Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/17cbeec84630d8d40e35129969efdd6ed49665a0.roa
File: 17cbeec84630d8d40e35129969efdd6ed49665a0.roa (raw, json)
Hash identifier: O1+o6+SrNzVOgrFXCJZft5Mhovd270E9uXfHCDWVSLw=
Subject key identifier: 78:A2:31:C6:4E:9D:3D:EE:11:D2:45:09:12:5B:B3:0D:E3:7D:FC:88
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 1FFC2C
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/17cbeec84630d8d40e35129969efdd6ed49665a0.roa
Signing time: Fri 20 Jan 2023 00:58:48 +0000
ROA not before: Wed 17 Mar 2021 03:00:00 +0000
ROA not after: Fri 24 Mar 2023 03:00:00 +0000
asID: 18678
IP address blocks: 190.90.63.0/24 maxlen: 24
190.90.82.0/24 maxlen: 24
190.90.93.0/24 maxlen: 24
190.90.94.0/24 maxlen: 24
190.90.101.0/24 maxlen: 24
190.90.151.0/24 maxlen: 24
190.90.152.0/24 maxlen: 24
190.90.192.0/24 maxlen: 24
190.90.193.0/24 maxlen: 24
190.90.202.0/24 maxlen: 24
190.90.204.0/24 maxlen: 24
190.90.221.0/24 maxlen: 24
190.90.222.0/24 maxlen: 24
190.90.223.0/24 maxlen: 24
190.90.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2096172 (0x1ffc2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Mar 17 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2023 GMT
Subject: CN=17cbeec84630d8d40e35129969efdd6ed49665a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:b3:1c:df:2a:e1:21:44:78:38:5e:e1:e7:
42:50:40:aa:6e:ff:66:bd:db:1e:20:26:db:89:ae:
ac:d2:b2:fd:ec:fa:01:e6:9a:ce:af:a3:4d:39:96:
a8:f3:c2:14:88:9f:c4:78:b6:7e:79:fb:82:e9:41:
1a:10:66:e6:c8:75:8c:24:7b:1e:ef:81:89:ec:58:
08:be:79:eb:bd:5b:e7:36:52:f9:31:04:33:15:33:
3b:1e:7a:c8:d0:7e:d0:bd:0f:ff:88:41:07:08:c7:
c5:dd:61:e8:b9:41:ea:c4:7f:71:ca:ff:a7:05:83:
91:83:6c:14:85:58:a1:38:8c:66:50:28:15:95:a8:
d3:71:48:32:f3:a7:89:17:cf:11:1d:5e:16:6b:11:
56:d2:29:e8:c4:ab:9c:b3:ec:2a:e9:ad:2d:fe:62:
05:5c:b9:cb:ed:1b:25:02:96:67:c2:55:95:27:18:
61:e3:79:09:d7:10:b3:2b:d5:3f:f3:a3:1e:2f:5e:
34:3b:05:4d:2a:18:02:f4:96:1f:d5:18:31:b8:17:
bc:be:f0:aa:e8:e3:ba:f2:6a:71:1b:b6:3d:94:f7:
4b:3d:90:82:cf:34:8c:74:f0:1a:e3:ed:ad:a5:57:
e7:4b:f5:54:10:61:80:b1:e0:d2:29:e8:e1:34:5a:
de:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A2:31:C6:4E:9D:3D:EE:11:D2:45:09:12:5B:B3:0D:E3:7D:FC:88
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/17cbeec84630d8d40e35129969efdd6ed49665a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.90.63.0/24
190.90.82.0/24
190.90.93.0-190.90.94.255
190.90.101.0/24
