Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/737a636c7fa04cdec6a9587bc6b65d7742010619.roa
File: 737a636c7fa04cdec6a9587bc6b65d7742010619.roa (raw, json)
Hash identifier: tVVEke/J2ztuKGoMVaOXU7LTix9Ff44A2sd0F1JDOAw=
Subject key identifier: 47:CA:BD:32:8A:8A:F7:92:67:0B:FE:6E:9D:AB:F0:7F:00:0B:6F:CA
Certificate issuer: /CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
Certificate serial: 1F2695
Authority key identifier: 72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/737a636c7fa04cdec6a9587bc6b65d7742010619.roa
Signing time: Fri 07 Apr 2023 08:30:01 +0000
ROA not before: Thu 06 Apr 2023 08:30:01 +0000
ROA not after: Sat 05 Apr 2025 08:30:01 +0000
asID: 21826
IP address blocks: 167.249.32.0/22 maxlen: 24
170.84.136.0/22 maxlen: 22
200.229.152.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2041493 (0x1f2695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2d0ae672567bf0e707903589365faae1ff0bbc
Validity
Not Before: Apr 6 08:30:01 2023 GMT
Not After : Apr 5 08:30:01 2025 GMT
Subject: CN=737a636c7fa04cdec6a9587bc6b65d7742010619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:88:22:ef:d4:57:61:04:ed:96:ba:10:10:
a0:d7:fb:83:68:a3:2d:03:31:39:57:5a:f5:1e:e7:
8b:6d:11:60:07:21:eb:40:4c:58:cf:f3:fb:f0:ca:
c3:a4:a5:f9:47:88:39:e0:f0:da:71:40:f6:b0:5b:
14:bb:bc:67:31:84:6d:31:fe:96:8b:3c:d0:f8:fb:
2f:1e:14:cd:bb:6f:d5:5e:98:5f:dd:55:8b:7e:b5:
e4:ad:13:48:4f:6e:be:48:e9:31:f3:62:d2:93:f2:
5c:60:89:8c:20:07:3f:16:3e:25:e7:48:f9:94:60:
e6:26:cc:85:51:e4:fe:a6:a5:d4:c7:02:c1:a4:06:
e7:0f:3b:d2:86:f9:3f:05:17:9e:6c:f6:32:8c:9d:
11:cc:63:f8:98:d8:bb:85:cc:f8:ed:46:13:49:62:
f7:79:d7:30:ac:6c:38:d3:e2:28:76:9a:6d:b0:5d:
e8:90:db:c1:da:a0:b6:14:59:76:a8:55:95:29:d9:
ad:6d:7c:10:e8:57:fd:7d:a7:2f:5f:7d:0c:72:60:
cc:9a:56:04:12:6c:27:72:1d:e3:d4:71:ee:fc:e9:
5c:5f:f5:cf:b5:49:b4:b9:f4:72:da:3a:31:e6:b2:
c7:02:cd:cf:01:18:d1:e9:1c:16:73:ef:33:93:ee:
64:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CA:BD:32:8A:8A:F7:92:67:0B:FE:6E:9D:AB:F0:7F:00:0B:6F:CA
X509v3 Authority Key Identifier:
keyid:72:63:61:20:20:8A:C6:CE:8A:0F:E5:98:7E:0E:C5:8D:74:C5:69:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef2d0ae672567bf0e707903589365faae1ff0bbc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/737a636c7fa04cdec6a9587bc6b65d7742010619.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d2fd41d-f92d-4048-be53-748543426001/ef2d0ae672567bf0e707903589365faae1ff0bbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.32.0/22
170.84.136.0/22
200.229.152.0/22
Signature Algorithm: sha256WithRSAEncryption
37:d8:67:fa:94:43:b4:d4:de:34:ff:38:99:67:97:8c:bd:41:
c1:44:f9:86:cf:ac:f0:1f:27:1e:da:d3:b3:bb:f0:2c:03:0c:
8a:34:1a:77:64:f8:f3:4a:1e:4a:71:3e:95:26:70:2b:f2:0e:
d5:d6:b7:86:2f:38:51:b4:b3:0a:94:04:f6:02:86:39:de:4c:
80:1f:42:38:fe:dc:c6:d5:f7:75:b8:45:1d:6a:7f:17:02:bc:
36:41:0b:4a:03:6a:e8:87:fb:e9:cb:88:b4:d2:ad:0e:a7:1e:
7f:e0:8a:68:da:08:60:a9:5d:ad:50:ca:80:0f:ae:57:6e:cd:
03:48:86:54:d2:fe:ce:ec:57:23:5c:f3:9e:d8:36:e8:23:6c:
aa:fa:29:17:92:c8:86:b0:d7:28:ae:1c:d3:4f:8d:73:20:0c:
60:f5:36:a3:2a:16:db:ec:a6:2c:23:93:c8:a8:65:ac:3e:4a:
06:dd:3b:0c:5a:7f:81:90:4c:2d:02:44:55:fe:8e:b7:d1:91:
05:56:71:d3:cc:91:a7:b6:25:1b:f5:d1:94:59:db:06:3c:46:
00:9d:f3:39:2d:93:99:f7:59:7f:e5:f6:d6:e4:9a:10:b9:49:
8d:7b:5c:71:49:2c:50:d7:08:e4:1c:6b:62:bc:d1:4a:93:70:
58:28:c7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org