Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/020d151c8695449c51d25d45e95b2f0780087841.roa
File: 020d151c8695449c51d25d45e95b2f0780087841.roa (raw, json)
Hash identifier: x6uvvcEtFmXzFdZvlSIk1+xrN5FOk1pY0q5LWQWXMrU=
Subject key identifier: 80:A9:5A:B4:9E:C9:2C:F1:14:A2:2D:12:BD:D8:0C:EA:89:D4:9A:57
Certificate issuer: /CN=2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2
Certificate serial: 13F7F5
Authority key identifier: BB:C1:0F:CE:08:EE:32:4C:B3:F2:AF:7B:92:CA:EA:DA:A7:AE:3C:F4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/020d151c8695449c51d25d45e95b2f0780087841.roa
Signing time: Wed 12 Apr 2023 08:30:01 +0000
ROA not before: Tue 11 Apr 2023 08:30:01 +0000
ROA not after: Thu 10 Apr 2025 08:30:01 +0000
asID: 263227
IP address blocks: 200.112.192.0/21 maxlen: 23
200.112.200.0/22 maxlen: 23
200.112.206.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1308661 (0x13f7f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2
Validity
Not Before: Apr 11 08:30:01 2023 GMT
Not After : Apr 10 08:30:01 2025 GMT
Subject: CN=020d151c8695449c51d25d45e95b2f0780087841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:bd:42:58:7b:0c:63:53:de:90:ec:71:12:
0a:ee:ef:48:b8:ec:9f:97:1d:9b:c1:a0:92:cf:20:
ad:6d:67:6c:22:5a:3f:5c:67:71:ad:ab:71:6d:b2:
5d:b9:f3:7e:b1:c4:63:1d:c3:b2:ee:92:4d:dc:60:
64:84:c7:e2:ce:97:71:7d:2c:e3:e5:50:44:d5:4d:
7e:1f:8d:27:f1:b3:7e:34:17:f4:02:9b:3b:07:5d:
c4:33:2f:c5:b8:eb:4a:1a:70:60:80:4c:d2:7e:41:
f1:a6:ef:ad:36:33:3a:50:6d:f7:b7:ee:0d:39:36:
db:e9:c8:55:8f:ea:77:76:aa:db:38:b5:0e:48:98:
7d:fb:b7:96:0d:07:ce:50:15:3c:49:06:55:1a:4c:
2a:05:ea:4a:fb:70:85:a7:16:4f:ef:b4:60:70:f4:
ad:8e:5c:8e:32:b9:b0:d1:33:be:fb:6a:56:d5:d7:
e0:47:b7:02:c5:5c:d5:d8:43:6a:17:21:e3:ca:1d:
1e:6e:f2:d6:e6:8a:cc:5d:57:20:2a:32:3d:d7:1b:
9a:5f:d2:b2:a5:d5:2c:b0:5d:14:2d:57:1f:1b:1d:
d6:8f:12:7f:2b:7e:fd:d0:05:83:b5:a8:fa:a6:25:
ee:2c:0d:c5:86:13:f8:97:c3:b6:92:4b:41:a8:b7:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A9:5A:B4:9E:C9:2C:F1:14:A2:2D:12:BD:D8:0C:EA:89:D4:9A:57
X509v3 Authority Key Identifier:
keyid:BB:C1:0F:CE:08:EE:32:4C:B3:F2:AF:7B:92:CA:EA:DA:A7:AE:3C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/020d151c8695449c51d25d45e95b2f0780087841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/83175c1d-f146-4aa3-aeed-7ddc301a0a3e/2f0df7f798cd35e38679d625fd3a3bc75aa6b5f2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.112.192.0-200.112.203.255
200.112.206.0/23
Signature Algorithm: sha256WithRSAEncryption
76:ed:65:56:fc:fc:68:21:c7:2b:55:de:2f:2b:80:5a:f1:65:
