Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/3e6e7a4e924be93d79fac1527799fc13f56d4ffa.roa
File: 3e6e7a4e924be93d79fac1527799fc13f56d4ffa.roa (raw, json)
Hash identifier: /ss1WowzenZ3WVMYg4A8l/8TDREo1jG6yXnYVuhfiAY=
Subject key identifier: A8:62:31:2D:C6:8F:89:F4:26:74:75:22:D4:10:7E:23:65:10:65:9A
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 1EB4D4
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/3e6e7a4e924be93d79fac1527799fc13f56d4ffa.roa
Signing time: Tue 10 Jan 2023 15:33:20 +0000
ROA not before: Mon 09 Jan 2023 15:33:13 +0000
ROA not after: Fri 10 Jan 2025 15:33:13 +0000
asID: 28075
IP address blocks: 190.113.185.0/24 maxlen: 24
198.12.46.0/23 maxlen: 24
198.12.52.0/24 maxlen: 24
198.12.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2012372 (0x1eb4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Jan 9 15:33:13 2023 GMT
Not After : Jan 10 15:33:13 2025 GMT
Subject: CN=3e6e7a4e924be93d79fac1527799fc13f56d4ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1d:d3:d3:19:ce:f9:f7:f8:6c:cb:5d:82:41:
0c:20:88:68:32:24:3a:9f:60:ad:1c:18:11:4e:66:
70:7d:72:9f:f6:04:9d:00:47:19:2d:e8:f9:d5:32:
ec:9d:68:a0:ea:50:8d:46:8e:65:c0:3f:2e:e7:f7:
3d:08:0c:93:de:d8:b5:79:60:ff:f4:2d:c9:de:29:
b5:dd:a9:fc:2d:0b:a8:49:11:9e:9b:8a:9e:f5:8a:
b8:7b:ab:a8:00:68:d9:3a:a4:8d:31:f2:42:04:8d:
3f:75:29:81:b9:f0:0a:8e:53:a6:64:f3:84:1c:9b:
b6:6e:b3:7b:2b:77:11:4c:4f:a9:de:ab:de:ad:f3:
1e:bc:53:6b:df:53:96:fd:47:17:52:8c:e9:c2:69:
4a:7d:ed:b5:b6:af:6d:43:4d:d3:0d:07:22:74:b9:
50:ed:9a:12:0a:ed:1d:98:c2:b8:67:f5:63:c8:d3:
7f:2d:e3:28:b3:4d:4d:96:34:8a:a5:01:3e:0e:2e:
e8:85:8e:4a:8f:f2:06:38:c2:f8:e4:89:cb:9a:51:
fe:dc:d2:15:1e:e0:ea:2e:00:e3:f8:98:22:9b:ab:
af:20:52:7a:e1:78:74:11:42:ec:0c:5c:e4:81:5e:
7c:eb:ee:9e:b3:f2:8f:99:c4:ab:f8:0f:63:89:1a:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:62:31:2D:C6:8F:89:F4:26:74:75:22:D4:10:7E:23:65:10:65:9A
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/3e6e7a4e924be93d79fac1527799fc13f56d4ffa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.113.185.0/24
198.12.46.0/23
198.12.52.0/24
198.12.60.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4c:1b:01:3f:6a:b9:6d:4c:2d:be:77:e8:e7:88:1f:31:aa:
76:70:85:5a:ee:e7:45:2b:e2:ea:83:af:a9:db:7a:97:8c:7a:
42:97:5c:70:13:17:12:d5:33:02:62:74:57:39:c2:49:f9:20:
d6:54:9f:8b:99:e6:c1:d8:ef:91:b7:70:eb:ae:0c:7d:e3:34:
