Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/4c3408f23847fd651bf1b1de609de433a86ca989.roa
File: 4c3408f23847fd651bf1b1de609de433a86ca989.roa (raw, json)
Hash identifier: cPH7mpAUtfWTYsR0Rj+VYpkfNRh+c8WOCEMrzd5VECY=
Subject key identifier: 28:F9:85:58:89:17:01:80:2B:99:BE:27:C6:80:57:D8:FC:01:40:56
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 202C93
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/4c3408f23847fd651bf1b1de609de433a86ca989.roa
Signing time: Fri 20 Jan 2023 15:19:50 +0000
ROA not before: Wed 28 Apr 2021 03:00:00 +0000
ROA not after: Thu 11 May 2023 03:00:00 +0000
asID: 262589
IP address blocks: 179.1.0.0/21 maxlen: 24
179.1.8.0/21 maxlen: 24
179.1.16.0/20 maxlen: 24
179.1.32.0/20 maxlen: 24
179.1.48.0/20 maxlen: 24
179.1.64.0/20 maxlen: 24
179.1.80.0/20 maxlen: 24
179.1.92.0/22 maxlen: 24
179.1.96.0/20 maxlen: 24
179.1.112.0/20 maxlen: 24
179.1.128.0/20 maxlen: 24
179.1.176.0/20 maxlen: 24
179.1.192.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108563 (0x202c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Apr 28 03:00:00 2021 GMT
Not After : May 11 03:00:00 2023 GMT
Subject: CN=4c3408f23847fd651bf1b1de609de433a86ca989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:68:7e:3f:88:6a:33:f4:1b:3b:d0:d0:38:
25:31:9b:ef:0e:71:df:ce:d7:58:30:ba:09:fd:84:
74:eb:96:62:5b:65:6d:62:0f:b4:48:c1:43:d1:4b:
59:0b:14:bc:41:96:73:ee:0b:26:98:a0:38:2b:45:
79:40:d2:64:ff:cb:90:c4:5f:27:a9:5a:a5:2f:01:
2e:1f:75:e3:3f:33:60:fb:84:b5:db:e1:d9:8d:4a:
56:f1:66:61:c6:18:03:29:51:64:25:a2:e3:22:a4:
2e:d0:61:b8:1a:52:c4:3c:69:bd:17:e3:bd:fe:f2:
4c:5a:9b:d2:8c:7d:d1:a3:b4:22:ee:16:1b:b3:33:
17:e8:3d:a1:cf:2f:c4:7d:6c:eb:60:bf:22:38:e3:
94:dc:32:63:c9:77:d0:b8:2b:ce:2e:18:3d:17:28:
28:1a:0b:13:38:c2:1e:7a:7e:98:24:9a:b0:23:d2:
6e:fa:85:54:37:3b:a9:80:38:58:8f:88:4a:82:ee:
95:91:b9:c6:e1:e5:49:ca:70:33:64:d2:26:a6:78:
0a:b9:49:8f:95:ac:f1:94:9c:fd:f1:2b:48:e7:30:
83:08:fc:e7:3b:53:c4:15:67:d2:f7:cf:35:69:d3:
29:ee:1d:d7:a2:66:8c:02:9e:57:75:49:ad:49:ee:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F9:85:58:89:17:01:80:2B:99:BE:27:C6:80:57:D8:FC:01:40:56
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/4c3408f23847fd651bf1b1de609de433a86ca989.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.1.0.0-179.1.143.255
179.1.176.0-179.1.207.255
Signature Algorithm: sha256WithRSAEncryption
2a:d0:c8:61:e8:7a:82:42:79:bc:cc:f3:ec:8e:b0:a5:08:41:
cc:91:1e:88:25:47:aa:cc:ad:55:be:ca:a5:ef:d1:9a:45:80:
79:d9:c8:bf:8d:f5:5f:f1:80:ec:6e:d6:d7:84:35:fc:1f:56:
c2:db:fe:96:25:e6:00:0c:e3:1e:d2:4d:20:d9:e2:c4:1c:20:
cf:eb:79:51:de:74:12:27:82:75:ef:81:b9:3b:a3:c7:09:28:
26:e8:78:75:a5:1a:73:d5:0d:f0:a0:2f:6a:0e:41:0e:02:40:
ca:e8:ed:c6:7a:8a:f7:c4:a8:e6:8a:31:e0:04:81:73:ba:7b:
70:d4:5b:f1:42:60:05:67:7b:2c:ac:bc:53:b5:a7:64:63:60:
15:7f:28:f8:88:9f:6e:57:4c:27:42:55:ff:9d:47:84:76:9d:
24:35:8b:82:05:0c:35:14:dd:c9:0a:04:2f:6d:4c:0c:e5:08:
25:dd:50:0a:46:04:01:d7:ef:a6:53:94:3d:01:05:07:94:9f:
83:e5:47:db:8f:44:af:3c:49:3e:df:10:85:66:6b:38:f3:eb:
aa:c4:8a:e4:db:2b:f3:f4:8a:47:ed:d9:81:22:cd:16:c5:d2:
c1:04:59:fe:96:4a:f0:b0:02:78:95:19:5f:c5:ed:e2:a1:85:
6c:12:49:a7
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDICyTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwNDI4
MDMwMDAwWhcNMjMwNTExMDMwMDAwWjAzMTEwLwYDVQQDEyg0YzM0MDhmMjM4NDdm
ZDY1MWJmMWIxZGU2MDlkZTQzM2E4NmNhOTg5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoqVofj+IajP0GzvQ0DglMZvvDnHfztdYMLoJ/YR065ZiW2Vt
Yg+0SMFD0UtZCxS8QZZz7gsmmKA4K0V5QNJk/8uQxF8nqVqlLwEuH3XjPzNg+4S1
2+HZjUpW8WZhxhgDKVFkJaLjIqQu0GG4GlLEPGm9F+O9/vJMWpvSjH3Ro7Qi7hYb
szMX6D2hzy/EfWzrYL8iOOOU3DJjyXfQuCvOLhg9FygoGgsTOMIeen6YJJqwI9Ju
+oVUNzupgDhYj4hKgu6VkbnG4eVJynAzZNImpngKuUmPlazxlJz98StI5zCDCPzn
O1PEFWfS9881adMp7h3XomaMAp5XdUmtSe6A0QIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFCj5hViJFwGAK5m+J8aAV9j8AUBWMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5LzRjMzQwOGYyMzg0N2ZkNjUxYmYxYjFkZTYwOWRlNDMzYTg2Y2E5ODku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwIQQCAAEwGzALAwMAswEDBASzAYAwDAMEBLMBsAMEBLMBwDANBgkqhkiG9w0B
AQsFAAOCAQEAKtDIYeh6gkJ5vMzz7I6wpQhBzJEeiCVHqsytVb7Kpe/RmkWAednI
v431X/GA7G7W14Q1/B9Wwtv+liXmAAzjHtJNINnixBwgz+t5Ud50EieCde+BuTuj
xwkoJuh4daUac9UN8KAvag5BDgJAyujtxnqK98So5oox4ASBc7p7cNRb8UJgBWd7
LKy8U7WnZGNgFX8o+IifbldMJ0JV/51HhHadJDWLggUMNRTdyQoEL21MDOUIJd1Q
CkYEAdfvplOUPQEFB5Sfg+VH249ErzxJPt8QhWZrOPPrqsSK5Nsr8/SKR+3ZgSLN
FsXSwQRZ/pZK8LACeJUZX8Xt4qGFbBJJpw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org