Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/33922ab3745b56da22692b3e263cf71516156019.roa
File: 33922ab3745b56da22692b3e263cf71516156019.roa (raw, json)
Hash identifier: 7mA+WGVt0f7k60+zt9ZmvqOPoz9mb5Xx9AAt/jekEeA=
Subject key identifier: 73:A7:7A:24:59:86:75:92:AB:6C:49:14:63:B8:C8:78:57:36:ED:1B
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 1B5D04
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/33922ab3745b56da22692b3e263cf71516156019.roa
Signing time: Wed 26 Oct 2022 19:13:22 +0000
ROA not before: Tue 25 Oct 2022 19:12:17 +0000
ROA not after: Sat 26 Oct 2024 19:12:17 +0000
asID: 269918
IP address blocks: 131.72.168.0/24 maxlen: 24
131.72.169.0/24 maxlen: 24
131.72.170.0/23 maxlen: 23
131.72.168.0/22 maxlen: 22
2803:dd80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1793284 (0x1b5d04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Oct 25 19:12:17 2022 GMT
Not After : Oct 26 19:12:17 2024 GMT
Subject: CN=33922ab3745b56da22692b3e263cf71516156019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:94:7d:9e:32:35:04:0d:81:95:e0:dd:98:
22:7b:3e:e9:2b:30:89:48:1f:7b:63:4b:ee:50:88:
f4:65:16:dc:d6:65:18:a7:6a:3c:17:51:18:4d:bc:
ce:c3:44:00:58:13:1d:15:df:81:f9:4a:08:3d:22:
bb:fc:fb:18:bb:fa:84:c1:a8:56:0e:2f:2b:45:27:
ee:f1:12:5b:39:7c:76:00:f0:62:62:1a:d3:b0:6d:
19:85:48:e3:f2:d1:a3:34:12:6e:2d:48:de:4a:36:
58:df:33:b8:99:47:ec:98:8a:f3:00:64:1f:1d:e1:
5c:3a:37:56:d6:bd:ca:19:65:6b:2c:d7:ce:01:07:
65:53:75:53:e0:c7:48:18:c8:b6:12:f6:1a:f9:d9:
5d:b5:b8:4b:9c:b6:bd:f1:fe:39:02:27:77:24:72:
12:4f:bd:2a:ab:6f:0b:57:30:ee:62:39:fd:24:63:
0d:fd:6c:00:24:69:de:21:45:2e:00:9a:ce:da:59:
3c:28:7a:46:f5:bf:80:e6:43:21:7e:d7:42:be:9d:
a0:a6:be:65:dc:91:2c:fb:af:97:b9:10:c9:28:a0:
55:c7:ec:4d:58:a8:3a:6e:f1:34:e8:8e:53:f0:46:
8a:57:9b:90:9c:44:3b:25:bc:3f:4f:99:c4:13:de:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A7:7A:24:59:86:75:92:AB:6C:49:14:63:B8:C8:78:57:36:ED:1B
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/33922ab3745b56da22692b3e263cf71516156019.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
IPv6:
2803:dd80::/32
Signature Algorithm: sha256WithRSAEncryption
93:5e:0d:2c:df:87:af:56:4e:3f:7e:b2:6f:26:15:ef:b6:c0:
29:53:4f:f5:88:f8:29:ed:35:bc:d0:35:e0:55:1d:70:53:e2:
fe:e6:ec:4f:3b:c2:4a:5e:c7:83:be:23:1e:ba:8d:4e:16:84:
33:e7:22:6e:fa:3b:b4:e5:25:04:0b:4f:8a:f4:10:d0:af:4a:
55:fe:74:8b:ff:16:cd:e7:8f:c8:13:33:bf:3f:d7:71:ef:9f:
3c:17:67:c6:81:12:23:50:f0:ef:37:d8:a9:d0:df:ba:56:94:
83:e5:85:e7:97:81:ab:bd:d0:b7:25:79:12:94:15:8e:8b:cd:
76:a5:4c:99:53:f5:f3:07:4f:66:43:31:ca:34:50:e3:40:10:
d0:e2:f3:51:65:11:3f:13:f6:7e:2d:77:8f:2b:d4:16:1a:05:
e9:e9:9b:ed:6a:01:a1:4b:d1:e3:7f:29:20:70:76:39:c3:0f:
bc:41:33:e2:a0:4d:01:21:99:2d:1e:bb:4e:dc:dd:9d:ae:f3:
78:cb:a0:c1:3e:64:49:3c:97:b9:37:be:9c:d8:14:09:46:83:
a4:1e:a0:f8:12:08:7f:43:67:87:61:5a:f5:33:57:9d:e9:4f:
00:06:a5:41:0c:9e:26:ee:7b:1f:9b:ff:b8:c6:48:0e:ef:f9:
c4:f4:b3:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDG10EMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM0
MjY4N2JjZWJkMjdkNmZkNjhmYzBmOTVhMThmZDhhZjhiNDM2YmIwHhcNMjIxMDI1
MTkxMjE3WhcNMjQxMDI2MTkxMjE3WjAzMTEwLwYDVQQDEygzMzkyMmFiMzc0NWI1
NmRhMjI2OTJiM2UyNjNjZjcxNTE2MTU2MDE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAplGUfZ4yNQQNgZXg3Zgiez7pKzCJSB97Y0vuUIj0ZRbc1mUY
p2o8F1EYTbzOw0QAWBMdFd+B+UoIPSK7/PsYu/qEwahWDi8rRSfu8RJbOXx2APBi
YhrTsG0ZhUjj8tGjNBJuLUjeSjZY3zO4mUfsmIrzAGQfHeFcOjdW1r3KGWVrLNfO
AQdlU3VT4MdIGMi2EvYa+dldtbhLnLa98f45Aid3JHIST70qq28LVzDuYjn9JGMN
/WwAJGneIUUuAJrO2lk8KHpG9b+A5kMhftdCvp2gpr5l3JEs+6+XuRDJKKBVx+xN
WKg6bvE06I5T8EaKV5uQnEQ7Jbw/T5nEE942EwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFHOneiRZhnWSq2xJFGO4yHhXNu0bMB8GA1UdIwQYMBaAFL4+q3oQa0Cw9kKP
S3ATUXycZmTgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzQyNjg3
YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZiYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTAxMzQ1NjUtOWYzYy00OWIxLWFhZjYtZGZmMmVh
MzE0NmZlLzMzOTIyYWIzNzQ1YjU2ZGEyMjY5MmIzZTI2M2NmNzE1MTYxNTYwMTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMDEzNDU2NS05ZjNjLTQ5YjEtYWFmNi1kZmYy
ZWEzMTQ2ZmUvYzQyNjg3YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAoNIqDANBAIAAjAHAwUAKAPdgDANBgkqhkiG9w0BAQsFAAOC
AQEAk14NLN+Hr1ZOP36ybyYV77bAKVNP9Yj4Ke01vNA14FUdcFPi/ubsTzvCSl7H
g74jHrqNThaEM+cibvo7tOUlBAtPivQQ0K9KVf50i/8WzeePyBMzvz/Xce+fPBdn
xoESI1Dw7zfYqdDfulaUg+WF55eBq73QtyV5EpQVjovNdqVMmVP18wdPZkMxyjRQ
40AQ0OLzUWURPxP2fi13jyvUFhoF6emb7WoBoUvR438pIHB2OcMPvEEz4qBNASGZ
LR67Ttzdna7zeMugwT5kSTyXuTe+nNgUCUaDpB6g+BIIf0Nnh2Fa9TNXnelPAAal
QQyeJu57H5v/uMZIDu/5xPSzwg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org