Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/322e892b2c88868150c95db4976c273e078145b5.roa
File: 322e892b2c88868150c95db4976c273e078145b5.roa (raw, json)
Hash identifier: QHY2ODevOAzvPqofOpbY1Ecut9gJ/MhhVB5SMu1ZMcw=
Subject key identifier: 81:34:69:BD:1A:FA:8B:69:79:6A:7B:99:84:EB:D4:C8:FD:B2:06:CE
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 212F03
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/322e892b2c88868150c95db4976c273e078145b5.roa
Signing time: Fri 31 Mar 2023 22:50:02 +0000
ROA not before: Thu 30 Mar 2023 22:45:07 +0000
ROA not after: Mon 31 Mar 2025 22:45:07 +0000
asID: 52328
IP address blocks: 200.123.52.0/23 maxlen: 23
200.123.52.0/24 maxlen: 24
200.123.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174723 (0x212f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Mar 30 22:45:07 2023 GMT
Not After : Mar 31 22:45:07 2025 GMT
Subject: CN=322e892b2c88868150c95db4976c273e078145b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:d4:84:06:39:85:e2:1f:36:4f:f7:d1:08:
7f:7b:6c:4a:1a:17:e3:d5:e3:1c:78:61:b5:3d:aa:
d4:3a:f5:4b:61:e6:09:74:8c:ec:be:82:46:f2:6f:
bc:6c:37:8e:d4:05:ee:40:41:07:fc:0c:ab:25:f4:
94:ad:66:8b:b8:33:71:62:64:f0:5b:db:65:d4:23:
b7:fa:8e:6d:5f:df:7b:3c:a8:a2:e3:fd:62:ea:f0:
45:77:d5:4d:af:ed:4a:d7:20:ee:e6:44:0f:d4:28:
d9:33:78:d0:0f:3b:9b:ef:34:8a:27:5d:11:bc:20:
66:96:aa:3d:f1:6b:85:8b:7c:cb:42:a0:a4:e0:3a:
cb:40:22:4a:b0:6d:38:eb:f2:c4:cb:44:fa:c6:f6:
73:41:35:91:72:5f:8f:2b:ce:d1:81:53:14:31:f5:
ea:96:af:53:48:49:26:16:f6:11:87:95:72:c5:68:
17:c3:c2:ed:e8:5b:2f:ba:3c:0c:ec:30:ef:e2:e1:
b1:e5:b7:c8:e8:a3:d6:48:0c:be:ce:22:bf:48:fd:
56:d7:97:0a:3d:31:fe:0e:18:c1:84:f1:9d:a0:b1:
45:34:24:e5:9c:fa:07:6e:52:19:ec:c6:92:cb:fc:
73:e0:ee:22:13:fd:97:fd:30:0d:d2:7e:7c:4c:28:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:34:69:BD:1A:FA:8B:69:79:6A:7B:99:84:EB:D4:C8:FD:B2:06:CE
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/322e892b2c88868150c95db4976c273e078145b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.52.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:49:63:7c:d7:37:33:ef:ca:b6:8d:03:fb:ca:da:ad:02:7c:
2b:ff:03:44:8a:5f:4d:1c:73:5d:83:00:cf:78:38:bd:7d:7b:
29:fe:26:21:2a:da:da:7a:27:2f:9f:7d:9b:b2:89:9b:5c:5b:
39:45:0d:d5:d0:79:7b:77:30:b0:b7:01:5e:ec:03:fb:73:2b:
e4:ff:75:80:43:48:07:08:71:62:99:ac:9b:bb:c4:13:a8:fa:
ee:43:3d:a3:a6:9b:fe:e0:a4:b6:93:d9:2a:62:87:0c:88:e2:
ea:0a:08:25:ce:8d:c0:ce:b2:c3:8f:b6:2b:21:c5:cf:59:f6:
f2:3c:c4:90:6e:cb:e4:51:4a:2c:3f:04:97:5f:0e:f0:8a:30:
66:b3:a4:f1:04:11:2f:39:7c:66:45:56:4e:dd:ed:c3:53:66:
af:01:38:7e:4b:ea:d1:6c:91:ab:48:89:68:8a:2f:e5:b2:bc:
8a:c8:57:cc:24:23:05:50:86:f2:ad:8d:25:ae:3a:66:0e:15:
ac:ba:06:ff:75:9c:46:de:82:fc:c7:a8:64:8a:f8:51:3b:1c:
a5:3e:0a:93:6b:99:d3:6c:f1:1a:0c:14:a3:51:ce:ab:1a:20:
ab:15:a0:9d:9f:a7:67:7c:63:0f:76:0c:3f:1b:ff:d6:bf:a2:
a1:b4:d9:7b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIS8DMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
YjdhNDNmYzMzYmZjN2ZmNWVhNTkyZGVjYWRkZTY0NTI4ODcwNWUwHhcNMjMwMzMw
MjI0NTA3WhcNMjUwMzMxMjI0NTA3WjAzMTEwLwYDVQQDEygzMjJlODkyYjJjODg4
NjgxNTBjOTVkYjQ5NzZjMjczZTA3ODE0NWI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuDHUhAY5heIfNk/30Qh/e2xKGhfj1eMceGG1ParUOvVLYeYJ
dIzsvoJG8m+8bDeO1AXuQEEH/AyrJfSUrWaLuDNxYmTwW9tl1CO3+o5tX997PKii
4/1i6vBFd9VNr+1K1yDu5kQP1CjZM3jQDzub7zSKJ10RvCBmlqo98WuFi3zLQqCk
4DrLQCJKsG046/LEy0T6xvZzQTWRcl+PK87RgVMUMfXqlq9TSEkmFvYRh5VyxWgX
w8Lt6FsvujwM7DDv4uGx5bfI6KPWSAy+ziK/SP1W15cKPTH+DhjBhPGdoLFFNCTl
nPoHblIZ7MaSy/xz4O4iE/2X/TAN0n58TChqJQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIE0ab0a+otpeWp7mYTr1Mj9sgbOMB8GA1UdIwQYMBaAFMGk+QbXxWt9XjK0
PK4zar0RfTlWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzNiN2E0
M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzMyMmU4OTJiMmM4ODg2ODE1MGM5NWRiNDk3NmMyNzNlMDc4MTQ1YjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvMzNiN2E0M2ZjMzNiZmM3ZmY1ZWE1OTJkZWNhZGRlNjQ1Mjg4NzA1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAch7NDANBgkqhkiG9w0BAQsFAAOCAQEAS0ljfNc3M+/Kto0D
+8rarQJ8K/8DRIpfTRxzXYMAz3g4vX17Kf4mISra2nonL599m7KJm1xbOUUN1dB5
e3cwsLcBXuwD+3Mr5P91gENIBwhxYpmsm7vEE6j67kM9o6ab/uCktpPZKmKHDIji
6goIJc6NwM6yw4+2KyHFz1n28jzEkG7L5FFKLD8El18O8IowZrOk8QQRLzl8ZkVW
Tt3tw1NmrwE4fkvq0WyRq0iJaIov5bK8ishXzCQjBVCG8q2NJa46Zg4VrLoG/3Wc
Rt6C/MeoZIr4UTscpT4Kk2uZ02zxGgwUo1HOqxogqxWgnZ+nZ3xjD3YMPxv/1r+i
obTZew==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org