Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/193e2e6d7adeed87ac35be924f48880d7dbd6769.roa
File: 193e2e6d7adeed87ac35be924f48880d7dbd6769.roa (raw, json)
Hash identifier: KeIBuwivgTIMGXtPwLoPddl482nniN+u8ZN/scjw33o=
Subject key identifier: D7:E7:07:DC:F3:B5:26:18:06:A0:2A:64:50:FE:E7:5F:AB:1C:F0:35
Certificate issuer: /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial: 19BFEC
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/193e2e6d7adeed87ac35be924f48880d7dbd6769.roa
Signing time: Tue 19 Jul 2022 13:42:02 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 52257
IP address blocks: 181.39.0.0/16 maxlen: 24
181.198.128.0/17 maxlen: 24
181.199.64.0/18 maxlen: 24
186.3.128.0/17 maxlen: 24
186.4.128.0/17 maxlen: 24
186.101.128.0/17 maxlen: 24
181.199.47.0/24 maxlen: 24
190.95.131.0/24 maxlen: 24
181.199.28.0/22 maxlen: 24
181.199.1.0/24 maxlen: 24
181.199.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1687532 (0x19bfec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=193e2e6d7adeed87ac35be924f48880d7dbd6769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:c5:26:f0:52:f0:8c:2e:a6:67:a1:24:af:
29:23:bb:be:9f:7c:71:87:34:f0:8c:bf:a7:a2:dd:
94:9b:77:42:85:18:fd:a7:e8:67:39:23:6a:06:53:
61:99:a2:a3:6f:8c:70:73:da:7e:6d:1b:ca:58:b6:
54:15:96:bc:04:3c:da:b7:3c:49:4e:4d:cb:0e:bc:
d6:fa:c1:b1:5c:0d:9e:cd:97:01:1a:0a:03:0f:5e:
e0:bf:ba:b3:be:24:6f:dd:43:c8:86:29:ba:1f:c7:
0b:78:10:78:7b:50:40:ea:2a:74:e5:17:a0:7f:47:
3a:53:a9:76:d8:21:bc:1a:31:6b:cb:33:1f:a1:39:
f8:74:3b:51:3e:cc:ae:d3:20:f7:6f:b2:91:81:30:
1c:2b:65:f3:3e:a9:c1:1b:f2:51:4d:62:a9:36:54:
92:ea:c8:7e:25:10:a3:31:ec:48:d5:d8:ef:fe:2c:
8b:2c:d3:3c:8e:d4:53:ab:33:6d:55:7c:d3:d4:82:
d4:c4:31:09:fd:bd:2d:35:1a:99:fd:13:5e:cc:c7:
5a:50:40:16:0d:57:68:ac:f7:d9:84:de:3c:19:1d:
5b:99:3f:4a:e2:21:72:0f:2c:9a:c2:cf:c3:e3:fd:
eb:7d:8e:0f:6d:e0:c0:c0:f1:ea:7b:12:5b:09:aa:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E7:07:DC:F3:B5:26:18:06:A0:2A:64:50:FE:E7:5F:AB:1C:F0:35
X509v3 Authority Key Identifier:
keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/193e2e6d7adeed87ac35be924f48880d7dbd6769.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.39.0.0/16
181.198.128.0/17
181.199.1.0/24
181.199.13.0/24
181.199.28.0/22
181.199.47.0/24
181.199.64.0/18
186.3.128.0/17
186.4.128.0/17
186.101.128.0/17
