Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/180b37816681e72f2f6910b296b7ac99ac054831.roa
File: 180b37816681e72f2f6910b296b7ac99ac054831.roa (raw, json)
Hash identifier: tG2HbZ1ker5Lgas1FFTtlaU7mB3g10gTO8PzeA72qAo=
Subject key identifier: B6:27:67:33:B4:CC:30:7F:9E:CD:96:1C:11:46:F1:12:7E:CC:9C:D3
Certificate issuer: /CN=c804815bcdfef674dc896f6b3f2e0b169560053d
Certificate serial: 038D
Authority key identifier: 50:79:6E:13:3A:27:F7:CF:A5:96:4F:35:91:EC:D4:2D:A9:F1:F9:85
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c804815bcdfef674dc896f6b3f2e0b169560053d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/180b37816681e72f2f6910b296b7ac99ac054831.roa
Signing time: Mon 04 Oct 2021 21:01:47 +0000
ROA not before: Mon 04 Oct 2021 03:00:00 +0000
ROA not after: Wed 04 Oct 2023 03:00:00 +0000
asID: 263740
IP address blocks: 138.99.36.0/22 maxlen: 22
143.137.164.0/22 maxlen: 22
161.0.0.0/19 maxlen: 19
168.205.160.0/22 maxlen: 22
170.246.52.0/22 maxlen: 22
186.65.112.0/20 maxlen: 20
2803:6c00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 909 (0x38d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c804815bcdfef674dc896f6b3f2e0b169560053d
Validity
Not Before: Oct 4 03:00:00 2021 GMT
Not After : Oct 4 03:00:00 2023 GMT
Subject: CN=180b37816681e72f2f6910b296b7ac99ac054831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e8:8e:18:82:bd:bd:e8:3c:98:b0:73:99:f1:
69:7c:80:18:1d:f9:68:26:12:48:fb:96:11:81:1e:
66:63:82:75:92:cc:e0:7c:20:d1:f1:da:52:02:38:
85:e6:8e:3d:6c:3a:73:23:9b:52:2f:50:65:89:46:
de:31:dc:46:c9:57:0c:e7:b1:3c:5e:a3:01:25:6c:
4e:cf:16:0d:e5:9e:32:d0:cc:b7:01:2e:09:dd:29:
f7:e6:87:ad:8e:0a:8c:94:b6:17:c5:79:2e:51:b6:
eb:2f:a7:76:58:1e:6f:12:80:74:25:4f:e7:6f:30:
e9:85:40:e5:6b:0d:b7:43:7a:79:cb:e0:9d:d0:84:
94:72:94:ce:49:9f:98:76:cf:0a:05:1a:a7:7f:98:
9e:4e:eb:96:0d:c1:29:30:b4:a7:23:d9:ba:8c:5a:
77:1a:ac:27:e3:53:bf:5b:88:6b:c1:f0:c1:a1:bd:
71:38:6e:85:d0:f3:b4:2d:33:c7:79:1b:40:68:8f:
25:67:7e:86:dc:a5:39:96:37:05:ea:4e:7f:a3:6a:
52:cb:d5:55:fe:b9:24:44:79:a8:31:43:c5:94:f0:
d7:b2:c9:e1:da:5e:7a:25:d4:83:d0:55:29:6a:61:
11:46:e9:b7:fc:00:17:13:9f:3d:4c:1d:f8:32:3a:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:27:67:33:B4:CC:30:7F:9E:CD:96:1C:11:46:F1:12:7E:CC:9C:D3
X509v3 Authority Key Identifier:
keyid:50:79:6E:13:3A:27:F7:CF:A5:96:4F:35:91:EC:D4:2D:A9:F1:F9:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c804815bcdfef674dc896f6b3f2e0b169560053d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/180b37816681e72f2f6910b296b7ac99ac054831.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/c804815bcdfef674dc896f6b3f2e0b169560053d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.36.0/22
143.137.164.0/22
161.0.0.0/19
