Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/12bacf877d46d8966a98b793c62f4bd20bce2a94.roa
File: 12bacf877d46d8966a98b793c62f4bd20bce2a94.roa (raw, json)
Hash identifier: OXwpAWBpbyfy5AlAL7F2Hna3CYS3HtLMkH7nH7ltXB4=
Subject key identifier: 15:B4:37:F4:35:79:E9:E3:59:9A:A7:16:3C:88:DE:76:51:40:12:9F
Certificate issuer: /CN=04128707f6c4d6a1e230aa63ff5d2378e6ef8b64
Certificate serial: 222EC4
Authority key identifier: 73:71:93:FF:83:F5:E4:2B:46:21:5C:43:A5:61:84:F4:67:BE:88:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/12bacf877d46d8966a98b793c62f4bd20bce2a94.roa
Signing time: Wed 05 Jul 2023 13:27:48 +0000
ROA not before: Tue 04 Jul 2023 13:27:48 +0000
ROA not after: Sat 05 Jul 2025 13:27:48 +0000
asID: 52468
IP address blocks: 131.196.14.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240196 (0x222ec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04128707f6c4d6a1e230aa63ff5d2378e6ef8b64
Validity
Not Before: Jul 4 13:27:48 2023 GMT
Not After : Jul 5 13:27:48 2025 GMT
Subject: CN=12bacf877d46d8966a98b793c62f4bd20bce2a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b8:1b:29:f8:2a:c8:a6:eb:cb:3e:8d:8e:60:
2a:fe:17:66:ea:42:86:a5:ce:85:38:96:15:ed:d0:
21:0c:5f:a7:31:d2:a6:00:0a:e1:4e:0c:9d:04:dc:
a7:70:1d:b2:c1:49:2f:b8:45:90:0c:c8:14:5b:52:
95:2a:16:11:45:6c:ae:75:3c:00:4d:dc:d2:61:99:
99:7e:13:02:03:60:51:61:98:a8:8d:8e:2c:9c:14:
42:67:08:80:84:b1:dc:fc:56:29:a0:28:1a:c2:12:
c8:eb:65:64:af:89:d1:6b:62:47:03:80:97:9b:d6:
51:af:53:72:e4:da:64:ec:25:7f:46:ab:c9:e0:93:
bd:9b:0e:ac:1e:ae:90:67:9f:fa:07:81:59:9d:d1:
1b:28:9f:bf:3b:30:4d:f9:73:cf:37:f4:67:9f:9a:
a4:fd:9f:d7:c4:c9:58:af:77:e5:f6:a0:32:f7:34:
c9:cc:d3:f3:3b:50:fa:f0:ee:64:b2:0e:27:1b:eb:
89:a0:7d:50:d5:0e:da:e4:19:fa:99:6d:47:27:a6:
89:f3:a5:8f:b9:43:0a:8f:c8:7a:cd:42:4d:a0:6a:
06:a7:a8:e0:f3:65:d0:0b:02:0a:f5:f2:cc:4f:62:
39:c6:d0:09:05:72:64:f3:fa:ce:4e:51:2c:28:c4:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B4:37:F4:35:79:E9:E3:59:9A:A7:16:3C:88:DE:76:51:40:12:9F
X509v3 Authority Key Identifier:
keyid:73:71:93:FF:83:F5:E4:2B:46:21:5C:43:A5:61:84:F4:67:BE:88:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/12bacf877d46d8966a98b793c62f4bd20bce2a94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ac33887-b6d1-4c43-905d-123ce3c12491/04128707f6c4d6a1e230aa63ff5d2378e6ef8b64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.14.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:a8:92:04:38:c9:bd:c7:17:e9:9e:1e:49:f1:eb:15:18:b9:
c8:cd:a2:57:64:88:71:f1:93:85:a4:c2:c5:26:c4:41:44:a6:
36:18:d2:85:5b:47:50:ae:26:37:31:5a:9d:91:ba:41:7d:7e:
83:cb:b1:21:98:b8:a9:90:ba:dd:de:0f:b9:d7:30:73:44:c6:
30:eb:95:9e:02:09:16:25:1f:a1:70:44:9b:e7:f4:9e:2b:15:
a5:3e:1c:38:a0:0c:e4:d8:6f:47:7e:66:b4:fc:8c:cd:13:51:
bd:3e:a7:64:4b:b3:ff:11:76:1e:41:b0:b8:33:1f:d5:9e:89:
d6:ae:04:2f:b2:f3:90:d9:5c:e9:b1:2b:37:d1:16:58:31:fa:
66:fc:1b:02:29:ba:85:55:d9:78:d9:92:c9:11:a3:61:f0:77:
a3:f4:a8:a5:3d:97:26:e9:d5:27:8e:f0:df:8a:4e:e5:84:6d:
1b:ec:27:d3:af:fe:14:e8:3b:17:db:ab:38:90:82:98:b0:36:
f5:4a:05:60:c5:8f:5c:cd:c3:ab:42:66:9f:58:12:bd:b3:b6:
d0:a8:1a:e8:a1:73:f5:fd:12:61:2b:be:e9:19:70:11:03:38:
1b:97:ac:ed:26:9a:3c:ea:d0:ef:1d:c5:a0:cd:2f:66:82:03:
13:94:60:c7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIi7EMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA0
MTI4NzA3ZjZjNGQ2YTFlMjMwYWE2M2ZmNWQyMzc4ZTZlZjhiNjQwHhcNMjMwNzA0
MTMyNzQ4WhcNMjUwNzA1MTMyNzQ4WjAzMTEwLwYDVQQDEygxMmJhY2Y4NzdkNDZk
ODk2NmE5OGI3OTNjNjJmNGJkMjBiY2UyYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA7LgbKfgqyKbryz6NjmAq/hdm6kKGpc6FOJYV7dAhDF+nMdKm
AArhTgydBNyncB2ywUkvuEWQDMgUW1KVKhYRRWyudTwATdzSYZmZfhMCA2BRYZio
jY4snBRCZwiAhLHc/FYpoCgawhLI62Vkr4nRa2JHA4CXm9ZRr1Ny5Npk7CV/RqvJ
4JO9mw6sHq6QZ5/6B4FZndEbKJ+/OzBN+XPPN/Rnn5qk/Z/XxMlYr3fl9qAy9zTJ
zNPzO1D68O5ksg4nG+uJoH1Q1Q7a5Bn6mW1HJ6aJ86WPuUMKj8h6zUJNoGoGp6jg
82XQCwIK9fLMT2I5xtAJBXJk8/rOTlEsKMQwdwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBW0N/Q1eenjWZqnFjyI3nZRQBKfMB8GA1UdIwQYMBaAFHNxk/+D9eQrRiFc
Q6VhhPRnvohoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDQxMjg3
MDdmNmM0ZDZhMWUyMzBhYTYzZmY1ZDIzNzhlNmVmOGI2NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWFjMzM4ODctYjZkMS00YzQzLTkwNWQtMTIzY2Uz
YzEyNDkxLzEyYmFjZjg3N2Q0NmQ4OTY2YTk4Yjc5M2M2MmY0YmQyMGJjZTJhOTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYWMzMzg4Ny1iNmQxLTRjNDMtOTA1ZC0xMjNj
ZTNjMTI0OTEvMDQxMjg3MDdmNmM0ZDZhMWUyMzBhYTYzZmY1ZDIzNzhlNmVmOGI2
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAYPEDjANBgkqhkiG9w0BAQsFAAOCAQEALKiSBDjJvccX6Z4e
SfHrFRi5yM2iV2SIcfGThaTCxSbEQUSmNhjShVtHUK4mNzFanZG6QX1+g8uxIZi4
qZC63d4Pudcwc0TGMOuVngIJFiUfoXBEm+f0nisVpT4cOKAM5NhvR35mtPyMzRNR
vT6nZEuz/xF2HkGwuDMf1Z6J1q4EL7LzkNlc6bErN9EWWDH6ZvwbAim6hVXZeNmS
yRGjYfB3o/SopT2XJunVJ47w34pO5YRtG+wn06/+FOg7F9urOJCCmLA29UoFYMWP
XM3Dq0Jmn1gSvbO20Kga6KFz9f0SYSu+6RlwEQM4G5es7SaaPOrQ7x3FoM0vZoID
E5Rgxw==
-----END CERTIFICATE-----
Generated at Tue Oct 17 20:29:14 2023 by rpki-client on console-fra.rpki-client.org