190.95.131.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d6:24:f2:e9:65:01:b4:05:2a:05:f8:94:f6:f6:c7:3e:d6:
24:11:a7:96:1e:1c:ad:dd:c9:f5:bb:96:80:6f:ec:a1:16:62:
62:37:46:12:f9:43:20:9c:bc:8b:53:49:cf:54:e4:22:de:19:
31:e1:ce:c0:8d:81:ef:07:73:7f:21:f0:91:a7:5c:f6:75:fe:
c2:b6:75:44:c6:26:2f:0f:cd:ba:aa:5f:8c:10:40:c6:32:f4:
77:fc:70:20:0e:9a:9e:57:74:af:f3:18:21:aa:f2:98:34:21:
a7:d4:b7:33:7a:4a:94:81:71:00:3b:b9:f0:5a:56:9f:ba:9d:
10:5a:67:e4:ae:f2:21:eb:a0:04:7d:cd:4a:be:e2:01:8e:94:
41:d0:25:2a:9d:41:e2:78:b2:47:f7:31:6a:fb:5b:c4:99:01:
c0:4f:6a:35:37:06:14:79:02:4c:73:ea:24:4e:14:00:97:e8:
e4:42:bf:b8:33:4f:be:2c:86:fe:7d:07:5d:c1:ca:f9:b0:89:
35:45:35:ad:c6:5f:9a:bf:66:7a:ba:c2:87:4b:1d:23:51:32:
7f:da:f8:c6:46:a5:65:2b:29:7b:ff:f2:05:f6:d9:01:71:c9:
1e:65:f4:90:b4:d5:ac:0b:73:f8:22:8e:d9:ae:31:f6:a8:7e:
7e:61:ba:6b
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIDGb/sMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygxOTNlMmU2ZDdhZGVl
ZDg3YWMzNWJlOTI0ZjQ4ODgwZDdkYmQ2NzY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnfDFJvBS8IwupmehJK8pI7u+n3xxhzTwjL+not2Um3dChRj9
p+hnOSNqBlNhmaKjb4xwc9p+bRvKWLZUFZa8BDzatzxJTk3LDrzW+sGxXA2ezZcB
GgoDD17gv7qzviRv3UPIhim6H8cLeBB4e1BA6ip05Regf0c6U6l22CG8GjFryzMf
oTn4dDtRPsyu0yD3b7KRgTAcK2XzPqnBG/JRTWKpNlSS6sh+JRCjMexI1djv/iyL
LNM8jtRTqzNtVXzT1ILUxDEJ/b0tNRqZ/RNezMdaUEAWDVdorPfZhN48GR1bmT9K
4iFyDyyaws/D4/3rfY4PbeDAwPHqexJbCao3DwIDAQABo4ICljCCApIwHQYDVR0O
BBYEFNfnB9zztSYYBqAqZFD+51+rHPA1MB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r
EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm
MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5
YzE0NTY0LzE5M2UyZTZkN2FkZWVkODdhYzM1YmU5MjRmNDg4ODBkN2RiZDY3Njku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk
NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBggrBgEFBQcBBwEB/wRL
MEkwRwQCAAEwQQMDALUnAwQHtcaAAwQAtccBAwQAtccNAwQCtcccAwQAtccvAwQG
tcdAAwQHugOAAwQHugSAAwQHumWAAwQAvl+DMA0GCSqGSIb3DQEBCwUAA4IBAQA6
1iTy6WUBtAUqBfiU9vbHPtYkEaeWHhyt3cn1u5aAb+yhFmJiN0YS+UMgnLyLU0nP
VOQi3hkx4c7AjYHvB3N/IfCRp1z2df7CtnVExiYvD826ql+MEEDGMvR3/HAgDpqe
V3Sv8xghqvKYNCGn1LczekqUgXEAO7nwWlafup0QWmfkrvIh66AEfc1KvuIBjpRB
0CUqnUHieLJH9zFq+1vEmQHAT2o1NwYUeQJMc+okThQAl+jkQr+4M0++LIb+fQdd
wcr5sIk1RTWtxl+av2Z6usKHSx0jUTJ/2vjGRqVlKyl7//IF9tkBcckeZfSQtNWs
C3P4Io7ZrjH2qH5+Ybpr
-----END CERTIFICATE-----
Generated at Tue Sep 26 17:34:07 2023 by rpki-client on console-fra.rpki-client.org