168.205.160.0/22
170.246.52.0/22
186.65.112.0/20
IPv6:
2803:6c00::/32
Signature Algorithm: sha256WithRSAEncryption
88:c9:13:b9:40:f7:17:bc:d9:97:06:e1:00:ce:91:9a:88:1d:
73:77:1e:90:d7:0d:6a:c2:be:57:c8:76:18:36:43:69:aa:e4:
ef:a7:8a:5c:c3:30:4c:97:8d:52:73:6f:e4:a3:03:9a:cb:a1:
e1:69:2f:24:37:dc:73:bb:39:68:ac:cf:8d:35:ff:e7:21:ca:
9d:da:38:5c:90:2d:3c:8d:f8:86:50:99:e7:a7:1f:b0:18:af:
31:4c:e9:72:ae:f1:30:9f:77:dc:e5:e1:a7:6e:eb:f8:18:a1:
3f:8a:08:f4:a8:31:bf:8c:7c:c5:aa:f1:02:84:bc:1f:35:3d:
38:db:f3:0f:8a:0c:73:c6:be:27:72:c4:2c:87:4f:23:89:35:
a0:16:e0:e6:82:ae:02:ba:22:8a:af:7e:c2:28:41:20:fd:a6:
44:92:3a:af:33:79:3b:cf:af:92:ec:34:b0:37:1d:24:1b:44:
44:86:ee:83:82:23:e0:00:0a:dc:05:c1:3b:64:11:4f:8e:11:
3f:16:15:ea:07:01:17:ce:98:bb:af:1e:54:73:f2:c8:3c:ab:
05:00:c3:58:8f:63:db:7f:b8:b2:58:bf:c1:e3:e4:70:b8:95:
17:ab:65:a1:ac:b6:a6:9a:6a:23:4e:bb:33:aa:82:3c:de:da:
42:9d:66:dc
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgICA40wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYzgw
NDgxNWJjZGZlZjY3NGRjODk2ZjZiM2YyZTBiMTY5NTYwMDUzZDAeFw0yMTEwMDQw
MzAwMDBaFw0yMzEwMDQwMzAwMDBaMDMxMTAvBgNVBAMTKDE4MGIzNzgxNjY4MWU3
MmYyZjY5MTBiMjk2YjdhYzk5YWMwNTQ4MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCK6I4Ygr296DyYsHOZ8Wl8gBgd+WgmEkj7lhGBHmZjgnWSzOB8
INHx2lICOIXmjj1sOnMjm1IvUGWJRt4x3EbJVwznsTxeowElbE7PFg3lnjLQzLcB
LgndKffmh62OCoyUthfFeS5Rtusvp3ZYHm8SgHQlT+dvMOmFQOVrDbdDennL4J3Q
hJRylM5Jn5h2zwoFGqd/mJ5O65YNwSkwtKcj2bqMWncarCfjU79biGvB8MGhvXE4
boXQ87QtM8d5G0BojyVnfobcpTmWNwXqTn+jalLL1VX+uSREeagxQ8WU8NeyyeHa
Xnol1IPQVSlqYRFG6bf8ABcTnz1MHfgyOpv/AgMBAAGjggKIMIIChDAdBgNVHQ4E
FgQUtidnM7TMMH+ezZYcEUbxEn7MnNMwHwYDVR0jBBgwFoAUUHluEzon98+llk81
kezULanx+YUwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9jODA0ODE1
YmNkZmVmNjc0ZGM4OTZmNmIzZjJlMGIxNjk1NjAwNTNkLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wMDNkMmJlZS1hYTgzLTQ1NWItOWY5Ni01ZDZkNDgw
MjdlZTYvMTgwYjM3ODE2NjgxZTcyZjJmNjkxMGIyOTZiN2FjOTlhYzA1NDgzMS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzAwM2QyYmVlLWFhODMtNDU1Yi05Zjk2LTVkNmQ0
ODAyN2VlNi9jODA0ODE1YmNkZmVmNjc0ZGM4OTZmNmIzZjJlMGIxNjk1NjAwNTNk
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0w
OzAqBAIAATAkAwQCimMkAwQCj4mkAwQFoQAAAwQCqM2gAwQCqvY0AwQEukFwMA0E
AgACMAcDBQAoA2wAMA0GCSqGSIb3DQEBCwUAA4IBAQCIyRO5QPcXvNmXBuEAzpGa
iB1zdx6Q1w1qwr5XyHYYNkNpquTvp4pcwzBMl41Sc2/kowOay6HhaS8kN9xzuzlo
rM+NNf/nIcqd2jhckC08jfiGUJnnpx+wGK8xTOlyrvEwn3fc5eGnbuv4GKE/igj0
qDG/jHzFqvEChLwfNT042/MPigxzxr4ncsQsh08jiTWgFuDmgq4CuiKKr37CKEEg
/aZEkjqvM3k7z6+S7DSwNx0kG0REhu6DgiPgAArcBcE7ZBFPjhE/FhXqBwEXzpi7
rx5Uc/LIPKsFAMNYj2Pbf7iyWL/B4+RwuJUXq2WhrLammmojTrszqoI83tpCnWbc
-----END CERTIFICATE-----
Generated at Tue Oct 3 08:55:25 2023 by rpki-client on console-ams.rpki-client.org