Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/b973873791106ce2f819701f58ea19c3d342882c.roa
File: b973873791106ce2f819701f58ea19c3d342882c.roa (raw, json)
Hash identifier: p2VfK2hl2keSLjcMSjyM+WW0ClHG14brbmtQQwzDn9w=
Subject key identifier: 92:43:0E:F7:EF:BF:66:D2:C6:E6:98:A8:25:F7:84:C5:EC:EF:9F:0B
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 1FED45
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/b973873791106ce2f819701f58ea19c3d342882c.roa
Signing time: Tue 25 Apr 2023 02:02:09 +0000
ROA not before: Mon 24 Apr 2023 02:02:09 +0000
ROA not after: Fri 25 Apr 2025 02:02:09 +0000
asID: 269918
IP address blocks: 131.72.168.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092357 (0x1fed45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Apr 24 02:02:09 2023 GMT
Not After : Apr 25 02:02:09 2025 GMT
Subject: CN=b973873791106ce2f819701f58ea19c3d342882c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:f5:3b:5e:ee:73:14:34:ab:a9:2b:b3:4a:
10:13:3d:7e:2d:66:f0:d6:64:51:98:e0:29:e9:8e:
f2:6e:8e:62:c7:fc:24:a1:61:09:ac:96:91:b4:10:
50:09:23:c6:70:e6:82:f3:f1:64:4b:36:c7:eb:14:
8d:18:c3:40:e5:7a:6e:71:dc:b8:96:b5:3d:bc:3e:
38:11:29:d1:ae:ed:8e:61:b8:b8:bc:a2:76:4e:0f:
e2:96:e8:28:b2:f7:13:9b:b2:64:d0:e3:4c:df:c8:
af:f7:81:0e:82:88:56:48:4d:ef:15:55:d1:65:5a:
d0:aa:00:80:c8:32:ff:66:a8:70:15:5b:11:40:76:
b1:0a:68:cc:e1:95:73:6e:c6:95:80:3c:1f:b7:f0:
32:fa:dc:d4:bd:c7:84:f3:23:53:6e:a1:83:e8:f3:
9a:eb:f0:d3:48:9d:24:34:a4:65:af:cb:fd:ed:28:
c3:77:b6:f1:0a:d5:0f:69:05:7c:de:dd:09:3e:0d:
dd:42:3b:30:7d:25:11:06:25:63:b2:24:db:4c:a2:
04:7c:48:c9:e0:5f:0f:cf:a7:5c:e8:0d:45:0e:d8:
74:b2:cc:16:b8:51:18:2a:d5:90:ce:97:14:48:8d:
f2:84:30:e2:37:9b:87:20:2e:bd:fc:74:c5:4b:79:
12:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:43:0E:F7:EF:BF:66:D2:C6:E6:98:A8:25:F7:84:C5:EC:EF:9F:0B
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/b973873791106ce2f819701f58ea19c3d342882c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:dc:b8:9d:a2:10:ea:52:80:54:ea:35:c7:63:a3:46:6f:bf:
b0:b7:5c:78:e5:99:72:da:e0:8c:2b:a2:1c:19:d9:70:2b:4b:
33:e7:80:03:27:56:96:a3:3e:82:4e:81:e8:f3:a3:93:52:50:
31:0b:e0:7f:4d:c5:8d:9b:dd:30:4a:3b:00:7b:69:4c:40:ef:
83:f5:3f:5d:5d:fd:c7:bf:a5:64:56:73:f0:35:31:ad:b8:1d:
41:ef:b5:84:00:d0:c3:12:61:71:a9:d8:5e:3c:eb:ed:73:7c:
f7:8f:24:d5:e0:1b:11:da:e0:15:98:4d:ed:c2:e4:dc:2c:8e:
0a:64:39:2d:ae:f0:7d:ef:d1:ad:0c:fd:76:6c:e5:c3:a5:40:
f6:3d:a5:50:db:90:97:ca:c6:d3:4c:63:55:27:ae:e6:2b:32:
21:e7:15:9f:68:42:68:b0:30:d6:44:ea:6a:51:e3:2a:9f:25:
be:ec:57:f7:98:94:ea:5a:1f:ca:e1:09:a2:06:50:5e:03:f1:
e9:69:83:ca:73:7b:d6:cf:23:fc:e1:8f:9a:be:ff:55:d3:40:
75:53:f0:39:ce:04:c2:fa:92:3a:73:e0:66:f6:54:4b:b5:0c:
b3:67:f9:de:30:cc:08:f5:c6:cf:c0:3d:1f:fc:cf:1d:7c:3d:
0b:1a:3c:1c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDH+1FMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM0
MjY4N2JjZWJkMjdkNmZkNjhmYzBmOTVhMThmZDhhZjhiNDM2YmIwHhcNMjMwNDI0
MDIwMjA5WhcNMjUwNDI1MDIwMjA5WjAzMTEwLwYDVQQDEyhiOTczODczNzkxMTA2
Y2UyZjgxOTcwMWY1OGVhMTljM2QzNDI4ODJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4BL1O17ucxQ0q6krs0oQEz1+LWbw1mRRmOAp6Y7ybo5ix/wk
oWEJrJaRtBBQCSPGcOaC8/FkSzbH6xSNGMNA5Xpucdy4lrU9vD44ESnRru2OYbi4
vKJ2Tg/ilugosvcTm7Jk0ONM38iv94EOgohWSE3vFVXRZVrQqgCAyDL/ZqhwFVsR
QHaxCmjM4ZVzbsaVgDwft/Ay+tzUvceE8yNTbqGD6POa6/DTSJ0kNKRlr8v97SjD
d7bxCtUPaQV83t0JPg3dQjswfSURBiVjsiTbTKIEfEjJ4F8Pz6dc6A1FDth0sswW
uFEYKtWQzpcUSI3yhDDiN5uHIC69/HTFS3kSHQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJJDDvfvv2bSxuaYqCX3hMXs758LMB8GA1UdIwQYMBaAFL4+q3oQa0Cw9kKP
S3ATUXycZmTgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzQyNjg3
YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZiYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTAxMzQ1NjUtOWYzYy00OWIxLWFhZjYtZGZmMmVh
MzE0NmZlL2I5NzM4NzM3OTExMDZjZTJmODE5NzAxZjU4ZWExOWMzZDM0Mjg4MmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMDEzNDU2NS05ZjNjLTQ5YjEtYWFmNi1kZmYy
ZWEzMTQ2ZmUvYzQyNjg3YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoNIqDANBgkqhkiG9w0BAQsFAAOCAQEAn9y4naIQ6lKAVOo1
x2OjRm+/sLdceOWZctrgjCuiHBnZcCtLM+eAAydWlqM+gk6B6POjk1JQMQvgf03F
jZvdMEo7AHtpTEDvg/U/XV39x7+lZFZz8DUxrbgdQe+1hADQwxJhcanYXjzr7XN8
948k1eAbEdrgFZhN7cLk3CyOCmQ5La7wfe/RrQz9dmzlw6VA9j2lUNuQl8rG00xj
VSeu5isyIecVn2hCaLAw1kTqalHjKp8lvuxX95iU6lofyuEJogZQXgPx6WmDynN7
1s8j/OGPmr7/VdNAdVPwOc4EwvqSOnPgZvZUS7UMs2f53jDMCPXGz8A9H/zPHXw9
Cxo8HA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org