Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/d18c7f173368e4cb3ae392f83580bf3bf92abc49.roa
File: d18c7f173368e4cb3ae392f83580bf3bf92abc49.roa (raw, json)
Hash identifier: 5kEKWaYXl6OLKE6SvlhpZXk5HrRuvaLiAAyvi3NrgOc=
Subject key identifier: 56:12:4F:28:57:2E:94:C4:1D:9F:1C:46:42:4F:FB:95:82:AD:06:08
Certificate issuer: /CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Certificate serial: 1276A9
Authority key identifier: E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/d18c7f173368e4cb3ae392f83580bf3bf92abc49.roa
Signing time: Thu 23 Dec 2021 14:14:11 +0000
ROA not before: Thu 23 Dec 2021 03:00:00 +0000
ROA not after: Sat 23 Dec 2023 03:00:00 +0000
asID: 263684
IP address blocks: 170.244.56.0/22 maxlen: 24
200.115.25.0/24 maxlen: 24
200.115.26.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210025 (0x1276a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Validity
Not Before: Dec 23 03:00:00 2021 GMT
Not After : Dec 23 03:00:00 2023 GMT
Subject: CN=d18c7f173368e4cb3ae392f83580bf3bf92abc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:b1:52:c6:99:d9:1f:f6:dd:56:8c:61:ea:
7e:6c:10:f1:11:63:6e:a3:62:4e:fd:38:7e:64:03:
63:73:69:7e:a3:b2:c5:95:dd:71:59:0c:e3:a9:1b:
05:67:19:c2:6f:b3:a8:60:ef:5c:2a:41:46:16:3f:
db:93:7c:7b:93:95:ed:e0:d9:13:86:3b:92:06:d0:
da:a2:c8:25:06:bd:46:ba:7e:6f:f4:32:aa:af:68:
df:b8:5a:b5:a7:32:8a:7e:81:3f:41:62:42:11:3c:
7d:4a:08:2e:85:a2:cb:e6:69:bd:98:83:ac:0c:cb:
a7:a2:63:7d:41:a1:38:56:e7:3f:70:8a:a3:c0:7a:
66:d9:3f:d3:45:18:49:20:e1:a7:8d:4a:0d:6a:83:
66:f2:cd:27:d4:0a:41:23:3a:87:d6:3b:78:6b:65:
5e:66:7b:54:14:d5:40:8e:f8:06:45:13:bb:3f:f4:
fa:e8:02:db:e5:ce:1a:85:9a:38:50:d4:91:35:9e:
d1:c1:ac:a8:5a:d3:b3:60:35:36:8c:f1:80:5a:9a:
c0:d4:c1:96:19:d4:1a:5d:70:bb:4c:57:76:fe:13:
79:16:04:e6:b4:85:6f:ee:e8:b9:37:ed:b4:a4:dd:
b5:75:16:e9:f6:ae:39:3f:d6:85:d0:8d:a8:74:c5:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:12:4F:28:57:2E:94:C4:1D:9F:1C:46:42:4F:FB:95:82:AD:06:08
X509v3 Authority Key Identifier:
keyid:E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/d18c7f173368e4cb3ae392f83580bf3bf92abc49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.56.0/22
200.115.25.0-200.115.27.255
Signature Algorithm: sha256WithRSAEncryption
3b:b0:4c:f8:fa:ee:d3:67:7f:e4:86:9b:b2:8f:6d:33:82:5e:
1d:a0:dd:e7:3d:67:08:55:5a:a3:35:14:45:5e:89:36:55:57:
0e:9b:9c:0c:e1:6b:3f:bb:21:25:40:25:53:d5:4a:90:34:97:
