Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/3f78d3539fa01ff41e0da63e63e757dd7236c877.roa
File: 3f78d3539fa01ff41e0da63e63e757dd7236c877.roa (raw, json)
Hash identifier: rO0cizghroYQU3OHDi1hyJBhZP0CSzP2DLh1hsLnNtA=
Subject key identifier: C3:8E:4E:E2:D7:84:70:5C:01:FE:19:69:36:A4:DD:C0:3B:10:07:FF
Certificate issuer: /CN=40bb0835e54e95f61d1b3f21a5df4b4b8f23450a
Certificate serial: 252698
Authority key identifier: DC:DA:82:3A:0B:BC:C7:66:50:2B:14:89:E0:A3:8C:CD:4F:BE:51:C4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/3f78d3539fa01ff41e0da63e63e757dd7236c877.roa
Signing time: Mon 23 Oct 2023 02:53:16 +0000
ROA not before: Mon 23 Oct 2023 02:53:16 +0000
ROA not after: Thu 23 Oct 2025 02:53:16 +0000
asID: 269918
IP address blocks: 131.72.168.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2434712 (0x252698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bb0835e54e95f61d1b3f21a5df4b4b8f23450a
Validity
Not Before: Oct 23 02:53:16 2023 GMT
Not After : Oct 23 02:53:16 2025 GMT
Subject: CN=3f78d3539fa01ff41e0da63e63e757dd7236c877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:44:24:e0:06:b2:a7:62:3b:66:2c:18:de:
41:a6:ab:92:19:b8:a1:af:a3:3e:f4:30:a3:2a:26:
96:44:39:50:ff:c7:b7:a7:40:63:fe:e0:62:c8:39:
11:d5:06:10:04:ec:06:de:51:9e:12:24:61:2e:02:
52:ff:a2:cb:72:2e:40:1e:bb:06:41:b7:1b:f5:19:
33:4e:fa:e7:5e:8f:f8:03:d4:8c:e1:e3:87:cf:d4:
27:49:fc:e9:51:be:9c:20:ce:f1:82:43:7c:2e:1e:
7b:8f:4c:a2:33:2f:ca:73:2c:59:4c:d9:9d:45:a0:
88:b1:95:75:f5:b0:aa:34:b2:20:96:5b:ca:b6:cc:
7c:8e:f5:08:52:2c:58:77:eb:55:34:30:64:70:9a:
89:b8:c4:18:9a:54:db:c0:a9:53:79:9b:b6:90:78:
b1:fd:45:ff:04:8c:42:45:6e:11:33:59:a5:34:f1:
67:85:dc:5f:48:85:85:f4:d4:a8:e5:dc:95:c8:58:
7c:e5:13:3a:d9:8b:87:ce:15:72:f0:a7:62:8d:1a:
b0:e6:19:79:08:1b:76:7f:f1:5c:df:07:3e:a4:85:
9c:b6:d0:08:60:44:07:ce:29:65:46:95:23:86:22:
d3:a1:c3:3a:06:43:0c:58:4e:e2:bb:9c:8f:23:d5:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8E:4E:E2:D7:84:70:5C:01:FE:19:69:36:A4:DD:C0:3B:10:07:FF
X509v3 Authority Key Identifier:
keyid:DC:DA:82:3A:0B:BC:C7:66:50:2B:14:89:E0:A3:8C:CD:4F:BE:51:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/3f78d3539fa01ff41e0da63e63e757dd7236c877.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/40bb0835e54e95f61d1b3f21a5df4b4b8f23450a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:f4:da:89:66:7b:a3:49:93:2d:30:cd:f0:42:12:5b:b0:d8:
cc:07:00:cd:5d:dd:b9:e1:b7:5c:27:13:4f:cb:b0:6b:81:29:
a4:2f:5f:60:d3:d5:32:bf:e9:f3:83:7f:80:6a:ab:e4:08:b6:
6e:3a:94:91:f9:09:f5:c7:43:77:5d:86:d6:b5:57:fc:0e:21:
2d:4e:79:8d:60:ad:e0:98:8d:b6:a4:01:94:1f:88:60:d2:a2:
0f:61:25:8e:a1:94:9a:f6:ee:55:a4:3f:38:96:6f:d3:5d:de:
03:ef:5a:57:0d:42:36:ff:5a:b8:e5:65:84:87:29:9f:b1:c9:
2a:d2:e2:bf:a5:cb:3d:1c:56:0d:ba:03:a9:4f:8e:91:9b:c3:
a4:74:55:64:35:43:f3:dc:e8:ab:1e:5b:a5:a4:13:1d:72:c3:
3c:05:00:bd:59:ab:23:0b:3a:4e:e5:e4:fd:81:f2:b0:a7:5f:
50:fa:5e:cc:25:46:b0:e8:6d:df:2e:72:4a:22:f6:2e:26:b5:
1e:70:bd:7b:c2:ae:89:cc:63:df:8b:62:b6:8b:33:73:01:82:
a3:bd:1c:65:94:18:89:04:84:95:02:32:63:25:59:ed:3b:54:
96:82:f8:8b:a6:59:30:9f:3f:b1:9b:6c:4a:26:5a:29:b2:ed:
9e:3b:95:67
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJSaYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQw
YmIwODM1ZTU0ZTk1ZjYxZDFiM2YyMWE1ZGY0YjRiOGYyMzQ1MGEwHhcNMjMxMDIz
MDI1MzE2WhcNMjUxMDIzMDI1MzE2WjAzMTEwLwYDVQQDEygzZjc4ZDM1MzlmYTAx
ZmY0MWUwZGE2M2U2M2U3NTdkZDcyMzZjODc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmsZEJOAGsqdiO2YsGN5BpquSGbihr6M+9DCjKiaWRDlQ/8e3
p0Bj/uBiyDkR1QYQBOwG3lGeEiRhLgJS/6LLci5AHrsGQbcb9RkzTvrnXo/4A9SM
4eOHz9QnSfzpUb6cIM7xgkN8Lh57j0yiMy/KcyxZTNmdRaCIsZV19bCqNLIgllvK
tsx8jvUIUixYd+tVNDBkcJqJuMQYmlTbwKlTeZu2kHix/UX/BIxCRW4RM1mlNPFn
hdxfSIWF9NSo5dyVyFh85RM62YuHzhVy8KdijRqw5hl5CBt2f/Fc3wc+pIWcttAI
YEQHzillRpUjhiLTocM6BkMMWE7iu5yPI9Uz1wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMOOTuLXhHBcAf4ZaTak3cA7EAf/MB8GA1UdIwQYMBaAFNzagjoLvMdmUCsU
ieCjjM1PvlHEMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDBiYjA4
MzVlNTRlOTVmNjFkMWIzZjIxYTVkZjRiNGI4ZjIzNDUwYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTAxMzQ1NjUtOWYzYy00OWIxLWFhZjYtZGZmMmVh
MzE0NmZlLzNmNzhkMzUzOWZhMDFmZjQxZTBkYTYzZTYzZTc1N2RkNzIzNmM4Nzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMDEzNDU2NS05ZjNjLTQ5YjEtYWFmNi1kZmYy
ZWEzMTQ2ZmUvNDBiYjA4MzVlNTRlOTVmNjFkMWIzZjIxYTVkZjRiNGI4ZjIzNDUw
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoNIqDANBgkqhkiG9w0BAQsFAAOCAQEAffTaiWZ7o0mTLTDN
8EISW7DYzAcAzV3dueG3XCcTT8uwa4EppC9fYNPVMr/p84N/gGqr5Ai2bjqUkfkJ
9cdDd12G1rVX/A4hLU55jWCt4JiNtqQBlB+IYNKiD2EljqGUmvbuVaQ/OJZv013e
A+9aVw1CNv9auOVlhIcpn7HJKtLiv6XLPRxWDboDqU+OkZvDpHRVZDVD89zoqx5b
paQTHXLDPAUAvVmrIws6TuXk/YHysKdfUPpezCVGsOht3y5ySiL2Lia1HnC9e8Ku
icxj34titoszcwGCo70cZZQYiQSElQIyYyVZ7TtUloL4i6ZZMJ8/sZtsSiZaKbLt
njuVZw==
-----END CERTIFICATE-----
Generated at Fri Nov 3 16:21:41 2023 by rpki-client on console-ams.rpki-client.org