Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3586e6cf-f752-4f1e-ba65-5f30d37c75c2/c2b9aaf13ab22e3750db541a9a8a4818f4249b02.roa
File: c2b9aaf13ab22e3750db541a9a8a4818f4249b02.roa (raw, json)
Hash identifier: DX3DO4pmDgJXJwbB0ILUv76nAbmkWaZjA253zUvyBAg=
Subject key identifier: 42:AC:75:94:17:FD:1B:7B:9C:B5:75:7D:54:9F:3C:E6:3A:14:34:DB
Certificate issuer: /CN=73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc
Certificate serial: 0148
Authority key identifier: FB:F7:CF:61:86:63:D8:A1:ED:59:F8:52:BC:AC:8A:23:37:2F:97:8D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3586e6cf-f752-4f1e-ba65-5f30d37c75c2/c2b9aaf13ab22e3750db541a9a8a4818f4249b02.roa
Signing time: Sun 23 May 2021 03:06:57 +0000
ROA not before: Sun 23 May 2021 03:00:00 +0000
ROA not after: Tue 23 May 2023 03:00:00 +0000
asID: 271880
IP address blocks: 200.36.152.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc
Validity
Not Before: May 23 03:00:00 2021 GMT
Not After : May 23 03:00:00 2023 GMT
Subject: CN=c2b9aaf13ab22e3750db541a9a8a4818f4249b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:72:79:1d:17:8b:f5:e3:09:9e:6c:e5:ef:ac:
22:bd:75:fa:fb:ee:10:63:f5:4c:c9:dc:01:6e:79:
2b:86:fe:30:36:71:a7:e8:db:1b:13:59:09:73:6c:
b8:91:b2:90:cd:f5:cb:55:62:81:e6:46:4c:70:a5:
40:69:2c:2d:5a:f4:0b:ff:3b:7a:8c:cd:2b:46:9a:
fc:b0:57:74:f6:67:0d:30:00:7e:a1:36:34:fc:a7:
c6:74:4e:c2:69:ef:17:fc:80:65:d6:c3:39:91:bc:
a1:b8:fe:24:ec:ed:a8:55:dd:b7:b0:68:02:d7:85:
25:34:53:fe:8a:49:4e:02:4a:61:2e:c7:0e:7a:8c:
91:3a:65:1a:a7:81:c3:3f:48:85:2c:67:7c:76:c8:
13:77:04:91:c4:13:97:ca:57:ec:27:24:e2:9f:7a:
ac:d4:bb:0b:0e:e7:ed:b3:31:a3:1b:1c:29:b9:ca:
e9:de:ab:a6:7f:8a:70:3f:ce:83:09:78:3f:61:89:
a7:fc:b2:d7:d0:d0:f3:09:6d:db:e8:f0:19:25:b6:
41:46:c1:e4:32:11:b0:d3:8e:a8:3b:9a:11:2f:48:
a2:fe:e2:40:65:a7:14:ca:d2:21:df:6f:cb:04:4d:
64:b4:3f:47:37:e1:e0:3e:bb:c2:05:0d:ea:75:17:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AC:75:94:17:FD:1B:7B:9C:B5:75:7D:54:9F:3C:E6:3A:14:34:DB
X509v3 Authority Key Identifier:
keyid:FB:F7:CF:61:86:63:D8:A1:ED:59:F8:52:BC:AC:8A:23:37:2F:97:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3586e6cf-f752-4f1e-ba65-5f30d37c75c2/c2b9aaf13ab22e3750db541a9a8a4818f4249b02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3586e6cf-f752-4f1e-ba65-5f30d37c75c2/73512e1e1fd4c7802ea04ee5d9fb1d15fda87ccc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.36.152.0/22
Signature Algorithm: sha256WithRSAEncryption
