Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/b277a8f27373f4b8deeeac14b869a3ed843c5b6e.roa
File: b277a8f27373f4b8deeeac14b869a3ed843c5b6e.roa (raw, json)
Hash identifier: t6ocX/wDx7sKzIWeZmjGyOWwZqk38dI/X/L7UmO9F4U=
Subject key identifier: CC:EF:56:3C:85:05:04:59:41:48:AC:81:5E:99:C8:7C:B4:79:20:52
Certificate issuer: /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial: 174260
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/b277a8f27373f4b8deeeac14b869a3ed843c5b6e.roa
Signing time: Fri 06 May 2022 21:46:47 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 32098
IP address blocks: 201.174.1.0/24 maxlen: 24
201.174.105.0/24 maxlen: 24
201.174.107.0/24 maxlen: 24
201.174.108.0/23 maxlen: 24
201.174.111.0/24 maxlen: 24
201.174.113.0/24 maxlen: 24
201.174.116.0/24 maxlen: 24
201.174.119.0/24 maxlen: 24
201.174.121.0/24 maxlen: 24
201.174.122.0/24 maxlen: 24
201.174.128.0/18 maxlen: 24
201.174.13.0/24 maxlen: 24
201.174.14.0/23 maxlen: 24
201.174.2.0/24 maxlen: 24
201.174.219.0/24 maxlen: 24
201.174.224.0/23 maxlen: 24
201.174.226.0/23 maxlen: 23
201.174.228.0/22 maxlen: 24
201.174.232.0/21 maxlen: 21
201.174.240.0/21 maxlen: 24
201.174.248.0/23 maxlen: 24
201.174.250.0/24 maxlen: 24
201.174.252.0/23 maxlen: 24
201.174.254.0/24 maxlen: 24
201.174.220.0/24 maxlen: 24
201.174.27.0/24 maxlen: 24
201.174.34.0/24 maxlen: 24
201.174.36.0/24 maxlen: 24
201.174.42.0/24 maxlen: 24
201.174.50.0/24 maxlen: 24
201.174.53.0/24 maxlen: 24
201.174.54.0/23 maxlen: 24
201.174.56.0/24 maxlen: 24
201.174.59.0/24 maxlen: 24
201.174.6.0/24 maxlen: 24
201.174.62.0/24 maxlen: 24
201.174.69.0/24 maxlen: 24
201.174.70.0/23 maxlen: 24
201.174.72.0/24 maxlen: 24
201.174.75.0/24 maxlen: 24
201.174.76.0/22 maxlen: 24
201.174.8.0/24 maxlen: 24
201.174.82.0/24 maxlen: 24
201.174.84.0/23 maxlen: 24
201.174.86.0/24 maxlen: 24
201.174.88.0/22 maxlen: 24
201.174.92.0/22 maxlen: 24
201.174.99.0/24 maxlen: 24
201.174.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1524320 (0x174260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=b277a8f27373f4b8deeeac14b869a3ed843c5b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8b:5d:9a:70:6c:52:bb:3e:d0:9f:3f:b0:2a:
69:0f:cf:85:b5:a9:a3:13:56:4d:9c:5c:3e:01:7b:
ae:fa:a5:67:3c:21:ae:1e:2b:ec:b8:d7:70:6b:c2:
83:b4:0d:03:a0:93:32:dd:f5:1b:f7:80:af:42:ec:
c8:05:15:62:30:75:f6:9f:64:7e:53:51:a7:cf:4f:
0f:64:ba:f5:dc:89:34:93:4d:b9:2a:db:12:70:75:
6c:1a:13:e6:2e:30:11:1c:87:1d:69:1c:fd:b3:44:
16:65:8e:32:ad:9c:af:34:c3:ab:ac:2d:1f:69:a8:
c7:82:95:b5:11:81:22:de:c1:77:d8:ca:b9:3c:15:
55:be:66:ea:95:cf:50:25:d0:44:7f:38:67:60:24:
2e:84:95:45:60:4c:ae:8b:de:00:74:7e:80:85:4b:
e4:21:7e:41:c1:f4:26:1a:97:55:88:02:80:d4:97:
d7:6d:45:d8:cf:8c:43:95:2b:03:11:0c:d8:67:d1:
f6:f6:49:fd:35:9e:d7:7e:3c:64:a5:b0:38:2e:01:
b5:04:fc:02:02:35:6a:9f:43:f9:6a:c9:24:ba:34:
76:c2:83:f5:d5:68:9b:da:b6:20:82:27:cf:a5:c3:
0f:93:cd:c5:c8:d0:29:f5:8a:02:6f:c4:e6:bd:47:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EF:56:3C:85:05:04:59:41:48:AC:81:5E:99:C8:7C:B4:79:20:52
X509v3 Authority Key Identifier:
keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/b277a8f27373f4b8deeeac14b869a3ed843c5b6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.174.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:86:4c:80:cb:9e:aa:ac:15:2b:66:e5:3d:36:00:1c:ba:bc:
a7:e4:43:96:dd:0c:0e:a2:cb:19:ce:f8:47:9d:50:58:2b:8f:
bd:25:55:38:97:67:c4:04:f5:25:53:9b:3a:11:a4:f2:bc:c8:
d0:0d:bd:68:a1:06:e3:ea:a2:23:cc:36:9c:d1:2b:6e:a1:69:
a4:94:7d:8d:f0:44:e3:f2:f7:b2:87:ac:80:a6:16:c2:37:4f:
36:a9:e4:17:df:92:27:af:4c:8e:79:1c:ac:91:17:06:38:75:
9d:08:6e:68:65:65:01:1b:b0:ca:e3:8d:38:9f:e3:bb:aa:43:
05:44:84:3b:88:0e:55:91:19:c7:30:f2:2b:a3:20:b1:b0:c1:
a6:68:df:66:52:f6:9a:8d:a5:e7:cd:7c:73:f4:12:10:cd:75:
50:29:57:43:72:62:6e:68:0c:7d:50:f0:2f:d1:3a:eb:a2:b9:
6a:d5:de:b3:cf:9a:01:5d:79:cf:a2:da:be:18:75:d8:34:1e:
49:88:ac:83:77:05:8d:59:9a:01:66:c0:0f:d1:14:05:d4:d2:
a5:9a:6a:86:a4:d6:d1:7a:ca:7c:82:38:67:a2:8a:fe:8b:17:
7d:84:19:47:9f:40:01:b6:af:4a:af:8b:60:38:3c:06:7b:66:
84:21:93:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-ams.rpki-client.org