Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/75206b7adf3b7beba4ffa84f1180ab9ae592b536.roa
File: 75206b7adf3b7beba4ffa84f1180ab9ae592b536.roa (raw, json)
Hash identifier: 0Xho1auK9FCecwVsanRUEHc6bsQFE6VF8M9e1ZF0gG8=
Subject key identifier: C2:18:99:3F:78:32:5B:DC:5B:B7:1E:29:E6:07:90:F2:E9:8B:A0:5A
Certificate issuer: /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial: 16D49A
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/75206b7adf3b7beba4ffa84f1180ab9ae592b536.roa
Signing time: Wed 27 Apr 2022 16:33:17 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 23031
IP address blocks: 66.231.65.0/24 maxlen: 24
66.231.66.0/24 maxlen: 24
66.231.67.0/24 maxlen: 24
66.231.73.0/24 maxlen: 24
66.231.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1496218 (0x16d49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=75206b7adf3b7beba4ffa84f1180ab9ae592b536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:92:35:bf:9b:1b:b9:38:6f:40:23:92:25:f4:
2e:c4:4b:74:71:ca:f4:d7:e5:6e:a5:fb:ee:6c:9f:
36:25:ee:e7:d5:24:98:5d:9c:da:61:3c:47:4d:cc:
97:4b:f5:e0:1f:d1:62:99:e7:f2:78:a5:3c:61:e5:
0c:d0:21:39:79:6b:59:b2:7a:93:06:32:0f:ce:6a:
6e:85:3f:6b:ed:b3:3a:80:01:30:e0:0d:a4:b1:42:
42:f7:25:b5:f5:5c:06:74:cc:b4:1c:9b:41:98:e3:
d3:1c:df:c2:fe:30:f9:e5:7a:98:d9:55:57:67:8b:
ac:09:63:17:84:26:ec:19:7b:91:e2:03:84:c3:db:
e6:37:40:70:67:d2:66:57:18:92:29:1d:a0:45:2b:
a7:6f:ee:82:8a:17:77:8a:16:e9:c7:85:dd:b1:4c:
62:d3:32:f9:4f:3d:9b:37:5a:c1:9c:db:16:74:af:
a5:e2:85:c5:10:d1:eb:fd:d6:a5:44:b6:e7:9a:4a:
85:e7:ce:42:7a:86:a2:d0:c9:c0:34:22:10:d2:17:
95:81:9e:00:9f:f9:ee:e8:7e:0d:39:51:19:14:f1:
54:48:62:31:4d:d2:e2:2e:fd:cb:f1:00:b0:07:35:
fc:d8:b1:d3:df:4d:c8:32:8c:1a:22:c5:2a:d4:8d:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:18:99:3F:78:32:5B:DC:5B:B7:1E:29:E6:07:90:F2:E9:8B:A0:5A
X509v3 Authority Key Identifier:
keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/75206b7adf3b7beba4ffa84f1180ab9ae592b536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.231.65.0-66.231.67.255
66.231.73.0/24
66.231.77.0/24
Signature Algorithm: sha256WithRSAEncryption
39:72:e5:2a:0b:0d:2c:d4:6d:db:46:25:bc:d2:93:c0:34:bd:
20:ba:77:f7:78:8b:87:b1:e4:6b:10:82:70:9f:4c:d1:00:c2:
48:ae:c4:a6:33:58:66:88:e3:02:e0:27:8a:b3:22:59:e3:9c:
0b:da:7d:19:65:41:a3:a3:e3:8e:d1:d2:2a:30:50:dd:e2:d5:
8c:13:ea:45:80:2d:2e:fc:ef:3b:d1:ed:ce:f3:27:14:b9:35:
32:75:95:b5:b7:17:2b:4b:a8:47:a3:48:2f:16:5a:2f:14:89:
34:c5:98:da:81:0b:e9:07:91:68:11:da:f5:af:26:d6:18:f2:
b7:6f:2b:d3:a3:0b:e3:10:37:74:ab:0d:f0:0a:5c:09:12:e6:
80:32:9d:11:00:f8:6d:3f:48:f0:4c:df:8c:f0:aa:b8:51:0c:
c4:6b:66:99:26:2a:02:2d:f3:16:ae:cb:1d:8c:27:df:8e:30:
d0:dd:3b:2a:24:11:dc:4c:2d:82:55:17:cb:58:ac:4f:2e:e2:
51:69:6e:4d:e8:0b:40:1d:a8:99:1c:95:14:f0:74:6b:0e:16:
e4:f6:e6:b3:b4:4c:3d:23:51:df:ad:91:8f:57:86:04:7b:4e:
6d:8d:82:a8:a3:91:d5:32:00:b4:50:22:b6:5f:b2:b0:b2:6b:
0b:9a:a1:35
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIDFtSaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
NjRlMjU3ZWFlMDRlZTI2ZDhlYjMzOWYxNDg3OTFiMzFjYzA4NzUwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg3NTIwNmI3YWRmM2I3
YmViYTRmZmE4NGYxMTgwYWI5YWU1OTJiNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlJI1v5sbuThvQCOSJfQuxEt0ccr01+VupfvubJ82Je7n1SSY
XZzaYTxHTcyXS/XgH9FimefyeKU8YeUM0CE5eWtZsnqTBjIPzmpuhT9r7bM6gAEw
4A2ksUJC9yW19VwGdMy0HJtBmOPTHN/C/jD55XqY2VVXZ4usCWMXhCbsGXuR4gOE
w9vmN0BwZ9JmVxiSKR2gRSunb+6Cihd3ihbpx4XdsUxi0zL5Tz2bN1rBnNsWdK+l
4oXFENHr/dalRLbnmkqF585Ceoai0MnANCIQ0heVgZ4An/nu6H4NOVEZFPFUSGIx
TdLiLv3L8QCwBzX82LHT303IMowaIsUq1I2yMQIDAQABo4ICbzCCAmswHQYDVR0O
BBYEFMIYmT94MlvcW7ceKeYHkPLpi6BaMB8GA1UdIwQYMBaAFGfGO6RHojXSKBwz
PpqDhyUXpLG+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2U2NGUy
NTdlYWUwNGVlMjZkOGViMzM5ZjE0ODc5MWIzMWNjMDg3NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjViNjM3YzYtY2RjZi00MjNkLThjMGMtY2Q2MTVh
Yjk4YTI0Lzc1MjA2YjdhZGYzYjdiZWJhNGZmYTg0ZjExODBhYjlhZTU5MmI1MzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNWI2MzdjNi1jZGNmLTQyM2QtOGMwYy1jZDYx
NWFiOThhMjQvY2U2NGUyNTdlYWUwNGVlMjZkOGViMzM5ZjE0ODc5MWIzMWNjMDg3
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQk
MCIwIAQCAAEwGjAMAwQAQudBAwQCQudAAwQAQudJAwQAQudNMA0GCSqGSIb3DQEB
CwUAA4IBAQA5cuUqCw0s1G3bRiW80pPANL0gunf3eIuHseRrEIJwn0zRAMJIrsSm
M1hmiOMC4CeKsyJZ45wL2n0ZZUGjo+OO0dIqMFDd4tWME+pFgC0u/O870e3O8ycU
uTUydZW1txcrS6hHo0gvFlovFIk0xZjagQvpB5FoEdr1rybWGPK3byvTowvjEDd0
qw3wClwJEuaAMp0RAPhtP0jwTN+M8Kq4UQzEa2aZJioCLfMWrssdjCffjjDQ3Tsq
JBHcTC2CVRfLWKxPLuJRaW5N6AtAHaiZHJUU8HRrDhbk9uaztEw9I1HfrZGPV4YE
e05tjYKoo5HVMgC0UCK2X7KwsmsLmqE1
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:28 2023 by rpki-client on console-ams.rpki-client.org