63:7c:12:71:91:5a:de:b0:3d:52:68:d3:ce:00:37:80:b0:f5:
9f:c1:f1:89:1b:9f:5f:ea:3e:12:4b:d8:54:31:8d:7b:10:27:
43:b5:bd:e0:97:63:27:cd:8c:d8:b4:46:96:0c:50:e1:f8:c2:
60:49:a6:24:d3:99:b0:79:ca:89:c8:9c:f5:c8:e6:0f:f0:0d:
a0:56:7e:63:f1:46:97:c6:e8:a5:4c:d0:c8:4e:93:69:b6:d2:
59:3a:f5:05:cb:e6:ea:92:c5:36:6f:87:c2:31:a4:6e:e6:ee:
b2:3d:a8:32:58:cd:fc:d3:35:d5:bf:c3:39:6c:2c:6e:dd:a2:
42:cd:95:e4:88:fc:42:18:5c:e0:97:0a:7a:f1:b1:41:1d:fc:
0f:1c:59:6a:5f:68:bf:a6:4b:35:f0:83:a4:c1:a0:74:77:8c:
ad:a1:07:f4:92:7a:43:d8:98:c7:72:7e:62:98:2a:12:c9:56:
30:e7:72:33:8e:6c:65:c4:10:c3:c1:ff:bd:d7:64:97:e6:ad:
d0:83:2f:e6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDEnapMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJm
ZmZjMWUwYmI2ZDVmZWE4NTI5YzRmZTY1YmRhNzZmNzJkNGM4OGMwHhcNMjExMjIz
MDMwMDAwWhcNMjMxMjIzMDMwMDAwWjAzMTEwLwYDVQQDEyhkMThjN2YxNzMzNjhl
NGNiM2FlMzkyZjgzNTgwYmYzYmY5MmFiYzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp72xUsaZ2R/23VaMYep+bBDxEWNuo2JO/Th+ZANjc2l+o7LF
ld1xWQzjqRsFZxnCb7OoYO9cKkFGFj/bk3x7k5Xt4NkThjuSBtDaosglBr1Gun5v
9DKqr2jfuFq1pzKKfoE/QWJCETx9SgguhaLL5mm9mIOsDMunomN9QaE4Vuc/cIqj
wHpm2T/TRRhJIOGnjUoNaoNm8s0n1ApBIzqH1jt4a2VeZntUFNVAjvgGRRO7P/T6
6ALb5c4ahZo4UNSRNZ7RwayoWtOzYDU2jPGAWprA1MGWGdQaXXC7TFd2/hN5FgTm
tIVv7ui5N+20pN21dRbp9q45P9aF0I2odMXdrQIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFFYSTyhXLpTEHZ8cRkJP+5WCrQYIMB8GA1UdIwQYMBaAFOKxgIx8ev/AjDHz
50OUxayJBKaoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmZmZmMx
ZTBiYjZkNWZlYTg1MjljNGZlNjViZGE3NmY3MmQ0Yzg4Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjI0NzZhNDgtM2RjOS00NzM2LWJmOWYtZDc2MWJh
ZjQzN2MyL2QxOGM3ZjE3MzM2OGU0Y2IzYWUzOTJmODM1ODBiZjNiZjkyYWJjNDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMjQ3NmE0OC0zZGM5LTQ3MzYtYmY5Zi1kNzYx
YmFmNDM3YzIvMmZmZmMxZTBiYjZkNWZlYTg1MjljNGZlNjViZGE3NmY3MmQ0Yzg4
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFAMEAqr0ODAMAwQAyHMZAwQCyHMYMA0GCSqGSIb3DQEBCwUAA4IB
AQA7sEz4+u7TZ3/khpuyj20zgl4doN3nPWcIVVqjNRRFXok2VVcOm5wM4Ws/uyEl
QCVT1UqQNJdjfBJxkVresD1SaNPOADeAsPWfwfGJG59f6j4SS9hUMY17ECdDtb3g
l2MnzYzYtEaWDFDh+MJgSaYk05mwecqJyJz1yOYP8A2gVn5j8UaXxuilTNDITpNp
ttJZOvUFy+bqksU2b4fCMaRu5u6yPagyWM380zXVv8M5bCxu3aJCzZXkiPxCGFzg
lwp68bFBHfwPHFlqX2i/pks18IOkwaB0d4ytoQf0knpD2JjHcn5imCoSyVYw53Iz
jmxlxBDDwf+912SX5q3Qgy/m
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org