Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/66fdc177fd3a04658bf8b38f7534d3cf524470f6.roa
File: 66fdc177fd3a04658bf8b38f7534d3cf524470f6.roa (raw, json)
Hash identifier: 3uKHe1XlnyHGHkriJVWmU/kZySFHmiwzBeme54bLE4I=
Subject key identifier: BD:69:42:76:0F:F9:69:16:2F:76:E7:FB:D1:C9:4E:5E:82:B4:86:60
Certificate issuer: /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial: 21115D
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/66fdc177fd3a04658bf8b38f7534d3cf524470f6.roa
Signing time: Wed 03 May 2023 18:31:37 +0000
ROA not before: Tue 02 May 2023 18:31:36 +0000
ROA not after: Sat 03 May 2025 18:31:36 +0000
asID: 52468
IP address blocks: 177.234.214.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2167133 (0x21115d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
Validity
Not Before: May 2 18:31:36 2023 GMT
Not After : May 3 18:31:36 2025 GMT
Subject: CN=66fdc177fd3a04658bf8b38f7534d3cf524470f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:2e:70:16:83:fb:ac:a1:ec:42:64:37:dd:
17:e4:34:f6:d5:81:ce:a3:97:c3:c5:ac:3e:58:23:
b6:fa:5c:c9:70:4b:9d:99:34:57:54:44:46:35:f4:
9d:c5:95:3d:bb:50:c2:3c:ad:44:2c:3a:4b:e1:48:
9f:24:df:66:f3:55:40:6f:d3:16:86:ec:a8:39:d4:
23:14:a1:13:f8:5c:bd:be:37:66:c0:19:8a:fa:5a:
c2:06:80:a1:f7:47:6c:ee:a4:80:0f:ee:7d:67:dd:
49:17:94:47:88:34:0a:ef:1c:7d:75:63:80:4c:d7:
be:14:ed:e6:4d:3f:d1:b1:59:ba:46:65:7a:50:18:
33:95:7f:2b:6d:ed:a5:35:01:32:b9:e1:42:09:9d:
46:0e:73:31:31:63:b9:d6:f7:43:25:f7:a7:89:d4:
de:12:a8:e3:6e:90:60:ee:3b:82:3b:54:51:0c:4e:
1b:cb:40:eb:02:62:bc:ff:ab:62:61:44:c6:b1:d8:
e1:ba:35:47:63:51:f3:c1:71:04:24:e2:2a:5e:83:
03:a5:b5:30:e5:08:91:d9:ec:95:fd:47:94:c5:28:
e3:e7:40:ba:dc:a5:ab:41:d6:0b:60:36:48:91:55:
f7:ab:d1:a5:79:f0:6e:e3:8a:70:33:29:09:fd:95:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:69:42:76:0F:F9:69:16:2F:76:E7:FB:D1:C9:4E:5E:82:B4:86:60
X509v3 Authority Key Identifier:
keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/66fdc177fd3a04658bf8b38f7534d3cf524470f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.234.214.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:99:d7:6f:a0:59:7a:df:16:dc:30:6c:c5:22:32:94:f5:65:
74:8b:14:97:c0:77:4f:69:00:56:1b:62:9c:00:8c:a3:17:0d:
45:5e:05:85:dc:d4:69:5b:66:17:ef:3b:47:29:fb:ef:3e:14:
29:34:21:b6:bf:de:cd:6b:e7:ff:22:b1:66:3f:39:38:8c:a7:
34:34:5e:40:2e:d0:90:a8:3e:63:4e:bd:e3:e7:4a:61:2f:ce:
88:73:cc:18:b5:cb:c9:5c:b2:e3:5f:4b:ab:fb:4d:9a:18:ad:
4d:7c:ee:53:99:a2:41:30:84:47:95:64:c4:2f:7f:68:88:f6:
c5:31:97:1b:b6:17:ed:78:16:94:e4:b7:61:89:c6:93:8c:1c:
03:be:4e:df:87:fd:10:42:6e:c2:90:9b:15:c1:0f:5c:07:2a:
20:a5:4b:cd:18:0e:0d:ee:2e:23:c7:c2:df:51:8a:bd:50:c3:
8c:35:ea:6b:6c:d6:fd:93:03:84:19:cb:dc:4a:3e:2b:ea:c1:
97:fe:b2:89:5e:65:92:0c:eb:6c:12:a6:b5:2d:19:c6:51:35:
9e:23:a0:76:d0:61:ab:4b:42:aa:50:2e:9b:08:11:e2:bc:1a:
ce:76:57:4a:07:b2:20:6b:2b:c7:1f:55:c3:39:98:95:27:8d:
f4:c9:46:48
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIRFdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
M2Q2MDAyMjc2ZTIyOTUyMDBjODVhNjYxMjljNDJlNGQ0ODNjMzQwHhcNMjMwNTAy
MTgzMTM2WhcNMjUwNTAzMTgzMTM2WjAzMTEwLwYDVQQDEyg2NmZkYzE3N2ZkM2Ew
NDY1OGJmOGIzOGY3NTM0ZDNjZjUyNDQ3MGY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt94ucBaD+6yh7EJkN90X5DT21YHOo5fDxaw+WCO2+lzJcEud
mTRXVERGNfSdxZU9u1DCPK1ELDpL4UifJN9m81VAb9MWhuyoOdQjFKET+Fy9vjdm
wBmK+lrCBoCh90ds7qSAD+59Z91JF5RHiDQK7xx9dWOATNe+FO3mTT/RsVm6RmV6
UBgzlX8rbe2lNQEyueFCCZ1GDnMxMWO51vdDJfenidTeEqjjbpBg7juCO1RRDE4b
y0DrAmK8/6tiYUTGsdjhujVHY1HzwXEEJOIqXoMDpbUw5QiR2eyV/UeUxSjj50C6
3KWrQdYLYDZIkVX3q9GlefBu44pwMykJ/ZX4YwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFL1pQnYP+WkWL3bn+9HJTl6CtIZgMB8GA1UdIwQYMBaAFDAh+wtyXfK860HI
D7qAy4I4YPkKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWIzZDYw
MDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2MzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTI2M2RjNTctZTExYy00NjA4LTlhZjItYmRmYjE2
ZTIxNmRjLzY2ZmRjMTc3ZmQzYTA0NjU4YmY4YjM4Zjc1MzRkM2NmNTI0NDcwZjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMjYzZGM1Ny1lMTFjLTQ2MDgtOWFmMi1iZGZi
MTZlMjE2ZGMvOWIzZDYwMDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2Mz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAbHq1jANBgkqhkiG9w0BAQsFAAOCAQEAbpnXb6BZet8W3DBs
xSIylPVldIsUl8B3T2kAVhtinACMoxcNRV4FhdzUaVtmF+87Ryn77z4UKTQhtr/e
zWvn/yKxZj85OIynNDReQC7QkKg+Y0694+dKYS/OiHPMGLXLyVyy419Lq/tNmhit
TXzuU5miQTCER5VkxC9/aIj2xTGXG7YX7XgWlOS3YYnGk4wcA75O34f9EEJuwpCb
FcEPXAcqIKVLzRgODe4uI8fC31GKvVDDjDXqa2zW/ZMDhBnL3Eo+K+rBl/6yiV5l
kgzrbBKmtS0ZxlE1niOgdtBhq0tCqlAumwgR4rwaznZXSgeyIGsrxx9VwzmYlSeN
9MlGSA==
-----END CERTIFICATE-----
Generated at Tue Oct 17 20:26:36 2023 by rpki-client on console-ams.rpki-client.org