Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/8590d929f7dde39fd08f2770bcb04865b045f517.roa
File: 8590d929f7dde39fd08f2770bcb04865b045f517.roa (raw, json)
Hash identifier: 7XmJkQ0vHeC4AktpsuXgaYYrgzX9bSDaofZkCBXNg1U=
Subject key identifier: C2:05:EE:2D:F9:D6:4B:40:D0:21:AE:F9:F4:2C:F4:8B:B1:7D:75:E5
Certificate issuer: /CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Certificate serial: 14D3FD
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/8590d929f7dde39fd08f2770bcb04865b045f517.roa
Signing time: Wed 16 Mar 2022 16:27:59 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Fri 24 Mar 2023 03:00:00 +0000
asID: 7438
IP address blocks: 200.36.161.0/24 maxlen: 24
200.36.162.0/24 maxlen: 24
200.36.163.0/24 maxlen: 24
200.36.164.0/24 maxlen: 24
200.36.166.0/23 maxlen: 23
200.36.166.0/24 maxlen: 24
200.36.167.0/24 maxlen: 24
200.36.168.0/24 maxlen: 24
200.36.169.0/24 maxlen: 24
200.36.170.0/24 maxlen: 24
200.36.171.0/24 maxlen: 24
200.36.172.0/24 maxlen: 24
200.36.173.0/24 maxlen: 24
200.36.174.0/24 maxlen: 24
200.36.175.0/24 maxlen: 24
200.36.176.0/24 maxlen: 24
200.36.177.0/24 maxlen: 24
200.36.178.0/23 maxlen: 23
200.36.178.0/24 maxlen: 24
200.36.180.0/23 maxlen: 23
200.36.180.0/24 maxlen: 24
200.36.182.0/23 maxlen: 23
200.36.182.0/24 maxlen: 24
200.36.183.0/24 maxlen: 24
200.36.184.0/22 maxlen: 22
200.36.184.0/24 maxlen: 24
200.36.185.0/24 maxlen: 24
200.36.186.0/23 maxlen: 23
200.36.186.0/24 maxlen: 24
200.36.187.0/24 maxlen: 24
200.36.188.0/22 maxlen: 22
200.36.188.0/23 maxlen: 23
200.36.189.0/24 maxlen: 24
200.36.190.0/23 maxlen: 24
200.36.190.0/24 maxlen: 24
200.36.191.0/24 maxlen: 24
200.39.0.0/23 maxlen: 23
200.39.11.0/24 maxlen: 24
200.39.13.0/24 maxlen: 24
200.39.14.0/23 maxlen: 23
200.39.14.0/24 maxlen: 24
200.39.15.0/24 maxlen: 24
200.39.18.0/24 maxlen: 24
200.39.2.0/24 maxlen: 24
200.39.20.0/24 maxlen: 24
200.39.21.0/24 maxlen: 24
200.39.22.0/24 maxlen: 24
200.39.23.0/24 maxlen: 24
200.39.24.0/22 maxlen: 22
200.39.25.0/24 maxlen: 24
200.39.26.0/24 maxlen: 24
200.39.28.0/23 maxlen: 23
200.39.28.0/24 maxlen: 24
200.39.29.0/24 maxlen: 24
200.39.30.0/24 maxlen: 24
200.39.31.0/24 maxlen: 24
200.39.7.0/24 maxlen: 24
200.39.8.0/24 maxlen: 24
200.39.9.0/24 maxlen: 24
200.76.80.0/21 maxlen: 21
200.76.82.0/24 maxlen: 24
200.76.88.0/23 maxlen: 23
200.76.90.0/23 maxlen: 24
200.76.92.0/22 maxlen: 22
201.162.128.0/18 maxlen: 18
201.162.128.0/20 maxlen: 20
201.162.128.0/21 maxlen: 21
201.162.136.0/21 maxlen: 24
201.162.144.0/24 maxlen: 24
201.162.162.0/24 maxlen: 24
201.162.178.0/24 maxlen: 24
201.162.191.0/24 maxlen: 24
201.162.192.0/23 maxlen: 23
201.162.192.0/24 maxlen: 24
201.162.193.0/24 maxlen: 24
201.162.194.0/24 maxlen: 24
201.162.224.0/23 maxlen: 23
201.162.224.0/24 maxlen: 24
201.162.233.0/24 maxlen: 24
201.162.234.0/24 maxlen: 24
201.162.236.0/24 maxlen: 24
201.162.247.0/24 maxlen: 24
201.166.128.0/19 maxlen: 19
201.166.128.0/20 maxlen: 20
201.166.128.0/22 maxlen: 22
201.166.132.0/24 maxlen: 24
201.166.133.0/24 maxlen: 24
