Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/64d6c63b9bc6bd4fd0ba0522238c60d988cf3ac0.roa
File: 64d6c63b9bc6bd4fd0ba0522238c60d988cf3ac0.roa (raw, json)
Hash identifier: HmCkX+X4iMVacPeHoiOw04a9NFwfAZ8pldCHRf4v+64=
Subject key identifier: 39:3F:7C:2F:7D:E5:0B:68:8E:33:4D:E5:EA:43:1A:85:1B:96:7E:20
Certificate issuer: /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial: 21920C
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/64d6c63b9bc6bd4fd0ba0522238c60d988cf3ac0.roa
Signing time: Mon 03 Apr 2023 15:59:20 +0000
ROA not before: Sun 02 Apr 2023 15:59:17 +0000
ROA not after: Thu 03 Apr 2025 15:59:17 +0000
asID: 28002
IP address blocks: 190.112.52.0/22 maxlen: 22
45.6.248.0/21 maxlen: 24
200.0.86.0/23 maxlen: 23
2001:13c7:7003::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200076 (0x21920c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Validity
Not Before: Apr 2 15:59:17 2023 GMT
Not After : Apr 3 15:59:17 2025 GMT
Subject: CN=64d6c63b9bc6bd4fd0ba0522238c60d988cf3ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:73:ea:00:d9:56:94:7c:08:b5:4d:32:94:
54:7c:d4:df:5a:73:c4:20:16:63:22:46:80:71:02:
43:14:b0:9f:d6:8d:e7:51:c4:83:2d:fe:ab:c6:2d:
e1:23:f7:63:b7:dd:e0:00:c4:d4:2a:0a:85:85:19:
ab:1d:c6:29:a0:03:fd:dd:13:0f:49:06:75:bd:a9:
6b:f0:18:3a:8f:50:a7:35:de:e4:ed:f5:8b:1b:1a:
03:45:ee:d7:d8:76:51:b3:e5:ef:f1:36:81:2c:be:
02:19:5f:ef:b2:24:2c:44:fb:20:fe:58:22:9b:27:
9a:0e:4d:10:7e:e2:f3:a4:69:79:b0:2c:87:c0:80:
f7:6d:e7:35:b5:9a:c7:f4:7d:21:a0:b9:02:2e:21:
49:4a:5b:59:a1:78:fb:e0:30:fd:5b:d5:ad:e4:16:
40:ea:22:74:88:48:cf:1a:f9:ef:3d:94:59:73:4e:
dc:69:e3:26:ee:a6:79:0f:fb:e5:8f:0e:2d:ff:ab:
d0:ad:b5:f3:b6:b5:7d:0d:17:7f:4d:7b:71:06:c8:
99:73:31:7e:ce:be:a8:3b:15:ab:aa:a9:55:82:43:
52:15:ee:ab:17:19:75:f0:5f:83:d4:96:8c:cd:e5:
a1:98:b2:eb:84:fa:c0:7a:36:cc:c8:69:2d:f5:8c:
cf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3F:7C:2F:7D:E5:0B:68:8E:33:4D:E5:EA:43:1A:85:1B:96:7E:20
X509v3 Authority Key Identifier:
keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/64d6c63b9bc6bd4fd0ba0522238c60d988cf3ac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.248.0/21
190.112.52.0/22
200.0.86.0/23
IPv6:
2001:13c7:7003::/48
Signature Algorithm: sha256WithRSAEncryption
73:de:15:20:f0:1f:7a:9a:94:76:d8:3f:d2:56:b3:dd:f9:f9:
