LTRjNGQtYTQ3YS0zZjcy
NjFlYWQyZTMvODJhMGYzYjg2OTkxNTdkMDJlMmU3MDUxMzk2OWYyZTc3YjZiOWRi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBtgYIKwYBBQUHAQcBAf8E
gaYwgaMwgaAEAgABMIGZMAwDBADIJKEDBADIJKQwDAMEAcgkpgMEBsgkgDALAwMA
yCcDBADIJwIwDAMEAMgnBwMEAcgnCAMEAMgnCzAMAwQAyCcNAwQEyCcAAwQAyCcS
MAwDBALIJxQDBAXIJwADBATITFAwDAMEB8migAMEAMmiwgMEAcmi4DAMAwQDyaLo
AwQAyaLqAwQAyaLsAwQAyaL3AwQGyaaAMA0GCSqGSIb3DQEBCwUAA4IBAQA0Q8nz
/OvmO6MFenJoRJ5bTBkUrs2DSesVmlmoEOmqIQI72yIj/TLlvQp+ElC82DWV0lf6
AuxxhaRjKnQb6XcVgLbuWe6FlRMd3jb4lV3QsVeI8b5XK0Brmgmmf/u19I5C/mm+
xcMKUHBhwzUOjy6cyySjL64V7XWej0/b1/xZA3PyekeVuDvu7ITOdSmsYMoVn1LQ
zuHf71xdYXr8k2PrAFuoc1rOimAMxT7oAjdl2w3Sojj0WrV0rynhWa02r5wobR3E
TaZuLaqyS0VDkdJT9k757GcfjOKoMvSzFMFVWmoAWuqpdQinVbOx6MLaXo1hGfo6
1ojl+wf9D5r8YKh0
-----END CERTIFICATE-----
Generated at Wed Aug 16 17:39:16 2023 by rpki-client on console-fra.rpki-client.org