Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/1d6cbd35722d2edfae76f2dc980d37aa9d172a52.roa
File: 1d6cbd35722d2edfae76f2dc980d37aa9d172a52.roa (raw, json)
Hash identifier: mHqabWsKGRy4DCvmwvshzm8jsiMSMZT3U+lrxglMCQM=
Subject key identifier: 95:CD:B2:85:57:A4:75:A7:CE:EE:68:F4:E7:43:32:A1:49:70:CD:B7
Certificate issuer: /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial: 0DDB6A
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/1d6cbd35722d2edfae76f2dc980d37aa9d172a52.roa
Signing time: Mon 18 Jul 2022 15:22:45 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 267789
IP address blocks: 161.22.38.0/24 maxlen: 24
161.22.32.0/24 maxlen: 24
2803:6680::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 908138 (0xddb6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=1d6cbd35722d2edfae76f2dc980d37aa9d172a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:7c:97:84:11:fa:e1:ed:49:76:c1:3a:53:
17:0d:08:2d:08:37:a7:d4:12:b3:1e:93:20:fe:70:
ab:48:1a:7e:a3:5d:e8:b3:90:2a:aa:a8:5e:cb:49:
7c:f2:b0:4f:47:c9:48:de:b0:84:07:15:21:b2:54:
05:e9:e6:0b:01:64:4e:af:39:a9:2f:be:68:e5:9c:
c6:e6:8b:6b:fb:92:b2:05:af:6d:fc:87:a5:bd:60:
11:5b:68:ed:ce:36:9e:e7:7e:ec:8b:74:cb:06:41:
26:cb:ee:39:3a:72:cf:4b:c0:32:c7:38:9f:67:24:
94:f2:60:c2:e7:a4:e8:cc:3a:ee:da:90:2f:b0:bf:
91:06:e4:df:1c:23:de:b9:90:5c:c2:43:e3:fe:5a:
1c:90:21:66:92:23:52:ee:ce:5c:8e:ae:17:37:0f:
df:c4:3a:57:f2:ec:04:d3:c8:fa:1b:45:1f:5f:81:
22:bc:d2:a7:16:25:a5:87:73:64:35:ab:13:90:a1:
4c:bb:08:ee:ef:5f:97:33:a4:3b:10:bb:78:79:ae:
c5:2f:fe:23:e3:0f:f9:03:95:a5:c5:cd:e1:de:4f:
50:48:36:75:88:d7:9c:5e:64:70:81:27:47:07:b0:
b1:55:ba:c1:73:06:57:54:e7:95:df:3a:cd:bf:74:
c8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CD:B2:85:57:A4:75:A7:CE:EE:68:F4:E7:43:32:A1:49:70:CD:B7
X509v3 Authority Key Identifier:
keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/1d6cbd35722d2edfae76f2dc980d37aa9d172a52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.32.0/24
161.22.38.0/24
IPv6:
2803:6680::/32
Signature Algorithm: sha256WithRSAEncryption
8c:e4:9f:1c:b4:7a:9c:14:59:d1:93:d8:3d:75:65:96:db:66:
ff:96:69:2e:1f:e2:b4:09:b6:6c:45:90:f4:d4:f3:cf:21:33:
6d:e1:cb:13:f0:a6:16:4a:c1:fb:7d:55:df:8e:47:28:77:01:
10:ad:02:58:03:bd:4b:af:53:89:f5:b9:b2:43:06:28:f7:4b:
27:e9:6b:75:0d:a4:60:bc:fa:72:a0:96:a0:3a:d1:16:a4:eb:
9d:ae:f3:3c:fb:f8:ea:4d:f4:11:15:88:74:34:82:99:57:82:
ea:de:6e:d2:79:14:5c:ce:ab:ed:53:29:07:ba:0c:5c:5b:e3:
20:c9:46:6f:41:8f:52:24:c4:28:dd:e5:dd:9c:03:3f:3d:8d:
2e:48:aa:c6:e4:10:53:5f:72:a9:95:94:e8:65:82:53:c0:52:
59:3e:aa:7c:7f:83:c0:14:98:a8:67:c8:1b:a7:b2:d9:a1:30:
9c:8e:bb:e9:19:ed:e1:dd:26:64:d2:31:5d:24:d1:d3:3e:d2:
51:50:88:a8:c3:7f:f0:ff:38:ba:0d:e5:e8:f2:87:67:01:91:
64:9d:46:86:c9:9e:22:54:5f:15:92:d9:bb:66:96:61:e9:66:
98:8a:35:26:a6:9b:94:c9:0e:9e:87:8e:1a:31:44:c2:38:3f:
8e:b5:0c:3c
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDDdtqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQw
ZjU5ZTRkMGY0ZGQ2NmQxZTgwY2I0ZmY3NmU2YWIyOTMxNzk1OTEwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygxZDZjYmQzNTcyMmQy
ZWRmYWU3NmYyZGM5ODBkMzdhYTlkMTcyYTUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnSJ8l4QR+uHtSXbBOlMXDQgtCDen1BKzHpMg/nCrSBp+o13o
s5Aqqqhey0l88rBPR8lI3rCEBxUhslQF6eYLAWROrzmpL75o5ZzG5otr+5KyBa9t
/IelvWARW2jtzjae537si3TLBkEmy+45OnLPS8AyxzifZySU8mDC56TozDru2pAv
sL+RBuTfHCPeuZBcwkPj/lockCFmkiNS7s5cjq4XNw/fxDpX8uwE08j6G0UfX4Ei
vNKnFiWlh3NkNasTkKFMuwju71+XM6Q7ELt4ea7FL/4j4w/5A5Wlxc3h3k9QSDZ1
iNecXmRwgSdHB7CxVbrBcwZXVOeV3zrNv3TI+QIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFJXNsoVXpHWnzu5o9OdDMqFJcM23MB8GA1UdIwQYMBaAFELszKz4iWvIsP8q
dGlWz1aJC8gYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDBmNTll
NGQwZjRkZDY2ZDFlODBjYjRmZjc2ZTZhYjI5MzE3OTU5MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTA1YjY4NGMtZGQwMC00ODQxLTk5MjktMWFiNzUw
OTQ2NzliLzFkNmNiZDM1NzIyZDJlZGZhZTc2ZjJkYzk4MGQzN2FhOWQxNzJhNTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMDViNjg0Yy1kZDAwLTQ4NDEtOTkyOS0xYWI3
NTA5NDY3OWIvZDBmNTllNGQwZjRkZDY2ZDFlODBjYjRmZjc2ZTZhYjI5MzE3OTU5
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAKEWIAMEAKEWJjANBAIAAjAHAwUAKANmgDANBgkqhkiG9w0B
AQsFAAOCAQEAjOSfHLR6nBRZ0ZPYPXVllttm/5ZpLh/itAm2bEWQ9NTzzyEzbeHL
E/CmFkrB+31V345HKHcBEK0CWAO9S69TifW5skMGKPdLJ+lrdQ2kYLz6cqCWoDrR
FqTrna7zPPv46k30ERWIdDSCmVeC6t5u0nkUXM6r7VMpB7oMXFvjIMlGb0GPUiTE
KN3l3ZwDPz2NLkiqxuQQU19yqZWU6GWCU8BSWT6qfH+DwBSYqGfIG6ey2aEwnI67
6Rnt4d0mZNIxXSTR0z7SUVCIqMN/8P84ug3l6PKHZwGRZJ1GhsmeIlRfFZLZu2aW
YelmmIo1JqablMkOnoeOGjFEwjg/jrUMPA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org