201.166.137.0/24 maxlen: 24
201.166.144.0/20 maxlen: 20
201.166.148.0/22 maxlen: 22
201.166.151.0/24 maxlen: 24
201.166.160.0/20 maxlen: 20
201.166.168.0/24 maxlen: 24
201.166.169.0/24 maxlen: 24
201.166.175.0/24 maxlen: 24
201.166.176.0/21 maxlen: 21
201.166.176.0/24 maxlen: 24
201.166.177.0/24 maxlen: 24
201.166.178.0/24 maxlen: 24
201.166.180.0/22 maxlen: 24
201.166.184.0/21 maxlen: 21
201.166.188.0/24 maxlen: 24
201.166.189.0/24 maxlen: 24
201.166.190.0/24 maxlen: 24
201.166.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364989 (0x14d3fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2023 GMT
Subject: CN=8590d929f7dde39fd08f2770bcb04865b045f517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:08:d7:7d:d7:5a:a0:de:a0:83:2e:81:f1:
7e:86:13:cc:a3:49:4d:3e:28:71:8c:af:fc:98:15:
82:6b:8a:28:89:6c:4f:97:cd:b3:c7:ad:bb:25:2c:
cd:86:04:8f:37:f3:aa:3e:19:71:dc:1a:10:61:e7:
14:b3:8a:d5:6b:f8:b6:5c:c9:b5:ae:eb:65:cf:71:
20:15:81:71:cd:7a:6b:bf:99:f8:f2:25:57:c0:9c:
09:74:61:4c:7c:d5:81:8d:55:6e:ea:11:44:1c:4b:
d2:71:96:d6:5b:1b:3e:5a:36:49:88:86:45:4d:c6:
78:e9:bd:ae:59:af:c1:a8:65:01:ad:85:02:3b:f4:
c2:ba:23:d8:91:19:2c:de:05:29:b1:8f:1b:7d:f2:
a1:69:d0:21:5d:18:5b:4e:75:ba:3d:cc:79:96:99:
c8:4d:95:32:87:10:83:04:5f:47:ca:67:66:29:b6:
20:f5:56:cb:c7:4b:15:b3:50:3f:54:1a:c6:f1:12:
5f:bc:58:0c:6a:3e:55:b4:3e:ff:35:30:e9:9c:a2:
c8:1e:06:92:10:f6:02:3c:23:92:d7:19:f6:2d:d0:
4e:02:5f:00:d0:64:f3:58:82:6c:57:49:86:eb:d7:
17:d9:88:9b:64:21:77:e7:a9:57:f9:d0:c1:db:67:
18:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:05:EE:2D:F9:D6:4B:40:D0:21:AE:F9:F4:2C:F4:8B:B1:7D:75:E5
X509v3 Authority Key Identifier:
keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/8590d929f7dde39fd08f2770bcb04865b045f517.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.36.161.0-200.36.164.255
200.36.166.0-200.36.191.255
200.39.0.0-200.39.2.255
200.39.7.0-200.39.9.255
200.39.11.0/24
200.39.13.0-200.39.15.255
200.39.18.0/24
200.39.20.0-200.39.31.255
200.76.80.0/20
201.162.128.0-201.162.194.255
201.162.224.0/23
201.162.233.0-201.162.234.255
201.162.236.0/24
201.162.247.0/24
201.166.128.0/18
Signature Algorithm: sha256WithRSAEncryption
4c:bf:3c:eb:91:de:85:57:d1:88:dd:1b:eb:0b:c0:a0:b9:16:
b9:70:3c:df:e7:b3:34:87:fc:0b:d0:49:5d:5d:11:f4:23:db:
ab:7c:1c:93:3b:f9:87:b2:dc:77:e1:d9:3d:69:74:22:fb:fa:
13:ae:0f:ed:eb:a7:d5:2c:cf:cd:80:24:da:ce:f9:c0:07:b8:
b2:2e:f0:29:63:91:09:6c:e1:72:a0:af:a1:95:70:ad:76:cf:
74:93:b3:62:dc:d5:ba:62:21:3d:5a:f8:67:07:17:fd:59:21:
61:62:95:7d:c1:d1:46:11:9b:27:b8:4a:a6:90:c5:2d:8f:47:
69:f6:b9:f6:be:a1:22:a0:d7:46:71:25:10:9f:9f:26:d5:e3:
28:51:71:b3:7a:ba:1d:1a:b1:64:42:1a:83:95:13:48:ec:19:
2d:d8:74:c2:8e:45:20:6c:40:4f:d2:37:7d:d8:21:1b:76:5b:
25:4b:c3:33:fc:e5:fb:39:2a:a2:47:50:d1:cb:dd:8d:07:47:
e1:dc:b0:d7:26:57:b4:2f:d4:fd:d5:96:11:3e:b6:22:68:44:
0b:ba:8c:5c:ac:84:3a:64:5b:e9:d0:ea:75:fe:89:14:d3:05:
81:2e:1d:7a:48:b8:db:45:5f:4a:56:dd:db:65:35:a7:bb:7f:
b7:6b:b4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-fra.rpki-client.org