Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/ffe6ce5c36b7eb12b9be3d0867b289a61562b994.roa
File: ffe6ce5c36b7eb12b9be3d0867b289a61562b994.roa (raw, json)
Hash identifier: Ium1vz3EoSyjqXnb/gRhTv/PgeWhX5XyhrQQY8v0dcs=
Subject key identifier: 70:58:8E:2F:BD:12:B5:99:69:60:E9:24:9E:70:8D:A0:CF:FB:58:3C
Certificate issuer: /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial: 226AC7
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/ffe6ce5c36b7eb12b9be3d0867b289a61562b994.roa
Signing time: Wed 19 Jul 2023 01:56:10 +0000
ROA not before: Tue 18 Jul 2023 01:56:10 +0000
ROA not after: Sat 19 Jul 2025 01:56:10 +0000
asID: 269918
IP address blocks: 131.72.168.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2255559 (0x226ac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Validity
Not Before: Jul 18 01:56:10 2023 GMT
Not After : Jul 19 01:56:10 2025 GMT
Subject: CN=ffe6ce5c36b7eb12b9be3d0867b289a61562b994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:f9:e5:fe:ff:43:1e:80:c0:ca:0a:92:9d:
05:5b:46:50:81:84:99:84:eb:b7:90:50:51:03:40:
a8:25:56:cf:a7:98:8e:4a:60:94:29:b4:fe:6d:31:
b0:03:a4:2c:05:aa:89:18:28:ac:f7:6f:38:ff:db:
2a:91:59:59:b5:6a:04:14:62:e4:a2:bf:7a:12:10:
c3:43:7e:51:2d:40:bd:d8:57:7c:18:7f:d3:f1:fb:
f5:ec:ca:5f:c9:22:d8:7d:c5:3a:b1:5e:95:5e:78:
20:a8:58:66:11:ef:4c:52:e1:ad:0e:10:cc:cd:4f:
43:f0:c5:c7:fa:d9:3f:f8:8f:30:19:49:83:a2:56:
73:74:f6:31:c1:10:01:c9:b6:83:ef:66:67:95:d3:
ab:a1:62:d7:ed:43:37:12:23:df:b0:44:eb:b8:da:
1f:00:0d:bb:a4:c2:a5:bc:c3:f6:5e:23:8d:72:29:
b3:65:a1:c7:b0:c3:d3:91:3a:7c:b5:ff:15:d5:3e:
e5:52:4b:77:67:ae:e1:3b:8b:ac:84:ba:34:73:5d:
8f:df:40:05:e9:f3:61:41:e9:e4:8b:72:72:7c:e9:
d5:61:48:73:7b:80:cc:c8:35:e1:5c:b1:11:3a:d5:
44:b3:27:df:3c:06:5b:6a:b9:ce:2b:d7:72:f4:a6:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:58:8E:2F:BD:12:B5:99:69:60:E9:24:9E:70:8D:A0:CF:FB:58:3C
X509v3 Authority Key Identifier:
keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/ffe6ce5c36b7eb12b9be3d0867b289a61562b994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.168.0/22
Signature Algorithm: sha256WithRSAEncryption
94:45:9c:6d:2b:d4:99:17:56:42:1f:b3:74:e8:79:2c:17:94:
13:8b:7c:e0:4b:d4:dc:09:6a:a3:f3:8b:ac:1f:69:33:74:4d:
9c:db:5c:a1:d8:0d:90:74:16:60:cb:80:6d:af:33:69:14:1d:
41:e7:7a:62:ee:7e:e6:66:36:1f:d8:a5:7d:20:ce:44:01:34:
