Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6684fedf-05a2-478e-bd9d-40c5d454a6bd/632ab7c8dd9230832979b407f40b9926c13ad1a0.roa
File: 632ab7c8dd9230832979b407f40b9926c13ad1a0.roa (raw, json)
Hash identifier: 9tzZn949xDTd+eOL2CQczH31BtkzMK3iXYC22iZc4K4=
Subject key identifier: 16:74:6D:D6:B0:1A:C1:48:C0:09:93:2B:1E:95:7F:43:42:52:0F:B0
Certificate issuer: /CN=cbd944bf8c1af6b82a2220e086ccf759b7b6767c
Certificate serial: 045B
Authority key identifier: CE:F3:61:FB:73:DE:9F:AF:29:D0:CF:9F:B7:C5:75:C8:AC:B4:41:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbd944bf8c1af6b82a2220e086ccf759b7b6767c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6684fedf-05a2-478e-bd9d-40c5d454a6bd/632ab7c8dd9230832979b407f40b9926c13ad1a0.roa
Signing time: Tue 31 Aug 2021 01:51:38 +0000
ROA not before: Mon 30 Aug 2021 03:00:00 +0000
ROA not after: Wed 30 Aug 2023 03:00:00 +0000
asID: 52485
IP address blocks: 132.255.132.0/22 maxlen: 22
138.122.192.0/22 maxlen: 22
168.90.96.0/22 maxlen: 22
168.196.236.0/22 maxlen: 22
190.123.208.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115 (0x45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd944bf8c1af6b82a2220e086ccf759b7b6767c
Validity
Not Before: Aug 30 03:00:00 2021 GMT
Not After : Aug 30 03:00:00 2023 GMT
Subject: CN=632ab7c8dd9230832979b407f40b9926c13ad1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:63:f9:39:08:70:d2:bd:62:d6:b9:d2:30:5b:
2e:4a:d4:c9:9a:1c:08:e9:45:dc:13:a6:54:fb:25:
55:91:43:92:e9:84:8b:b7:31:64:35:b5:14:65:6c:
53:a8:4a:bd:2a:d5:95:a3:1d:1a:27:1d:9f:a1:db:
5d:12:9e:14:24:df:78:9f:29:af:e0:49:35:89:d0:
d2:a1:9a:81:86:e5:30:ae:d3:bf:15:d0:c6:c9:ea:
ab:dd:ae:f8:22:41:d8:a8:01:b4:10:b6:76:fb:1e:
f0:10:e1:1e:93:9a:80:61:80:3b:49:0f:f0:69:f5:
d4:ee:89:57:97:8d:c1:fa:6b:32:b6:ae:32:ef:22:
7a:cb:1a:3b:d2:cd:4a:f6:4c:e4:3a:14:bd:11:af:
a9:b9:43:0d:20:82:ea:a4:e0:64:6c:13:53:7a:95:
22:5f:a8:d8:fc:4b:b3:f4:1e:a7:09:83:22:b9:a9:
05:67:38:c9:fc:d2:29:80:29:26:c4:c7:49:a2:1a:
e5:21:7e:e9:c6:da:86:fd:04:d5:e8:c1:98:65:5b:
80:2b:21:29:c9:9c:0b:70:26:95:3a:a0:09:a8:49:
a3:c4:cb:91:95:86:2b:a4:90:13:1f:90:b5:88:26:
d1:36:79:5b:eb:70:7c:fc:39:7e:c0:22:7e:3a:46:
9e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:74:6D:D6:B0:1A:C1:48:C0:09:93:2B:1E:95:7F:43:42:52:0F:B0
X509v3 Authority Key Identifier:
keyid:CE:F3:61:FB:73:DE:9F:AF:29:D0:CF:9F:B7:C5:75:C8:AC:B4:41:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbd944bf8c1af6b82a2220e086ccf759b7b6767c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6684fedf-05a2-478e-bd9d-40c5d454a6bd/632ab7c8dd9230832979b407f40b9926c13ad1a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6684fedf-05a2-478e-bd9d-40c5d454a6bd/cbd944bf8c1af6b82a2220e086ccf759b7b6767c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.132.0/22