05:ad:8f:f7:d7:69:2b:17:4b:81:f8:97:3d:12:e7:a2:de:bb:
46:6b:e4:79:bf:4c:3f:cb:b9:ed:c4:90:49:12:38:84:74:c3:
80:33:27:d6:31:a2:60:d6:c5:7a:17:37:ec:69:7f:cd:5d:33:
a6:3d:d4:0a:eb:78:62:b9:f2:85:88:c5:14:f9:af:c7:55:fe:
27:c3:59:58:ea:d7:65:d2:ae:12:9b:c4:58:21:3e:50:0c:48:
23:97:43:de:19:8e:c4:3f:20:cc:cc:b0:cc:23:d3:92:0f:26:
01:06:8f:e9:5f:1c:12:3d:53:2e:33:d8:e4:34:ad:d4:c7:54:
38:97:f3:67:e4:00:c4:8d:29:98:22:05:72:13:ec:80:d3:87:
bb:6a:b4:ab:02:2a:0b:70:6e:d2:78:24:cb:64:38:40:de:00:
19:c7:aa:41:b1:2a:2d:5b:bb:0b:eb:7b:ed:0b:a2:f0:71:bd:
ba:4d:02:de:28:da:dc:4e:1b:de:cb:b9:0e:80:74:6b:82:8a:
fb:ff:53:98:88:b2:e5:fd:93:d1:d1:6d:36:41:71:03:1f:00:
26:14:c6:d3:be:60:10:7e:db:37:f2:bd:51:c5:a8:23:03:72:
22:42:28:52
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIDIZIMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
ZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRjZWJiMDJmY2MyYWY4ZDIwHhcNMjMwNDAy
MTU1OTE3WhcNMjUwNDAzMTU1OTE3WjAzMTEwLwYDVQQDEyg2NGQ2YzYzYjliYzZi
ZDRmZDBiYTA1MjIyMzhjNjBkOTg4Y2YzYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnFVz6gDZVpR8CLVNMpRUfNTfWnPEIBZjIkaAcQJDFLCf1o3n
UcSDLf6rxi3hI/djt93gAMTUKgqFhRmrHcYpoAP93RMPSQZ1valr8Bg6j1CnNd7k
7fWLGxoDRe7X2HZRs+Xv8TaBLL4CGV/vsiQsRPsg/lgimyeaDk0QfuLzpGl5sCyH
wID3bec1tZrH9H0hoLkCLiFJSltZoXj74DD9W9Wt5BZA6iJ0iEjPGvnvPZRZc07c
aeMm7qZ5D/vljw4t/6vQrbXztrV9DRd/TXtxBsiZczF+zr6oOxWrqqlVgkNSFe6r
Fxl18F+D1JaMzeWhmLLrhPrAejbMyGkt9YzPkQIDAQABo4ICeDCCAnQwHQYDVR0O
BBYEFDk/fC995QtojjNN5epDGoUbln4gMB8GA1UdIwQYMBaAFH+Jf8zsEQtTeV2M
m5FVamZ66VzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJkM2I2
MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5LzY0ZDZjNjNiOWJjNmJkNGZkMGJhMDUyMjIzOGM2MGQ5ODhjZjNhYzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQt
MCswGAQCAAEwEgMEAy0G+AMEAr5wNAMEAcgAVjAPBAIAAjAJAwcAIAETx3ADMA0G
CSqGSIb3DQEBCwUAA4IBAQBz3hUg8B96mpR22D/SVrPd+fkFrY/312krF0uB+Jc9
Euei3rtGa+R5v0w/y7ntxJBJEjiEdMOAMyfWMaJg1sV6FzfsaX/NXTOmPdQK63hi
ufKFiMUU+a/HVf4nw1lY6tdl0q4Sm8RYIT5QDEgjl0PeGY7EPyDMzLDMI9OSDyYB
Bo/pXxwSPVMuM9jkNK3Ux1Q4l/Nn5ADEjSmYIgVyE+yA04e7arSrAioLcG7SeCTL
ZDhA3gAZx6pBsSotW7sL63vtC6Lwcb26TQLeKNrcThvey7kOgHRrgor7/1OYiLLl
/ZPR0W02QXEDHwAmFMbTvmAQfts38r1RxagjA3IiQihS
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org