Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/5cb2adf6a6f38ae21cb88a0abaf0facbf4a16a8e.roa
File: 5cb2adf6a6f38ae21cb88a0abaf0facbf4a16a8e.roa (raw, json)
Hash identifier: stvkvyuSi+ueVa1Vm9w89KTJtU2VDNjoRb/GI3Oud40=
Subject key identifier: B5:62:AD:C0:88:0C:6F:ED:A2:1E:77:3A:F5:A1:43:03:60:38:3E:3B
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 13556C
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/5cb2adf6a6f38ae21cb88a0abaf0facbf4a16a8e.roa
Signing time: Thu 29 Apr 2021 14:41:46 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 10481
IP address blocks: 201.213.0.0/16 maxlen: 24
152.168.0.0/14 maxlen: 24
170.150.196.0/22 maxlen: 24
170.231.136.0/22 maxlen: 24
181.0.0.0/12 maxlen: 24
181.164.0.0/14 maxlen: 24
181.168.0.0/14 maxlen: 24
181.228.0.0/14 maxlen: 24
181.230.0.0/15 maxlen: 24
181.28.0.0/14 maxlen: 24
181.80.0.0/12 maxlen: 24
181.96.0.0/12 maxlen: 24
186.108.0.0/14 maxlen: 24
186.124.0.0/14 maxlen: 24
186.126.0.0/15 maxlen: 24
186.136.0.0/14 maxlen: 24
186.136.0.0/15 maxlen: 24
186.138.0.0/15 maxlen: 24
186.152.0.0/15 maxlen: 24
190.136.0.0/14 maxlen: 24
190.137.0.0/16 maxlen: 24
190.138.0.0/15 maxlen: 24
190.16.0.0/14 maxlen: 24
190.16.0.0/16 maxlen: 24
190.17.0.0/16 maxlen: 24
190.18.0.0/15 maxlen: 24
190.188.0.0/14 maxlen: 24
190.188.0.0/15 maxlen: 24
190.190.0.0/15 maxlen: 24
190.192.0.0/14 maxlen: 24
190.192.0.0/15 maxlen: 24
190.194.0.0/15 maxlen: 24
190.224.0.0/13 maxlen: 24
190.226.0.0/15 maxlen: 24
190.228.0.0/14 maxlen: 24
190.244.0.0/14 maxlen: 24
190.244.0.0/15 maxlen: 24
190.246.0.0/15 maxlen: 24
190.30.0.0/15 maxlen: 24
190.31.0.0/16 maxlen: 24
191.97.128.0/17 maxlen: 24
196.32.64.0/19 maxlen: 24
200.105.0.0/18 maxlen: 24
200.105.64.0/19 maxlen: 24
200.110.224.0/21 maxlen: 24
200.114.128.0/17 maxlen: 24
200.114.128.0/19 maxlen: 24
200.114.160.0/19 maxlen: 24
200.114.192.0/19 maxlen: 24
200.114.224.0/19 maxlen: 24
200.117.0.0/16 maxlen: 24
200.117.128.0/17 maxlen: 24
200.117.64.0/18 maxlen: 24
200.122.0.0/17 maxlen: 24
200.122.32.0/19 maxlen: 24
200.122.64.0/19 maxlen: 24
200.122.96.0/19 maxlen: 24
200.126.128.0/17 maxlen: 24
200.126.128.0/19 maxlen: 24
200.126.160.0/19 maxlen: 24
200.126.192.0/18 maxlen: 24
200.126.192.0/19 maxlen: 24
200.126.224.0/19 maxlen: 24
200.127.0.0/16 maxlen: 24
200.127.128.0/17 maxlen: 24
200.3.32.0/19 maxlen: 24
200.3.64.0/19 maxlen: 24
200.32.0.0/19 maxlen: 24
200.42.0.0/17 maxlen: 24
200.42.128.0/19 maxlen: 24
200.43.0.0/16 maxlen: 24
200.45.0.0/16 maxlen: 24
200.49.128.0/19 maxlen: 24
200.49.96.0/20 maxlen: 24
200.55.64.0/18 maxlen: 24
200.55.64.0/19 maxlen: 24
200.55.96.0/19 maxlen: 24
200.61.192.0/19 maxlen: 24
200.63.0.0/19 maxlen: 24
200.71.224.0/20 maxlen: 24
200.73.128.0/18 maxlen: 24
200.80.64.0/20 maxlen: 24
200.82.0.0/17 maxlen: 24
200.82.64.0/18 maxlen: 24
200.89.128.0/18 maxlen: 24
200.89.128.0/19 maxlen: 24
200.89.160.0/19 maxlen: 24
66.60.0.0/18 maxlen: 24
201.212.0.0/15 maxlen: 24
201.212.128.0/17 maxlen: 24
201.231.0.0/16 maxlen: 24
201.231.0.0/17 maxlen: 24
201.231.128.0/17 maxlen: 24
201.235.0.0/16 maxlen: 24
201.235.0.0/17 maxlen: 24
201.235.128.0/17 maxlen: 24
201.252.0.0/15 maxlen: 24
