Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/3182e6dc4cfea33a70a76f21c70e3220a9dd7c77.roa
File: 3182e6dc4cfea33a70a76f21c70e3220a9dd7c77.roa (raw, json)
Hash identifier: x7CTxcVEctMXxzLUb3Yx+2S1GpXwZdsoAz3pcSU2SIk=
Subject key identifier: 85:06:D2:CD:10:0E:E6:26:5A:4A:D1:9E:86:B6:FA:7F:1F:1E:D6:06
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 2054AD
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/3182e6dc4cfea33a70a76f21c70e3220a9dd7c77.roa
Signing time: Sat 29 Apr 2023 14:36:44 +0000
ROA not before: Fri 28 Apr 2023 14:36:44 +0000
ROA not after: Tue 29 Apr 2025 14:36:44 +0000
asID: 269918
IP address blocks: 131.72.168.0/24 maxlen: 24
131.72.169.0/24 maxlen: 24
131.72.170.0/24 maxlen: 24
131.72.171.0/24 maxlen: 24
131.72.168.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2118829 (0x2054ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Apr 28 14:36:44 2023 GMT
Not After : Apr 29 14:36:44 2025 GMT
Subject: CN=3182e6dc4cfea33a70a76f21c70e3220a9dd7c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7f:e3:b1:93:09:29:f1:18:d0:55:8c:18:62:
38:01:60:fa:59:90:13:63:a7:f5:6d:30:51:f2:1b:
b9:86:9f:b3:84:60:51:58:ce:2f:47:3e:99:22:31:
a4:37:36:ca:33:20:78:c5:90:06:63:9d:68:c3:69:
2c:bb:af:ee:56:05:f6:3f:cf:5a:a3:a3:7f:82:f3:
38:dc:a6:2d:fb:7b:a5:8b:37:f8:19:74:0e:26:77:
71:c6:45:ac:34:44:f8:c9:ee:56:90:53:4c:c6:c7:
1d:53:34:26:7a:63:4d:68:ad:ea:e1:ef:fb:d5:28:
86:58:c3:08:7b:68:a4:f6:28:f1:4f:14:74:ef:a7:
ae:14:cc:a8:7e:25:11:09:33:6b:5a:b7:00:bd:76:
7c:96:45:1e:14:34:74:ad:b7:59:65:96:34:01:4e:
8c:27:e0:93:96:14:e2:ab:5c:55:e9:26:62:a2:0d:
0f:7d:5c:51:62:58:4a:6b:44:4f:43:59:ff:dd:e1:
2d:d1:bb:42:6a:ff:74:ae:ea:f5:67:8c:7a:5d:44:
80:3c:3d:29:c6:99:df:d4:da:04:d8:b4:0f:40:78:
90:55:d4:1b:a6:20:37:5d:72:79:03:e2:2c:f3:8f:
e2:44:ec:47:32:d3:9c:18:ec:fb:37:9b:7f:14:95:
6c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:06:D2:CD:10:0E:E6:26:5A:4A:D1:9E:86:B6:FA:7F:1F:1E:D6:06
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/3182e6dc4cfea33a70a76f21c70e3220a9dd7c77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:34:38:20:81:ff:b7:75:b6:14:b9:70:b1:11:ad:ba:3a:9d:
ea:f0:ad:67:38:af:cb:fa:99:22:1c:45:96:6b:37:92:8e:8d:
84:d0:91:82:77:c2:0d:74:0c:76:15:3a:88:e9:c8:69:a3:66:
18:be:ba:14:ab:3b:2f:dd:01:d8:9a:8d:9c:28:12:b1:92:53:
b7:c4:0e:e1:61:ba:f4:12:19:70:03:33:33:11:a9:75:e9:ae:
42:3f:c9:db:00:09:a3:2e:03:c5:d0:e4:01:32:0a:a5:3d:bd:
5f:8d:56:ab:eb:cb:da:59:a9:60:fd:52:28:16:2e:be:e4:eb:
83:da:f8:e2:7f:db:08:13:d0:0c:09:f1:68:b1:0c:0b:ed:16:
fb:aa:d7:2c:a1:98:2a:4c:ba:9a:48:63:14:5c:fd:49:5d:3f:
d1:d3:34:4b:d1:0a:44:44:c2:13:be:89:4c:c5:7a:86:3f:6e:
7e:55:ad:c3:83:87:cc:a1:72:3d:33:c2:ea:84:68:ee:34:c1:
8a:9b:32:38:f7:ed:6c:22:f1:a8:e4:2c:d4:3f:e1:e1:f5:bb:
ca:68:07:d7:d4:97:68:9e:2e:ca:35:97:f8:12:ff:23:ac:6f:
3a:28:01:bd:c8:f2:12:97:40:67:55:80:6e:97:e3:a7:1e:38:
1c:26:b0:81
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIFStMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM0
MjY4N2JjZWJkMjdkNmZkNjhmYzBmOTVhMThmZDhhZjhiNDM2YmIwHhcNMjMwNDI4
MTQzNjQ0WhcNMjUwNDI5MTQzNjQ0WjAzMTEwLwYDVQQDEygzMTgyZTZkYzRjZmVh
MzNhNzBhNzZmMjFjNzBlMzIyMGE5ZGQ3Yzc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAin/jsZMJKfEY0FWMGGI4AWD6WZATY6f1bTBR8hu5hp+zhGBR
WM4vRz6ZIjGkNzbKMyB4xZAGY51ow2ksu6/uVgX2P89ao6N/gvM43KYt+3ulizf4
GXQOJndxxkWsNET4ye5WkFNMxscdUzQmemNNaK3q4e/71SiGWMMIe2ik9ijxTxR0
76euFMyofiURCTNrWrcAvXZ8lkUeFDR0rbdZZZY0AU6MJ+CTlhTiq1xV6SZiog0P
fVxRYlhKa0RPQ1n/3eEt0btCav90rur1Z4x6XUSAPD0pxpnf1NoE2LQPQHiQVdQb
piA3XXJ5A+Is84/iROxHMtOcGOz7N5t/FJVsUwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIUG0s0QDuYmWkrRnoa2+n8fHtYGMB8GA1UdIwQYMBaAFL4+q3oQa0Cw9kKP
S3ATUXycZmTgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzQyNjg3
YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZiYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTAxMzQ1NjUtOWYzYy00OWIxLWFhZjYtZGZmMmVh
MzE0NmZlLzMxODJlNmRjNGNmZWEzM2E3MGE3NmYyMWM3MGUzMjIwYTlkZDdjNzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMDEzNDU2NS05ZjNjLTQ5YjEtYWFmNi1kZmYy
ZWEzMTQ2ZmUvYzQyNjg3YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoNIqDANBgkqhkiG9w0BAQsFAAOCAQEAXTQ4IIH/t3W2FLlw
sRGtujqd6vCtZzivy/qZIhxFlms3ko6NhNCRgnfCDXQMdhU6iOnIaaNmGL66FKs7
L90B2JqNnCgSsZJTt8QO4WG69BIZcAMzMxGpdemuQj/J2wAJoy4DxdDkATIKpT29
X41Wq+vL2lmpYP1SKBYuvuTrg9r44n/bCBPQDAnxaLEMC+0W+6rXLKGYKky6mkhj
FFz9SV0/0dM0S9EKRETCE76JTMV6hj9uflWtw4OHzKFyPTPC6oRo7jTBipsyOPft
bCLxqOQs1D/h4fW7ymgH19SXaJ4uyjWX+BL/I6xvOigBvcjyEpdAZ1WAbpfjpx44
HCawgQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org