62:c0:b9:34:a1:d6:c4:be:b9:76:bf:d6:b5:d4:15:4d:6b:c6:
27:f7:2a:0a:d1:41:69:7e:a6:85:38:c4:0b:bb:2e:4d:e2:60:
e5:27:53:ad:73:9f:73:2a:0e:25:f1:9c:b0:16:ca:36:66:0d:
67:34:44:14:a3:e0:40:28:9b:ad:c9:f2:0c:da:6c:14:0f:8f:
03:a5:64:93:53:1d:e9:5d:16:bd:f2:98:e7:cc:1d:99:68:2d:
58:81:4d:ef:81:a3:91:ef:cd:83:65:e5:ad:fc:e0:bc:ea:75:
62:49:81:ad:0c:96:f0:10:11:98:9c:56:e9:de:ce:c8:61:21:
82:95:5e:b3:fd:81:8b:b9:88:e7:52:ae:8a:2e:22:9f:65:3d:
c4:c8:06:27:5d:32:aa:2b:9e:c1:ba:2f:d1:dd:03:c8:a2:1c:
37:84:ae:45:51:80:0b:d5:f8:38:fb:49:cb:0e:5b:bc:b5:9f:
eb:2b:94:4f
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIDHrTUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
ZDNiMzhmYjliZmNlZDU3YzZhZDVlYjE2MGMxMzBhY2YzMjY0MWMwHhcNMjMwMTA5
MTUzMzEzWhcNMjUwMTEwMTUzMzEzWjAzMTEwLwYDVQQDEygzZTZlN2E0ZTkyNGJl
OTNkNzlmYWMxNTI3Nzk5ZmMxM2Y1NmQ0ZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhR3T0xnO+ff4bMtdgkEMIIhoMiQ6n2CtHBgRTmZwfXKf9gSd
AEcZLej51TLsnWig6lCNRo5lwD8u5/c9CAyT3ti1eWD/9C3J3im13an8LQuoSRGe
m4qe9Yq4e6uoAGjZOqSNMfJCBI0/dSmBufAKjlOmZPOEHJu2brN7K3cRTE+p3qve
rfMevFNr31OW/UcXUozpwmlKfe21tq9tQ03TDQcidLlQ7ZoSCu0dmMK4Z/VjyNN/
LeMos01NljSKpQE+Di7ohY5Kj/IGOML45InLmlH+3NIVHuDqLgDj+Jgim6uvIFJ6
4Xh0EULsDFzkgV586+6es/KPmcSr+A9jiRrHrQIDAQABo4ICbTCCAmkwHQYDVR0O
BBYEFKhiMS3Gj4n0JnR1ItQQfiNlEGWaMB8GA1UdIwQYMBaAFPsbKsFJ3WU0RJWG
NPmzt6e3aen4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODhkM2Iz
OGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQxYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjAxNWM0NmItMTU0MC00OWViLWI5NjktMGYzYzQw
ZTAwMTQwLzNlNmU3YTRlOTI0YmU5M2Q3OWZhYzE1Mjc3OTlmYzEzZjU2ZDRmZmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMDE1YzQ2Yi0xNTQwLTQ5ZWItYjk2OS0wZjNj
NDBlMDAxNDAvODhkM2IzOGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQx
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQi
MCAwHgQCAAEwGAMEAL5xuQMEAcYMLgMEAMYMNAMEAMYMPDANBgkqhkiG9w0BAQsF
AAOCAQEAUUwbAT9quW1MLb536OeIHzGqdnCFWu7nRSvi6oOvqdt6l4x6QpdccBMX
EtUzAmJ0VznCSfkg1lSfi5nmwdjvkbdw664MfeM0YsC5NKHWxL65dr/WtdQVTWvG
J/cqCtFBaX6mhTjEC7suTeJg5SdTrXOfcyoOJfGcsBbKNmYNZzREFKPgQCibrcny
DNpsFA+PA6Vkk1Md6V0WvfKY58wdmWgtWIFN74Gjke/Ng2XlrfzgvOp1YkmBrQyW
8BARmJxW6d7OyGEhgpVes/2Bi7mI51Kuii4in2U9xMgGJ10yqiuewbov0d0DyKIc
N4SuRVGAC9X4OPtJyw5bvLWf6yuUTw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org