Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/a23c66433b03232861a7bd1acca8fd039bfa2dcb.roa
File: a23c66433b03232861a7bd1acca8fd039bfa2dcb.roa (raw, json)
Hash identifier: mnZxKUGcglbFKtCUq05TZHAcXSjgeUDNCcaZtjQyhgU=
Subject key identifier: 46:AF:1F:75:20:7E:8D:2B:AE:59:B9:DE:C7:E8:01:2F:50:B2:E4:D0
Certificate issuer: /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial: 1A2843
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/a23c66433b03232861a7bd1acca8fd039bfa2dcb.roa
Signing time: Wed 27 Jul 2022 22:41:32 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 06 Apr 2032 03:00:00 +0000
asID: 52347
IP address blocks: 186.177.228.0/22 maxlen: 22
186.177.232.0/21 maxlen: 21
186.177.240.0/24 maxlen: 24
190.93.40.0/22 maxlen: 24
190.93.43.0/24 maxlen: 24
190.111.56.0/24 maxlen: 24
190.111.60.0/24 maxlen: 24
190.111.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1714243 (0x1a2843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Apr 6 03:00:00 2032 GMT
Subject: CN=a23c66433b03232861a7bd1acca8fd039bfa2dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:67:df:ac:b8:a8:14:e9:76:79:d4:a4:37:
1d:8d:f0:20:27:e8:61:7b:3b:4d:26:dc:26:04:53:
5a:da:dd:a5:b0:7a:23:17:d3:1d:02:22:0a:29:50:
59:7a:8d:94:c6:57:0c:bd:f0:a6:68:29:c9:d7:2f:
ad:ed:7b:a2:f8:cb:1b:d9:dc:fe:d5:35:8c:19:4b:
53:5f:ef:c1:c9:3d:f7:b7:98:00:11:1d:67:aa:a3:
74:14:e4:ab:ff:a4:8c:88:94:72:37:17:84:a1:19:
91:cc:de:f0:53:91:b2:96:c4:44:6b:81:08:39:61:
5c:17:56:4a:01:48:62:28:f6:21:ff:6d:8f:db:0b:
70:15:0b:10:54:1a:60:30:f0:45:6c:cb:74:bb:2d:
f7:92:5a:ea:90:96:0d:8c:3f:e5:86:5a:5c:7d:1c:
9c:a5:92:8a:c4:15:87:f8:fb:46:2c:bc:af:d2:b2:
57:9e:67:9a:53:3e:e4:e9:16:47:13:3b:0f:04:b3:
0c:e8:c6:49:16:d7:2f:6a:58:55:e3:73:9b:c4:3a:
d4:db:3c:fa:0b:d7:78:69:4c:3b:f8:86:92:34:95:
fe:21:fc:3a:bd:e1:f4:25:03:f5:e4:4c:54:8b:ad:
23:58:5f:68:e1:4d:37:6b:28:a0:02:76:0e:e5:a1:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AF:1F:75:20:7E:8D:2B:AE:59:B9:DE:C7:E8:01:2F:50:B2:E4:D0
X509v3 Authority Key Identifier:
keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/a23c66433b03232861a7bd1acca8fd039bfa2dcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.177.228.0-186.177.240.255
190.93.40.0/22
190.111.56.0/24
190.111.60.0/24
190.111.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:7f:ef:f8:4e:f7:a2:27:b1:da:dd:b3:db:e9:eb:91:c4:fd:
31:97:29:af:01:96:30:61:5b:2e:cd:86:bc:23:64:21:04:38:
61:36:f7:08:fb:bf:dd:65:96:36:f5:34:53:d0:cb:a5:bf:84:
d5:f5:5b:80:99:79:59:23:3c:81:06:6d:ad:4e:62:6e:45:db:
67:23:34:73:f8:0b:1c:b2:37:78:34:f3:d7:d6:0e:ec:89:01:
c3:98:9d:d1:fb:ea:2d:57:6c:ed:4d:10:d9:77:f7:5c:9d:46:
0b:53:e9:3c:8c:7d:da:de:de:61:e9:40:c3:a4:a1:73:1b:a4:
dc:85:07:06:35:6b:ca:d7:22:10:be:ce:2d:b1:44:cb:75:33:
fc:dd:be:66:65:d3:90:db:48:9a:05:85:ee:b2:b9:1e:54:dc:
48:47:37:7d:d7:7d:01:0e:ef:95:07:ad:1b:c1:38:9d:8b:96:
a2:2c:9c:aa:5a:62:77:ee:17:fa:5a:4b:ba:fe:da:40:c5:28:
eb:86:0f:f7:4d:ca:5a:1b:c3:5f:c1:f5:bf:1b:d9:08:0c:17:
5d:6c:1a:a1:8b:ed:11:9a:f8:95:57:ea:96:2e:eb:58:6f:94:
61:1d:af:1f:54:74:72:58:4a:91:c9:b1:60:92:53:aa:5a:a2:
d4:a9:ac:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org