138.122.192.0/22
168.90.96.0/22
168.196.236.0/22
190.123.208.0/20
Signature Algorithm: sha256WithRSAEncryption
55:5d:18:b3:db:ff:eb:4c:32:ed:8e:bd:13:ad:ef:95:43:17:
94:ff:68:d5:6c:18:10:ae:fe:d6:d9:6a:5a:3c:d1:1e:0e:21:
9c:9e:f6:ae:d6:c7:82:00:c6:f9:63:9b:74:62:48:34:ce:ab:
cc:bc:e9:73:30:d2:ab:85:9e:01:f4:8e:68:eb:24:e4:15:0e:
46:da:1e:7a:87:8e:28:ea:1f:33:a0:91:09:1c:65:d4:50:1d:
49:64:bc:a6:d4:e1:5f:56:95:4c:70:21:62:b2:4e:3d:6d:7c:
7d:bc:a3:fb:cd:65:ca:39:75:64:f1:74:59:e7:1f:e4:74:bf:
d1:3c:26:3d:af:b9:8d:52:92:81:51:81:87:17:ea:51:32:d4:
ba:c8:7d:76:86:8f:b1:02:85:2a:5f:4f:2b:18:37:cc:62:b9:
7f:aa:36:7e:1b:61:c8:bf:56:6b:37:5f:de:31:76:73:13:b5:
27:0d:b3:20:e9:89:cd:00:3b:d6:ff:d0:0e:04:3a:95:ea:27:
e6:6e:13:9b:5e:fb:d7:69:2a:dd:f9:31:f9:6a:11:c8:a2:fe:
62:a2:a3:db:f7:b4:93:63:29:77:a2:06:7b:67:79:c7:0f:18:
78:d3:d4:15:0e:52:64:1e:58:5e:b3:38:61:c7:6c:39:67:70:
3b:c0:d5:a4
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgICBFswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoY2Jk
OTQ0YmY4YzFhZjZiODJhMjIyMGUwODZjY2Y3NTliN2I2NzY3YzAeFw0yMTA4MzAw
MzAwMDBaFw0yMzA4MzAwMzAwMDBaMDMxMTAvBgNVBAMTKDYzMmFiN2M4ZGQ5MjMw
ODMyOTc5YjQwN2Y0MGI5OTI2YzEzYWQxYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCSY/k5CHDSvWLWudIwWy5K1MmaHAjpRdwTplT7JVWRQ5LphIu3
MWQ1tRRlbFOoSr0q1ZWjHRonHZ+h210SnhQk33ifKa/gSTWJ0NKhmoGG5TCu078V
0MbJ6qvdrvgiQdioAbQQtnb7HvAQ4R6TmoBhgDtJD/Bp9dTuiVeXjcH6azK2rjLv
InrLGjvSzUr2TOQ6FL0Rr6m5Qw0gguqk4GRsE1N6lSJfqNj8S7P0HqcJgyK5qQVn
OMn80imAKSbEx0miGuUhfunG2ob9BNXowZhlW4ArISnJnAtwJpU6oAmoSaPEy5GV
hiukkBMfkLWIJtE2eVvrcHz8OX7AIn46Rp73AgMBAAGjggJzMIICbzAdBgNVHQ4E
FgQUFnRt1rAawUjACZMrHpV/Q0JSD7AwHwYDVR0jBBgwFoAUzvNh+3Pen68p0M+f
t8V1yKy0QQwwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9jYmQ5NDRi
ZjhjMWFmNmI4MmEyMjIwZTA4NmNjZjc1OWI3YjY3NjdjLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy82Njg0ZmVkZi0wNWEyLTQ3OGUtYmQ5ZC00MGM1ZDQ1
NGE2YmQvNjMyYWI3YzhkZDkyMzA4MzI5NzliNDA3ZjQwYjk5MjZjMTNhZDFhMC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzY2ODRmZWRmLTA1YTItNDc4ZS1iZDlkLTQwYzVk
NDU0YTZiZC9jYmQ5NDRiZjhjMWFmNmI4MmEyMjIwZTA4NmNjZjc1OWI3YjY3Njdj
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgw
JjAkBAIAATAeAwQChP+EAwQCinrAAwQCqFpgAwQCqMTsAwQEvnvQMA0GCSqGSIb3
DQEBCwUAA4IBAQBVXRiz2//rTDLtjr0Tre+VQxeU/2jVbBgQrv7W2WpaPNEeDiGc
nvau1seCAMb5Y5t0Ykg0zqvMvOlzMNKrhZ4B9I5o6yTkFQ5G2h56h44o6h8zoJEJ
HGXUUB1JZLym1OFfVpVMcCFisk49bXx9vKP7zWXKOXVk8XRZ5x/kdL/RPCY9r7mN
UpKBUYGHF+pRMtS6yH12ho+xAoUqX08rGDfMYrl/qjZ+G2HIv1ZrN1/eMXZzE7Un
DbMg6YnNADvW/9AOBDqV6ifmbhObXvvXaSrd+TH5ahHIov5ioqPb97STYyl3ogZ7
Z3nHDxh409QVDlJkHlheszhhx2w5Z3A7wNWk
-----END CERTIFICATE-----
Generated at Tue Aug 29 08:59:26 2023 by rpki-client on console-ams.rpki-client.org