201.253.0.0/16 maxlen: 24
24.232.0.0/16 maxlen: 24
2800:2000::/20 maxlen: 20
2800:2000::/20 maxlen: 48
2800:b000::/32 maxlen: 48
2803:da80::/32 maxlen: 48
2001:13d0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1267052 (0x13556c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=5cb2adf6a6f38ae21cb88a0abaf0facbf4a16a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:82:d9:8f:f9:93:05:60:35:2d:b4:79:8f:5b:
2b:d7:27:25:a8:04:48:13:4f:eb:f3:48:7c:89:f7:
3c:21:28:5d:f6:df:b0:d0:69:aa:22:ff:3a:74:d0:
4e:cc:d4:fa:7e:88:3e:33:e6:d5:b2:a1:95:e0:44:
cd:44:3e:41:75:6d:f0:80:0f:78:0d:11:5d:d6:37:
70:0c:f8:4a:0e:cf:18:b1:cd:0f:ec:02:64:72:07:
b5:2f:24:4d:84:bf:29:75:96:35:29:ca:ae:d1:1a:
ba:4f:8b:0b:cd:f8:be:4a:c6:a0:d1:6a:fa:d0:5f:
b8:3e:14:76:db:ef:66:99:35:6c:0d:00:47:5d:b8:
e5:0c:5c:ca:a5:66:80:3e:cc:bf:95:32:a1:67:96:
5a:21:e8:73:37:29:74:1b:6e:2f:b2:6f:1f:c6:24:
6f:17:2e:22:ab:db:4d:07:de:27:c0:7f:06:55:b3:
72:22:eb:7d:10:36:c0:42:d2:ca:16:90:d1:a9:0e:
a4:2b:ec:b3:3c:74:15:a6:d8:b3:ef:96:0b:8a:e0:
e5:8f:c6:5c:ad:83:e7:3c:6c:9d:e1:a4:03:80:af:
35:b5:b6:8c:f9:36:b4:e2:80:36:8c:0a:b5:c1:14:
93:93:69:29:ab:59:c0:42:a7:ce:0e:b3:dd:03:ba:
6b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:62:AD:C0:88:0C:6F:ED:A2:1E:77:3A:F5:A1:43:03:60:38:3E:3B
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/5cb2adf6a6f38ae21cb88a0abaf0facbf4a16a8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.232.0.0/16
66.60.0.0/18
152.168.0.0/14
170.150.196.0/22
170.231.136.0/22
181.0.0.0/12
181.28.0.0/14
181.80.0.0-181.111.255.255
181.164.0.0-181.171.255.255
181.228.0.0/14
186.108.0.0/14
186.124.0.0/14
186.136.0.0/14
186.152.0.0/15
190.16.0.0/14
190.30.0.0/15
190.136.0.0/14
190.188.0.0-190.195.255.255
190.224.0.0/13
190.244.0.0/14
191.97.128.0/17
196.32.64.0/19
200.3.32.0-200.3.95.255
200.32.0.0/19
200.42.0.0-200.42.159.255
200.43.0.0/16
200.45.0.0/16
200.49.96.0/20
200.49.128.0/19
200.55.64.0/18
200.61.192.0/19
200.63.0.0/19
200.71.224.0/20
200.73.128.0/18
200.80.64.0/20
200.82.0.0/17
200.89.128.0/18
200.105.0.0-200.105.95.255
200.110.224.0/21
200.114.128.0/17
200.117.0.0/16
200.122.0.0/17
200.126.128.0-200.127.255.255
201.212.0.0/15
201.231.0.0/16
201.235.0.0/16
201.252.0.0/15
IPv6:
2001:13d0::/29
2800:2000::/20
2800:b000::/32
2803:da80::/32
Signature Algorithm: sha256WithRSAEncryption
67:6f:e2:5f:aa:85:72:61:df:3a:bf:8e:4b:f6:11:c4:d8:de:
47:5f:ed:52:fc:ed:c8:c7:18:cc:f1:06:9b:de:0e:f2:aa:a9:
6f:9f:a7:d1:e4:ad:2a:a9:d8:3c:23:90:c3:1d:dc:a8:32:75:
34:83:6d:3b:31:60:5e:9e:f0:44:99:df:d8:5b:21:4b:88:fc:
f0:43:d3:48:f7:ba:24:f2:ac:9f:35:ca:1d:8c:9c:49:6a:7c:
19:95:08:45:c1:e5:0d:7e:ae:bd:93:9b:e0:f9:1c:fa:4a:1e:
62:bf:a2:45:90:27:17:5e:4b:9f:8e:60:cd:0a:df:95:66:b5:
1e:2b:c1:b0:09:b0:1f:7c:ce:b5:ba:79:35:fc:54:1a:36:69:
2c:e7:42:1f:77:d5:52:ee:88:03:dd:0d:a9:3e:ae:32:7d:46:
08:d5:7a:74:d2:7d:35:71:ff:44:ec:b4:53:94:85:0b:57:03:
b1:9d:15:41:6d:48:24:f3:3f:ee:0b:02:d6:e0:3f:ab:52:a7:
f0:fb:22:ad:53:8a:6d:b8:ef:cc:05:d8:ff:ab:c9:ff:db:32:
d9:f7:ae:79:fd:a1:00:84:c2:43:78:f3:66:8e:31:f9:75:f5:
61:49:3d:1b:1e:fc:0c:da:44:23:0d:e6:06:0d:21:0b:50:26:
32:1f:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org