Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/0c00b77f820bdfb8d7965ca3f3decbec94bf8fcb.roa
File: 0c00b77f820bdfb8d7965ca3f3decbec94bf8fcb.roa (raw, json)
Hash identifier: mBINEP7X40IMN4zMdgS55VV30NQinsaf+Um8pGT3yP4=
Subject key identifier: 03:41:4F:AF:04:7A:89:A8:92:25:8F:A7:1F:EF:6D:09:45:40:EC:DF
Certificate issuer: /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial: 1C65E4
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/0c00b77f820bdfb8d7965ca3f3decbec94bf8fcb.roa
Signing time: Thu 22 Sep 2022 21:16:11 +0000
ROA not before: Thu 22 Sep 2022 21:13:55 +0000
ROA not after: Sun 22 Sep 2024 21:13:55 +0000
asID: 22368
IP address blocks: 201.221.128.0/24 maxlen: 24
201.221.129.0/24 maxlen: 24
201.221.131.0/24 maxlen: 24
201.221.132.0/24 maxlen: 24
201.221.133.0/24 maxlen: 24
201.221.134.0/24 maxlen: 24
201.221.135.0/24 maxlen: 24
201.221.136.0/24 maxlen: 24
201.221.137.0/24 maxlen: 24
201.221.138.0/24 maxlen: 24
201.221.139.0/24 maxlen: 24
201.221.140.0/24 maxlen: 24
201.221.141.0/24 maxlen: 24
201.221.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1861092 (0x1c65e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Validity
Not Before: Sep 22 21:13:55 2022 GMT
Not After : Sep 22 21:13:55 2024 GMT
Subject: CN=0c00b77f820bdfb8d7965ca3f3decbec94bf8fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:7c:15:5b:e3:71:e5:92:eb:aa:4e:3e:0c:
49:6d:e0:7b:8f:03:33:9a:23:cd:bc:07:e8:fd:66:
f2:60:ee:dd:4c:45:f7:22:ab:be:e6:40:ad:b4:e2:
99:3f:ff:0d:b2:f0:ba:18:4b:99:a6:fd:5e:5c:96:
15:12:c3:b0:61:49:1c:81:44:83:a2:7d:95:b6:11:
18:f2:4f:d6:85:ce:55:64:83:81:f9:c9:bc:da:ea:
a2:04:1b:b1:8c:30:d5:ec:db:00:b9:34:9a:70:7f:
e4:e4:d6:b7:8c:6a:e9:00:91:49:8b:0e:50:01:8a:
81:ee:d2:c6:11:ac:44:de:bb:54:81:e9:8b:2b:cb:
81:4f:28:2a:53:b9:7c:24:bb:ec:5f:b9:4d:7a:49:
de:5b:a0:da:07:e0:b6:ab:1e:0b:23:e3:4e:de:4a:
2f:77:65:75:86:16:59:d2:5d:33:c7:ba:27:8d:17:
64:2b:47:74:8a:cf:f6:5a:76:1f:4b:19:d8:e9:9c:
fa:53:39:4b:68:ef:de:8e:52:0b:9a:c2:d1:17:5d:
2c:26:41:f1:75:3d:94:6c:ce:b0:d2:91:5d:6e:ec:
88:74:c6:83:40:01:58:4a:b3:17:28:12:94:71:91:
e8:c9:b9:74:3b:bb:ef:15:8e:eb:32:8b:13:25:78:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:41:4F:AF:04:7A:89:A8:92:25:8F:A7:1F:EF:6D:09:45:40:EC:DF
X509v3 Authority Key Identifier:
keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/0c00b77f820bdfb8d7965ca3f3decbec94bf8fcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.221.128.0/23
201.221.131.0-201.221.141.255
201.221.143.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:e5:fa:79:8f:7a:e8:92:52:c6:d8:71:6b:f8:ef:5d:02:b1:
12:a5:d4:7d:45:f7:43:7e:2f:7e:00:9a:e6:b6:7d:4e:8e:73:
25:2c:ff:65:e2:2e:a0:5e:22:a4:95:d1:06:3e:66:67:a3:84:
77:91:92:69:cd:96:c5:fa:28:b4:3e:cd:10:e0:b3:76:98:d5:
ba:83:b2:2e:41:7e:c0:2a:28:41:98:2f:64:bb:5b:61:c3:09:
60:7d:01:e7:a0:66:e7:47:c4:be:11:35:f1:f7:3f:35:fa:52:
f6:4c:d9:9d:57:91:77:09:e1:ec:77:32:7d:14:e8:7f:dc:96:
2a:3d:42:79:c9:19:4c:78:26:ad:ec:fb:19:a4:c4:67:0b:c7:
a3:c2:e1:41:36:52:e9:fb:10:8c:8b:ef:f3:fe:58:fa:e8:8d:
91:f8:23:8b:9d:1b:08:c3:be:b3:72:72:d8:b7:30:ec:7f:b3:
8d:b9:11:c9:a3:9a:7d:e5:a1:5f:ac:00:71:ae:7b:04:7d:ae:
e0:4c:25:11:19:dc:4a:7e:e5:98:17:3d:26:cc:ba:71:f2:c0:
df:f8:b6:bc:2c:d4:87:cc:5a:29:71:ed:e6:53:ce:3c:30:c3:
d7:dc:1b:20:0b:35:6c:2c:e2:6f:78:98:ed:d2:4c:61:81:76:
5b:d9:af:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 17:43:26 2023 by rpki-client on console-fra.rpki-client.org