Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/b604582179e8cdb2f1ce8d57b1397041ab0b94d8.roa
File: b604582179e8cdb2f1ce8d57b1397041ab0b94d8.roa (raw, json)
Hash identifier: jzgvw4G8iM6I+fzddWGN2zf95LrpcH9Ib7Tnc84fNFc=
Subject key identifier: C7:36:82:B4:A1:30:5D:50:76:0E:8E:68:F6:F5:29:58:32:13:0B:11
Certificate issuer: /CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Certificate serial: 0BA6B3
Authority key identifier: 63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/b604582179e8cdb2f1ce8d57b1397041ab0b94d8.roa
Signing time: Wed 24 Mar 2021 14:42:52 +0000
ROA not before: Wed 24 Mar 2021 14:42:52 +0000
ROA not after: Tue 24 Mar 2026 14:42:52 +0000
asID: 265504
IP address blocks: 148.244.114.0/24 maxlen: 24
200.56.117.0/24 maxlen: 24
200.94.106.0/24 maxlen: 24
201.163.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763571 (0xba6b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Validity
Not Before: Mar 24 14:42:52 2021 GMT
Not After : Mar 24 14:42:52 2026 GMT
Subject: CN=b604582179e8cdb2f1ce8d57b1397041ab0b94d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:e9:10:92:04:14:de:60:4a:ce:e2:d0:ca:
a9:9e:40:7b:24:3b:1e:67:09:5a:e6:bf:17:35:3f:
90:50:d5:dc:55:65:4f:47:ed:dd:6a:b1:6d:12:db:
8d:37:9f:1e:82:f9:a9:61:a4:f1:a0:fe:33:5c:57:
e7:0e:9f:ab:ca:76:69:ad:bd:6c:b7:84:df:c8:9b:
31:89:42:aa:5d:5e:ef:9e:82:66:4a:8b:6f:8c:46:
67:2e:db:08:49:01:da:37:a8:04:15:68:fd:41:72:
92:8b:47:2e:de:07:da:18:56:91:1b:88:c8:7a:ad:
1c:d5:76:53:4a:28:9d:e5:ec:64:b6:cd:8a:30:e9:
f8:b0:9f:f2:4c:1b:e3:38:b1:ca:84:30:a0:62:7a:
3e:8a:91:40:8c:4a:f1:23:5a:ca:f9:7c:72:ed:ce:
e3:6b:98:1f:b1:e2:b1:cc:85:64:96:b9:3a:55:32:
e7:bf:49:c7:1b:fd:45:90:d9:f6:83:85:ab:32:3c:
9f:c0:65:7d:64:08:58:ed:09:78:fc:fe:8b:40:83:
98:40:f0:9c:2d:07:5f:aa:2b:46:d1:bd:9f:f8:8a:
b4:a8:80:7e:70:24:e6:9a:9b:61:fc:e4:34:63:e3:
9b:39:d0:ad:13:23:ca:e7:3b:a5:61:01:79:1e:33:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:36:82:B4:A1:30:5D:50:76:0E:8E:68:F6:F5:29:58:32:13:0B:11
X509v3 Authority Key Identifier:
keyid:63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/b604582179e8cdb2f1ce8d57b1397041ab0b94d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/0932ed7fc7587a11240901c76c1f6f64f3020149.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.244.114.0/24
200.56.117.0/24
200.94.106.0/24
201.163.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:71:96:84:7c:23:8f:ac:a0:3f:7f:26:44:3c:a2:fd:4d:85:
ec:97:d7:0f:8b:1e:98:eb:c2:5b:53:84:f5:bb:ad:8d:e7:1e:
4f:47:a4:e6:eb:f1:03:16:a2:f4:69:e5:af:30:0a:cb:b1:d6:
b4:91:3d:f9:9b:95:5c:50:31:aa:3b:87:69:3d:4b:f8:df:ff:
1d:df:5c:15:9b:bd:68:79:60:6d:45:4b:26:e6:2c:9a:e1:9c:
ab:3a:c3:45:d9:e6:d4:9f:2d:0e:9e:73:6e:a8:8d:1d:f1:c5:
79:83:7d:e2:4c:cc:3c:23:41:fd:24:40:fa:05:3e:e9:66:01:
c6:9c:0f:5e:b6:88:35:29:44:d2:c9:80:d1:43:aa:39:78:97:
57:21:61:99:02:e3:bf:9d:7c:49:9e:db:91:25:71:cc:24:a0:
bd:a5:3c:fa:16:ca:58:f3:e2:1e:f8:ea:ab:01:59:ec:f1:60:
16:f1:72:a9:3b:53:4f:80:ba:c4:d8:dc:31:74:de:34:78:9c:
7a:fb:f6:50:c2:77:50:a5:e6:d2:f6:34:7d:eb:5f:d6:58:07:
d5:6f:3b:c7:90:87:60:ee:0e:9f:df:70:c0:03:2e:a0:1c:50:
5f:77:45:bb:23:47:ea:81:74:b0:02:bf:dc:15:53:24:29:3d:
cc:a2:54:6e
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIDC6azMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
MzJlZDdmYzc1ODdhMTEyNDA5MDFjNzZjMWY2ZjY0ZjMwMjAxNDkwHhcNMjEwMzI0
MTQ0MjUyWhcNMjYwMzI0MTQ0MjUyWjAzMTEwLwYDVQQDEyhiNjA0NTgyMTc5ZThj
ZGIyZjFjZThkNTdiMTM5NzA0MWFiMGI5NGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAom7pEJIEFN5gSs7i0MqpnkB7JDseZwla5r8XNT+QUNXcVWVP
R+3darFtEtuNN58egvmpYaTxoP4zXFfnDp+rynZprb1st4TfyJsxiUKqXV7vnoJm
SotvjEZnLtsISQHaN6gEFWj9QXKSi0cu3gfaGFaRG4jIeq0c1XZTSiid5exkts2K
MOn4sJ/yTBvjOLHKhDCgYno+ipFAjErxI1rK+Xxy7c7ja5gfseKxzIVklrk6VTLn
v0nHG/1FkNn2g4WrMjyfwGV9ZAhY7Ql4/P6LQIOYQPCcLQdfqitG0b2f+Iq0qIB+
cCTmmpth/OQ0Y+ObOdCtEyPK5zulYQF5HjMZvQIDAQABo4ICbTCCAmkwHQYDVR0O
BBYEFMc2grShMF1Qdg6OaPb1KVgyEwsRMB8GA1UdIwQYMBaAFGPl5w+iPAyAg36h
/pZQdpXAzl7/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDkzMmVk
N2ZjNzU4N2ExMTI0MDkwMWM3NmMxZjZmNjRmMzAyMDE0OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjI1MDA5M2MtYmE5OC00OGI4LThjNTItOWFiZTU3
ZDUyZDRmL2I2MDQ1ODIxNzllOGNkYjJmMWNlOGQ1N2IxMzk3MDQxYWIwYjk0ZDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMjUwMDkzYy1iYTk4LTQ4YjgtOGM1Mi05YWJl
NTdkNTJkNGYvMDkzMmVkN2ZjNzU4N2ExMTI0MDkwMWM3NmMxZjZmNjRmMzAyMDE0
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQi
MCAwHgQCAAEwGAMEAJT0cgMEAMg4dQMEAMheagMEAMmjeTANBgkqhkiG9w0BAQsF
AAOCAQEAtXGWhHwjj6ygP38mRDyi/U2F7JfXD4semOvCW1OE9butjeceT0ek5uvx
Axai9GnlrzAKy7HWtJE9+ZuVXFAxqjuHaT1L+N//Hd9cFZu9aHlgbUVLJuYsmuGc
qzrDRdnm1J8tDp5zbqiNHfHFeYN94kzMPCNB/SRA+gU+6WYBxpwPXraINSlE0smA
0UOqOXiXVyFhmQLjv518SZ7bkSVxzCSgvaU8+hbKWPPiHvjqqwFZ7PFgFvFyqTtT
T4C6xNjcMXTeNHicevv2UMJ3UKXm0vY0fetf1lgH1W87x5CHYO4On99wwAMuoBxQ
X3dFuyNH6oF0sAK/3BVTJCk9zKJUbg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org