Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/35adcd3fbdc09410479f9d3067053e1a51c76464.roa
File: 35adcd3fbdc09410479f9d3067053e1a51c76464.roa (raw, json)
Hash identifier: y65q/t/d0qK5Ehdb3HMgAEgWZng6UjLWzSjTKU+LHXk=
Subject key identifier: E4:CD:87:C4:D7:E2:67:09:47:AC:72:3A:8D:0D:D9:01:6D:2E:ED:42
Certificate issuer: /CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Certificate serial: 1F9523
Authority key identifier: 1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/35adcd3fbdc09410479f9d3067053e1a51c76464.roa
Signing time: Fri 24 Mar 2023 08:31:49 +0000
ROA not before: Thu 23 Mar 2023 08:31:49 +0000
ROA not after: Sat 22 Mar 2025 08:31:49 +0000
asID: 52314
IP address blocks: 200.124.176.0/24 maxlen: 24
200.124.177.0/24 maxlen: 24
200.124.178.0/24 maxlen: 24
200.124.179.0/24 maxlen: 24
200.124.180.0/24 maxlen: 24
200.124.181.0/24 maxlen: 24
200.124.182.0/24 maxlen: 24
200.124.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2069795 (0x1f9523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Validity
Not Before: Mar 23 08:31:49 2023 GMT
Not After : Mar 22 08:31:49 2025 GMT
Subject: CN=35adcd3fbdc09410479f9d3067053e1a51c76464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:19:0d:be:68:d8:0f:00:25:84:26:ea:d4:
c3:6a:be:6f:f5:ce:81:58:97:e8:39:16:1a:4e:4b:
19:af:da:06:1a:8c:a5:bd:8f:d4:26:d0:7a:31:36:
7e:a0:89:06:cf:4d:21:5a:5c:4d:81:2a:d3:bb:42:
10:f7:e2:a4:28:9e:68:9c:76:54:7e:0a:c2:d2:77:
1d:7d:51:96:4f:11:51:45:35:0d:9f:b8:0b:96:12:
b4:13:83:9b:2d:e9:3e:25:a3:c5:a9:a3:4f:83:3b:
c2:cd:47:fb:35:b5:e2:ff:46:61:de:3d:a0:51:04:
0d:a4:a1:17:cf:1c:40:1f:7e:0f:e4:68:f3:da:a3:
8d:0b:bb:1b:44:04:c5:e9:db:b7:6a:63:1c:95:b7:
39:9b:4c:df:c1:a5:39:f2:42:8a:f3:c8:95:b7:a6:
93:06:fd:5e:ff:35:22:26:0a:01:5d:7d:d6:dd:91:
20:65:96:ff:b5:e6:a2:93:b0:ff:a5:80:9f:8c:36:
5b:44:5d:30:42:9e:df:0f:73:e9:03:58:6e:16:a8:
c6:0b:16:ee:7b:74:32:04:67:7d:f8:97:d5:1b:ab:
d8:96:b9:02:5e:eb:6b:e8:91:2b:72:0a:7b:59:95:
43:6e:1a:1e:f4:c3:19:24:ae:29:9f:9b:a2:2f:20:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CD:87:C4:D7:E2:67:09:47:AC:72:3A:8D:0D:D9:01:6D:2E:ED:42
X509v3 Authority Key Identifier:
keyid:1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/35adcd3fbdc09410479f9d3067053e1a51c76464.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.124.176.0/21
Signature Algorithm: sha256WithRSAEncryption
32:5f:b6:f8:be:0e:79:71:06:30:67:58:f6:59:e6:21:b8:01:
7f:e1:eb:8e:97:ca:5c:77:42:b9:c0:80:5f:95:8a:17:4d:e8:
60:40:7c:d7:d6:7b:99:5a:a0:71:0f:f3:9b:48:05:85:18:a8:
46:65:52:67:82:8f:5f:91:10:c1:c0:09:27:57:70:e4:ee:e0:
98:cc:ff:82:98:0d:ec:96:11:6f:37:bb:57:57:8b:ad:d9:c8:
30:e3:73:11:a3:7d:4a:ef:d8:00:1d:26:d9:bc:51:d8:d8:2b:
ca:8e:d0:04:9b:a6:46:64:a5:e5:cf:93:4b:7d:c8:02:a6:be:
93:53:b5:bc:ef:d3:76:30:71:d7:f4:02:f5:ef:5c:35:c8:d4:
c6:2b:27:b5:c2:c0:c5:5c:8c:50:dd:1b:44:ab:d8:ab:2f:dc:
60:4e:e9:17:f4:d4:03:1a:43:1f:df:d7:7e:dd:5b:bf:20:45:
76:f3:af:5c:4b:f6:2e:04:7b:33:83:f1:8f:be:bc:42:42:9f:
a0:96:9a:f2:86:9e:fe:ca:ff:a8:a3:e8:51:eb:33:20:d4:a2:
7b:3b:5c:8e:74:67:82:14:95:ae:40:17:72:cc:c4:71:e7:2a:
1b:d7:38:c5:02:65:0b:af:1a:b4:65:e3:9b:7c:e9:35:bd:d2:
a3:87:9d:41
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDH5UjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmRkNTU5YWY2YWFjMzM0OGQ3YTEwY2FmODUwOTYwYTQ0OGYxMGQwHhcNMjMwMzIz
MDgzMTQ5WhcNMjUwMzIyMDgzMTQ5WjAzMTEwLwYDVQQDEygzNWFkY2QzZmJkYzA5
NDEwNDc5ZjlkMzA2NzA1M2UxYTUxYzc2NDY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxdAZDb5o2A8AJYQm6tTDar5v9c6BWJfoORYaTksZr9oGGoyl
vY/UJtB6MTZ+oIkGz00hWlxNgSrTu0IQ9+KkKJ5onHZUfgrC0ncdfVGWTxFRRTUN
n7gLlhK0E4ObLek+JaPFqaNPgzvCzUf7NbXi/0Zh3j2gUQQNpKEXzxxAH34P5Gjz
2qONC7sbRATF6du3amMclbc5m0zfwaU58kKK88iVt6aTBv1e/zUiJgoBXX3W3ZEg
ZZb/teaik7D/pYCfjDZbRF0wQp7fD3PpA1huFqjGCxbue3QyBGd9+JfVG6vYlrkC
Xutr6JErcgp7WZVDbhoe9MMZJK4pn5uiLyA6mQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOTNh8TX4mcJR6xyOo0N2QFtLu1CMB8GA1UdIwQYMBaAFB0G69sZpzK7R7gp
S5aVAAtfSbLCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiZGQ1
NTlhZjZhYWMzMzQ4ZDdhMTBjYWY4NTA5NjBhNDQ4ZjEwZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWIyYzcwNjYtOTVjYS00NGNkLWI5YzgtYmQ5N2Q2
ZDcxOGFiLzM1YWRjZDNmYmRjMDk0MTA0NzlmOWQzMDY3MDUzZTFhNTFjNzY0NjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YjJjNzA2Ni05NWNhLTQ0Y2QtYjljOC1iZDk3
ZDZkNzE4YWIvYmZiZGQ1NTlhZjZhYWMzMzQ4ZDdhMTBjYWY4NTA5NjBhNDQ4ZjEw
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA8h8sDANBgkqhkiG9w0BAQsFAAOCAQEAMl+2+L4OeXEGMGdY
9lnmIbgBf+HrjpfKXHdCucCAX5WKF03oYEB819Z7mVqgcQ/zm0gFhRioRmVSZ4KP
X5EQwcAJJ1dw5O7gmMz/gpgN7JYRbze7V1eLrdnIMONzEaN9Su/YAB0m2bxR2Ngr
yo7QBJumRmSl5c+TS33IAqa+k1O1vO/TdjBx1/QC9e9cNcjUxisntcLAxVyMUN0b
RKvYqy/cYE7pF/TUAxpDH9/Xft1bvyBFdvOvXEv2LgR7M4Pxj768QkKfoJaa8oae
/sr/qKPoUeszINSieztcjnRnghSVrkAXcszEcecqG9c4xQJlC68atGXjm3zpNb3S
o4edQQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org