Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS6332.roa
File: AS6332.roa (raw, json)
Hash identifier: axvwEtXtKBwCvp55BGCnwPK/bv7R6Nd9Q8uTc7ebbes=
Subject key identifier: 1F:BE:47:1B:ED:62:7D:D0:E5:F7:A9:E6:99:34:56:91:CF:C3:07:1D
Certificate issuer: /CN=C868DC422443FA70E7761C0304061EB998BF7378
Certificate serial: 61FA4C62A655DE39BFA8FA7FEB940AD92E7BD4BD
Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS6332.roa
Signing time: Thu 09 May 2024 23:45:00 +0000
ROA not before: Thu 09 May 2024 23:40:00 +0000
ROA not after: Thu 08 May 2025 23:45:00 +0000
asID: 6332
IP address blocks: 200.33.141.0/24 maxlen: 24
200.33.142.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 00:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:fa:4c:62:a6:55:de:39:bf:a8:fa:7f:eb:94:0a:d9:2e:7b:d4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378
Validity
Not Before: May 9 23:40:00 2024 GMT
Not After : May 8 23:45:00 2025 GMT
Subject: CN=1FBE471BED627DD0E5F7A9E699345691CFC3071D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:3e:bd:0e:86:22:dc:9d:02:02:98:27:45:
56:b8:98:7d:3f:06:37:6c:80:a9:e5:4e:db:a7:e8:
bf:e0:52:8c:27:41:3d:01:1b:ea:3c:48:20:91:4b:
97:08:14:94:74:1e:30:a3:26:e9:f2:19:cf:ea:f7:
00:29:23:7d:1c:85:ea:85:25:4e:77:0c:dd:53:ff:
d6:7d:80:81:ef:db:ca:51:32:27:eb:c7:0f:12:09:
73:42:88:0e:21:f7:28:ee:32:d1:db:45:2a:36:b7:
3f:a8:e4:74:61:51:ae:6b:b2:38:b1:bb:b2:58:c9:
be:13:b7:1a:5f:39:81:29:9d:0a:9b:9d:7c:92:cc:
a4:47:48:b3:77:e6:b0:dd:5e:b2:b6:8b:28:2e:a3:
11:1c:6b:14:55:3c:87:02:6f:3c:f8:25:50:6a:ad:
65:b8:45:8b:62:53:c8:4f:b9:b2:0d:b4:16:4e:2e:
7b:88:7d:24:30:62:83:02:71:33:29:96:a6:66:5c:
82:39:8f:9b:e3:20:c1:9f:dd:3e:6e:f3:1f:29:90:
29:e7:e8:9e:02:f7:f0:32:7d:e4:5a:46:89:3f:72:
54:f7:20:08:f5:d9:47:c2:42:0a:a8:a8:65:04:80:
07:1d:13:60:95:a6:56:b5:e8:d5:17:d9:d2:7b:bd:
b8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BE:47:1B:ED:62:7D:D0:E5:F7:A9:E6:99:34:56:91:CF:C3:07:1D
X509v3 Authority Key Identifier:
keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS6332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.141.0-200.33.143.255
Signature Algorithm: sha256WithRSAEncryption
bb:5c:d6:68:1e:46:b0:62:e5:bb:29:cc:62:e6:d6:5f:ed:a5:
40:62:ab:14:8f:c8:78:e5:55:ad:90:52:77:02:eb:77:f3:01:
bb:2b:a6:05:b5:4d:2a:eb:4d:8b:3a:3c:b9:f9:b4:04:d1:14:
35:d3:d3:a4:62:d9:24:fa:7c:97:e7:4c:9a:a8:01:4d:11:08:
50:3a:54:15:97:42:7a:92:dc:98:e5:61:7d:a4:de:fd:9a:cd:
c3:9a:bb:39:a3:24:ba:56:a5:46:18:45:2a:3b:d0:df:67:b4:
d5:57:0c:cc:70:32:6e:7d:c3:56:45:3a:9e:62:26:45:e7:c3:
d2:31:24:d5:0d:ab:39:0b:d7:df:8d:ca:29:9a:a5:86:90:ef:
a9:15:ae:7a:aa:39:2e:30:58:6a:8c:12:5e:7a:fa:bb:b0:ef:
aa:d4:b3:b7:d5:20:9e:c2:f2:2f:95:f6:9a:90:a1:b9:ac:f9:
b9:c2:3b:23:cb:b3:7e:72:98:0d:37:b0:26:ff:96:74:d0:cf:
ed:aa:c0:66:2b:df:2a:c0:9d:b4:84:e6:40:34:1d:ef:89:d7:
23:a0:ce:6b:66:2a:7d:ba:a8:53:79:56:a1:d9:99:a9:ae:8b:
95:35:00:4a:61:68:78:9b:ea:b8:7d:81:0a:2c:a2:14:da:5b:
23:09:3c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org