190.90.151.0-190.90.152.255
190.90.192.0/23
190.90.202.0/24
190.90.204.0/24
190.90.221.0-190.90.223.255
190.90.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:6e:06:3f:dd:e8:58:8b:f5:23:24:38:27:53:39:9d:57:7b:
fe:5b:4a:2f:8b:e7:0f:44:dc:ce:db:49:61:ba:3d:24:3a:66:
0d:1f:fa:d2:c2:68:b1:bb:3b:6d:47:bd:48:19:83:b8:f8:29:
4d:19:29:d8:e5:73:09:d4:30:b4:2f:31:bd:35:48:a5:47:76:
34:3a:b0:7d:46:32:cf:e3:7b:d6:12:8c:99:79:8f:ec:62:6f:
04:dc:92:6b:b1:c6:8b:cb:b9:17:75:a5:92:24:d5:63:9d:2a:
dc:d0:e3:08:50:84:9f:2f:d9:2f:8f:f9:b1:20:df:09:b7:91:
53:fe:17:50:a9:01:bf:df:91:d4:7d:85:a2:8b:5e:ce:39:b7:
61:41:a6:30:67:84:09:56:12:17:06:3e:1b:4a:5b:24:5a:01:
63:95:4d:e6:35:df:ce:d1:4e:ff:d5:cd:c7:f0:8a:8d:20:da:
57:b2:50:c3:48:f2:ed:5a:7e:6e:d9:ba:7d:27:8a:44:fa:f9:
d8:49:ac:d5:10:df:ab:d6:73:6f:c9:49:ee:1a:c3:1d:d3:7d:
79:ec:07:ef:79:c8:28:8e:50:c2:5f:4b:42:86:5c:36:c0:56:
79:83:29:61:56:dd:ee:97:54:e9:f0:a5:ce:3c:4f:c0:98:d0:
5f:6c:a6:aa
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIDH/wsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwMzE3
MDMwMDAwWhcNMjMwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygxN2NiZWVjODQ2MzBk
OGQ0MGUzNTEyOTk2OWVmZGQ2ZWQ0OTY2NWEwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApj2zHN8q4SFEeDhe4edCUECqbv9mvdseICbbia6s0rL97PoB
5prOr6NNOZao88IUiJ/EeLZ+efuC6UEaEGbmyHWMJHse74GJ7FgIvnnrvVvnNlL5
MQQzFTM7HnrI0H7QvQ//iEEHCMfF3WHouUHqxH9xyv+nBYORg2wUhVihOIxmUCgV
lajTcUgy86eJF88RHV4WaxFW0inoxKucs+wq6a0t/mIFXLnL7RslApZnwlWVJxhh
43kJ1xCzK9U/86MeL140OwVNKhgC9JYf1RgxuBe8vvCq6OO68mpxG7Y9lPdLPZCC
zzSMdPAa4+2tpVfnS/VUEGGAseDSKejhNFreXwIDAQABo4ICqTCCAqUwHQYDVR0O
BBYEFHiiMcZOnT3uEdJFCRJbsw3jffyIMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5LzE3Y2JlZWM4NDYzMGQ4ZDQwZTM1MTI5OTY5ZWZkZDZlZDQ5NjY1YTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBtBggrBgEFBQcBBwEB/wRe
MFwwWgQCAAEwVAMEAL5aPwMEAL5aUjAMAwQAvlpdAwQAvlpeAwQAvlplMAwDBAC+
WpcDBAC+WpgDBAG+WsADBAC+WsoDBAC+WswwDAMEAL5a3QMEBb5awAMEAL5a8jAN
BgkqhkiG9w0BAQsFAAOCAQEAbm4GP93oWIv1IyQ4J1M5nVd7/ltKL4vnD0TczttJ
Ybo9JDpmDR/60sJosbs7bUe9SBmDuPgpTRkp2OVzCdQwtC8xvTVIpUd2NDqwfUYy
z+N71hKMmXmP7GJvBNySa7HGi8u5F3WlkiTVY50q3NDjCFCEny/ZL4/5sSDfCbeR
U/4XUKkBv9+R1H2Footezjm3YUGmMGeECVYSFwY+G0pbJFoBY5VN5jXfztFO/9XN
x/CKjSDaV7JQw0jy7Vp+btm6fSeKRPr52Ems1RDfq9Zzb8lJ7hrDHdN9eewH73nI
KI5Qwl9LQoZcNsBWeYMpYVbd7pdU6fClzjxPwJjQX2ymqg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:20 2023 by rpki-client on console.sobornost.net