00:f9:82:95:74:ae:75:61:57:42:b6:0f:8e:aa:a7:36:bf:d1:
14:0e:57:fe:f9:ee:d8:a4:a5:c5:0a:40:fc:75:34:20:95:57:
25:fb:32:61:02:7a:14:aa:7d:c7:c3:a3:52:0b:ea:75:b8:55:
bd:8b:4f:f4:d7:b8:f1:13:fd:8d:20:bd:03:81:a2:64:b4:62:
be:6a:48:f8:22:cd:02:d9:ee:71:a3:25:e2:53:10:61:b8:75:
4e:a6:6d:ae:83:fb:5f:ee:30:af:92:b0:db:80:a0:76:62:4e:
e8:9d:89:9a:e4:ad:0a:02:4c:81:7a:20:e9:03:cc:ab:54:a3:
27:09:ab:4b:db:dc:a9:a2:6c:94:ff:9b:28:c3:d9:d7:e3:87:
9c:d6:97:af:a8:c9:49:81:ab:dd:7c:2a:a3:d8:31:de:62:55:
58:f3:70:a8:61:10:3c:39:1b:04:b9:12:24:6a:2a:79:49:6b:
7f:69:45:45:97:20:bd:71:9b:b1:e9:94:eb:45:15:72:81:6d:
55:4c:fa:95:10:dc:95:38:d1:4a:a2:d4:ea:06:14:25:3b:99:
d8:a1:97:d2:cb:c1:8a:7a:a8:2c:8a:cc:d1:0a:29:94:50:ff:
08:5c:de:61:62:7b:1e:b0:66:a0:e6:f7:9d:41:50:31:42:e5:
68:65:77:03
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzM1
MTJlMWUxZmQ0Yzc4MDJlYTA0ZWU1ZDlmYjFkMTVmZGE4N2NjYzAeFw0yMTA1MjMw
MzAwMDBaFw0yMzA1MjMwMzAwMDBaMDMxMTAvBgNVBAMTKGMyYjlhYWYxM2FiMjJl
Mzc1MGRiNTQxYTlhOGE0ODE4ZjQyNDliMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDecnkdF4v14wmebOXvrCK9dfr77hBj9UzJ3AFueSuG/jA2cafo
2xsTWQlzbLiRspDN9ctVYoHmRkxwpUBpLC1a9Av/O3qMzStGmvywV3T2Zw0wAH6h
NjT8p8Z0TsJp7xf8gGXWwzmRvKG4/iTs7ahV3bewaALXhSU0U/6KSU4CSmEuxw56
jJE6ZRqngcM/SIUsZ3x2yBN3BJHEE5fKV+wnJOKfeqzUuwsO5+2zMaMbHCm5yune
q6Z/inA/zoMJeD9hiaf8stfQ0PMJbdvo8BkltkFGweQyEbDTjqg7mhEvSKL+4kBl
pxTK0iHfb8sETWS0P0c34eA+u8IFDep1F+dJAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUQqx1lBf9G3uctXV9VJ885joUNNswHwYDVR0jBBgwFoAU+/fPYYZj2KHtWfhS
vKyKIzcvl40wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS83MzUxMmUx
ZTFmZDRjNzgwMmVhMDRlZTVkOWZiMWQxNWZkYTg3Y2NjLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8zNTg2ZTZjZi1mNzUyLTRmMWUtYmE2NS01ZjMwZDM3
Yzc1YzIvYzJiOWFhZjEzYWIyMmUzNzUwZGI1NDFhOWE4YTQ4MThmNDI0OWIwMi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzM1ODZlNmNmLWY3NTItNGYxZS1iYTY1LTVmMzBk
MzdjNzVjMi83MzUxMmUxZTFmZDRjNzgwMmVhMDRlZTVkOWZiMWQxNWZkYTg3Y2Nj
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCyCSYMA0GCSqGSIb3DQEBCwUAA4IBAQAA+YKVdK51YVdCtg+O
qqc2v9EUDlf++e7YpKXFCkD8dTQglVcl+zJhAnoUqn3Hw6NSC+p1uFW9i0/017jx
E/2NIL0DgaJktGK+akj4Is0C2e5xoyXiUxBhuHVOpm2ug/tf7jCvkrDbgKB2Yk7o
nYma5K0KAkyBeiDpA8yrVKMnCatL29ypomyU/5sow9nX44ec1pevqMlJgavdfCqj
2DHeYlVY83CoYRA8ORsEuRIkaip5SWt/aUVFlyC9cZux6ZTrRRVygW1VTPqVENyV
ONFKotTqBhQlO5nYoZfSy8GKeqgsiszRCimUUP8IXN5hYnsesGag5vedQVAxQuVo
ZXcD
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org