Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/b529d80bba496d49d2729827472a3716f5928b2f.roa
File: b529d80bba496d49d2729827472a3716f5928b2f.roa (raw, json)
Hash identifier: OMDw+fanR98dTBWDK8H7JSmlQhY5r8bJzvvq/DIZYcQ=
Subject key identifier: 80:C7:20:9D:82:CB:27:D1:48:4E:9E:87:A3:A7:BE:B3:25:AF:F7:91
Certificate issuer: /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial: 18604D
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/b529d80bba496d49d2729827472a3716f5928b2f.roa
Signing time: Thu 14 Jul 2022 05:42:11 +0000
ROA not before: Thu 14 Jul 2022 03:00:00 +0000
ROA not after: Sun 14 Jul 2024 03:00:00 +0000
asID: 52392
IP address blocks: 190.99.120.0/24 maxlen: 24
190.99.121.0/24 maxlen: 24
190.99.122.0/24 maxlen: 24
190.99.123.0/24 maxlen: 24
190.99.124.0/24 maxlen: 24
190.99.125.0/24 maxlen: 24
190.99.126.0/24 maxlen: 24
190.99.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1597517 (0x18604d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
Validity
Not Before: Jul 14 03:00:00 2022 GMT
Not After : Jul 14 03:00:00 2024 GMT
Subject: CN=b529d80bba496d49d2729827472a3716f5928b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:11:77:77:b8:cf:d7:33:c4:8d:bf:4d:e4:
bd:76:e5:b4:0e:46:8e:b6:eb:ce:1c:41:27:4c:dc:
d4:8f:10:0a:2c:09:ef:bc:aa:eb:cc:c8:0f:e9:28:
69:3b:1a:5e:36:50:d8:d2:35:59:8c:14:ac:9f:4f:
c9:0a:9f:c4:37:78:f5:a4:41:82:a8:e3:9b:d4:15:
66:8e:31:53:bd:e9:f2:1b:b0:72:13:c7:e1:81:ef:
f4:9d:b1:5c:93:dd:df:ce:e3:9d:d1:c3:68:32:89:
a8:ab:5a:5b:ad:6f:65:f4:01:95:2a:09:f2:9d:cc:
ae:c0:b8:67:a7:15:d2:2c:fd:5d:11:36:05:03:f1:
92:cb:74:07:29:55:1b:58:f2:76:54:d4:7f:5b:02:
62:62:5c:c9:b8:ca:38:52:14:45:c4:7a:e6:29:4b:
d2:e1:f7:61:7a:44:f5:4d:f5:ba:32:fb:68:9c:2a:
72:b4:56:22:fb:55:b0:09:12:75:7a:f4:9e:c9:c0:
f3:4f:37:56:50:a2:9b:2e:19:b6:41:6a:c9:2c:13:
f0:c3:2c:12:be:e8:18:aa:0d:b8:7b:50:fb:a3:bb:
64:2b:bc:ae:7c:42:a5:c9:af:96:1b:5c:1c:6c:b7:
6b:1a:d6:89:19:2c:78:2c:11:7e:8c:8b:53:f7:62:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C7:20:9D:82:CB:27:D1:48:4E:9E:87:A3:A7:BE:B3:25:AF:F7:91
X509v3 Authority Key Identifier:
keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/b529d80bba496d49d2729827472a3716f5928b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.99.120.0/21
Signature Algorithm: sha256WithRSAEncryption
92:db:85:11:5a:06:fa:c6:cb:6d:76:b5:cd:be:57:91:ad:4e:
1c:dd:92:ea:15:48:a7:31:d5:58:65:40:cb:44:1f:29:41:71:
ef:0d:a4:13:85:5d:97:5d:14:09:3d:39:4e:f5:99:9e:ce:20:
2e:0f:b0:1d:55:15:61:49:d5:56:e9:e7:13:45:e9:b6:9a:2d:
65:4c:32:4c:df:24:b1:f0:29:93:45:6c:09:b6:0f:a6:a8:2d:
de:a3:16:22:ab:f6:59:fc:d1:7b:d2:5a:62:93:1b:df:72:fb:
53:c4:87:ee:47:88:d6:8c:cc:0a:6b:76:ae:a8:4a:b1:bc:64:
0c:f1:49:d5:e8:2f:ea:62:ea:b7:69:fb:22:7e:47:43:8e:00:
2d:71:c0:41:85:64:ef:c5:8d:58:2d:8d:fc:64:6a:7a:d0:25:
dc:ae:f3:a7:85:8b:47:83:19:3f:e4:fe:05:e6:9b:de:c1:85:
0c:41:8f:f8:1b:b4:6e:12:fe:d7:a9:3d:a8:13:05:77:bc:0e:
3a:b0:4a:56:a8:3e:63:6b:2f:f6:44:ae:99:d5:97:28:21:fa:
ef:99:af:b7:d8:81:67:e8:eb:43:6f:b1:3d:f3:f7:a5:40:9c:
2f:7e:bf:a3:8b:ac:a2:e4:ac:bb:fc:71:51:4c:94:23:0e:fd:
bd:a7:c9:bf
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGGBNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
MzY3NGRjYjM3YjkxMDIxYWZmZWRkZjgwZWYzNGM5MjQ0MjM2MjcwHhcNMjIwNzE0
MDMwMDAwWhcNMjQwNzE0MDMwMDAwWjAzMTEwLwYDVQQDEyhiNTI5ZDgwYmJhNDk2
ZDQ5ZDI3Mjk4Mjc0NzJhMzcxNmY1OTI4YjJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlfYRd3e4z9czxI2/TeS9duW0DkaOtuvOHEEnTNzUjxAKLAnv
vKrrzMgP6ShpOxpeNlDY0jVZjBSsn0/JCp/EN3j1pEGCqOOb1BVmjjFTvenyG7By
E8fhge/0nbFck93fzuOd0cNoMomoq1pbrW9l9AGVKgnyncyuwLhnpxXSLP1dETYF
A/GSy3QHKVUbWPJ2VNR/WwJiYlzJuMo4UhRFxHrmKUvS4fdhekT1TfW6MvtonCpy
tFYi+1WwCRJ1evSeycDzTzdWUKKbLhm2QWrJLBPwwywSvugYqg24e1D7o7tkK7yu
fEKlya+WG1wcbLdrGtaJGSx4LBF+jItT92JKIwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIDHIJ2CyyfRSE6eh6OnvrMlr/eRMB8GA1UdIwQYMBaAFJ/mwOD42sLEHIxL
66NQ5S8YJXBAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzNjc0
ZGNiMzdiOTEwMjFhZmZlZGRmODBlZjM0YzkyNDQyMzYyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjljY2RjMmItMDZmZC00YTI0LWJkMzYtOTU0NTZm
ODA5NTFjL2I1MjlkODBiYmE0OTZkNDlkMjcyOTgyNzQ3MmEzNzE2ZjU5MjhiMmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOWNjZGMyYi0wNmZkLTRhMjQtYmQzNi05NTQ1
NmY4MDk1MWMvNTEzNjc0ZGNiMzdiOTEwMjFhZmZlZGRmODBlZjM0YzkyNDQyMzYy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA75jeDANBgkqhkiG9w0BAQsFAAOCAQEAktuFEVoG+sbLbXa1
zb5Xka1OHN2S6hVIpzHVWGVAy0QfKUFx7w2kE4Vdl10UCT05TvWZns4gLg+wHVUV
YUnVVunnE0XptpotZUwyTN8ksfApk0VsCbYPpqgt3qMWIqv2WfzRe9JaYpMb33L7
U8SH7keI1ozMCmt2rqhKsbxkDPFJ1egv6mLqt2n7In5HQ44ALXHAQYVk78WNWC2N
/GRqetAl3K7zp4WLR4MZP+T+Beab3sGFDEGP+Bu0bhL+16k9qBMFd7wOOrBKVqg+
Y2sv9kSumdWXKCH675mvt9iBZ+jrQ2+xPfP3pUCcL36/o4usouSsu/xxUUyUIw79
vafJvw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-fra.rpki-client.org