d0:96:68:d1:8a:b1:cd:50:a7:f3:b2:3a:5f:99:33:07:86:09:
fe:72:5b:55:69:71:81:37:d4:5e:28:94:91:53:b2:b7:bc:19:
9f:a6:c6:a6:4d:45:d8:bd:54:4a:53:85:82:84:37:38:20:ce:
43:bb:b4:e8:09:84:98:a1:ba:3a:bb:8b:b4:2a:2a:1c:e4:0f:
15:20:ab:53:26:5d:80:fb:31:41:ad:47:15:7d:e1:7c:fa:27:
7a:93:24:1a:6d:c5:74:e0:44:d6:36:db:5f:6d:54:7d:cf:2e:
2c:81:a1:19:24:50:8e:d7:e4:8d:92:d6:02:35:d1:68:4c:e0:
96:07:e2:cf:c2:a8:ac:bf:f2:f1:58:54:58:ce:3e:71:29:93:
ea:28:65:b6:66:e0:00:87:34:1a:d4:f0:46:99:73:27:e1:25:
13:62:b0:df:0c:99:4f:34:a7:e8:55:a1:d6:07:90:3c:c3:f2:
a3:91:51:a0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDImrHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM0
MjY4N2JjZWJkMjdkNmZkNjhmYzBmOTVhMThmZDhhZjhiNDM2YmIwHhcNMjMwNzE4
MDE1NjEwWhcNMjUwNzE5MDE1NjEwWjAzMTEwLwYDVQQDEyhmZmU2Y2U1YzM2Yjdl
YjEyYjliZTNkMDg2N2IyODlhNjE1NjJiOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAouD55f7/Qx6AwMoKkp0FW0ZQgYSZhOu3kFBRA0CoJVbPp5iO
SmCUKbT+bTGwA6QsBaqJGCis9284/9sqkVlZtWoEFGLkor96EhDDQ35RLUC92Fd8
GH/T8fv17MpfySLYfcU6sV6VXnggqFhmEe9MUuGtDhDMzU9D8MXH+tk/+I8wGUmD
olZzdPYxwRABybaD72ZnldOroWLX7UM3EiPfsETruNofAA27pMKlvMP2XiONcimz
ZaHHsMPTkTp8tf8V1T7lUkt3Z67hO4ushLo0c12P30AF6fNhQenki3JyfOnVYUhz
e4DMyDXhXLEROtVEsyffPAZbarnOK9dy9KZ1zwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHBYji+9ErWZaWDpJJ5wjaDP+1g8MB8GA1UdIwQYMBaAFL4+q3oQa0Cw9kKP
S3ATUXycZmTgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzQyNjg3
YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZiYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTAxMzQ1NjUtOWYzYy00OWIxLWFhZjYtZGZmMmVh
MzE0NmZlL2ZmZTZjZTVjMzZiN2ViMTJiOWJlM2QwODY3YjI4OWE2MTU2MmI5OTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMDEzNDU2NS05ZjNjLTQ5YjEtYWFmNi1kZmYy
ZWEzMTQ2ZmUvYzQyNjg3YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoNIqDANBgkqhkiG9w0BAQsFAAOCAQEAlEWcbSvUmRdWQh+z
dOh5LBeUE4t84EvU3Alqo/OLrB9pM3RNnNtcodgNkHQWYMuAba8zaRQdQed6Yu5+
5mY2H9ilfSDORAE00JZo0YqxzVCn87I6X5kzB4YJ/nJbVWlxgTfUXiiUkVOyt7wZ
n6bGpk1F2L1USlOFgoQ3OCDOQ7u06AmEmKG6OruLtCoqHOQPFSCrUyZdgPsxQa1H
FX3hfPonepMkGm3FdOBE1jbbX21Ufc8uLIGhGSRQjtfkjZLWAjXRaEzglgfiz8Ko
rL/y8VhUWM4+cSmT6ihltmbgAIc0GtTwRplzJ+ElE2Kw3wyZTzSn6FWh1geQPMPy
o5FRoA==
-----END CERTIFICATE-----
Generated at Sun Jul 30 01:37:51 2023 by rpki-client on console-ams.rpki-client.org