b4:fd:1b:bb:15:42:23:d7:46:61:ce:bb:ab:bb:1f:9d:79:f1:
43:87:dc:2b:f5:47:1d:34:8f:5d:33:46:f1:ba:71:f3:ff:a9:
f0:2c:7d:ea:ae:61:38:ec:36:18:98:be:97:9d:0e:49:0b:66:
b0:b7:98:2e:92:61:1d:fb:0f:29:2b:fa:ae:ba:62:bf:8c:8f:
62:84:3f:44:d9:52:4d:b7:35:ab:2f:7b:d6:9c:f8:01:49:f7:
ac:6c:73:bc:24:c3:ef:7b:2a:5a:6c:98:c7:52:6d:79:43:41:
43:97:09:85:d2:e2:c2:a9:83:0c:9d:07:0a:68:9d:a2:17:ea:
d4:fd:6d:80:c7:4c:de:31:e1:83:43:68:27:74:a2:fd:26:88:
6a:57:f6:34:b2:eb:4f:a6:91:e8:e1:71:cc:3d:a9:06:ed:54:
7a:e5:60:c5:bc:6a:47:45:91:2d:06:92:49:cc:19:3e:98:3c:
e1:e9:05:18:06:c1:e7:55:31:52:e4:f9:3a:26:8a:77:8c:6c:
d7:4e:ef:ea:87:b1:05:c8:bc:90:1d:81:b0:f9:cf:57:ff:d2:
df:e0:a9:17:44:92:5b:a4:2f:57:42:dd:09:1f:e6:c5:f6:77:
f7:ce:c7:3c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDE/f1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJm
MGRmN2Y3OThjZDM1ZTM4Njc5ZDYyNWZkM2EzYmM3NWFhNmI1ZjIwHhcNMjMwNDEx
MDgzMDAxWhcNMjUwNDEwMDgzMDAxWjAzMTEwLwYDVQQDEygwMjBkMTUxYzg2OTU0
NDljNTFkMjVkNDVlOTViMmYwNzgwMDg3ODQxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtGK9Qlh7DGNT3pDscRIK7u9IuOyflx2bwaCSzyCtbWdsIlo/
XGdxratxbbJdufN+scRjHcOy7pJN3GBkhMfizpdxfSzj5VBE1U1+H40n8bN+NBf0
Aps7B13EMy/FuOtKGnBggEzSfkHxpu+tNjM6UG33t+4NOTbb6chVj+p3dqrbOLUO
SJh9+7eWDQfOUBU8SQZVGkwqBepK+3CFpxZP77RgcPStjlyOMrmw0TO++2pW1dfg
R7cCxVzV2ENqFyHjyh0ebvLW5orMXVcgKjI91xuaX9KypdUssF0ULVcfGx3WjxJ/
K3790AWDtaj6piXuLA3FhhP4l8O2kktBqLcjQwIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFICpWrSeySzxFKItEr3YDOqJ1JpXMB8GA1UdIwQYMBaAFLvBD84I7jJMs/Kv
e5LK6tqnrjz0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmYwZGY3
Zjc5OGNkMzVlMzg2NzlkNjI1ZmQzYTNiYzc1YWE2YjVmMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODMxNzVjMWQtZjE0Ni00YWEzLWFlZWQtN2RkYzMw
MWEwYTNlLzAyMGQxNTFjODY5NTQ0OWM1MWQyNWQ0NWU5NWIyZjA3ODAwODc4NDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MzE3NWMxZC1mMTQ2LTRhYTMtYWVlZC03ZGRj
MzAxYTBhM2UvMmYwZGY3Zjc5OGNkMzVlMzg2NzlkNjI1ZmQzYTNiYzc1YWE2YjVm
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFDAMAwQGyHDAAwQCyHDIAwQByHDOMA0GCSqGSIb3DQEBCwUAA4IB
AQB27WVW/PxoIccrVd4vK4Ba8WW0/Ru7FUIj10Zhzrurux+defFDh9wr9UcdNI9d
M0bxunHz/6nwLH3qrmE47DYYmL6XnQ5JC2awt5gukmEd+w8pK/quumK/jI9ihD9E
2VJNtzWrL3vWnPgBSfesbHO8JMPveypabJjHUm15Q0FDlwmF0uLCqYMMnQcKaJ2i
F+rU/W2Ax0zeMeGDQ2gndKL9JohqV/Y0sutPppHo4XHMPakG7VR65WDFvGpHRZEt
BpJJzBk+mDzh6QUYBsHnVTFS5Pk6Jop3jGzXTu/qh7EFyLyQHYGw+c9X/9Lf4KkX
RJJbpC9XQt0JH+bF9nf3zsc8
-----END CERTIFICATE-----
Generated at Mon Aug 14 16:23:48 2023 by rpki-client on console-fra.rpki-client.org