Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/ff9c7de9bc0adcfe48dd9720ecaff22db58179ca.roa
File: ff9c7de9bc0adcfe48dd9720ecaff22db58179ca.roa (raw, json)
Hash identifier: cs4nrexJVop5cPgN82I5fDN0BwxuTWxQKPxTm7ix8QU=
Subject key identifier: AD:99:F3:2B:5A:33:1A:71:64:C1:AE:79:FD:BC:7C:6C:47:9C:5B:A6
Certificate issuer: /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial: 254E8E
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/ff9c7de9bc0adcfe48dd9720ecaff22db58179ca.roa
Signing time: Wed 30 Aug 2023 17:17:58 +0000
ROA not before: Tue 29 Aug 2023 17:17:58 +0000
ROA not after: Sat 30 Aug 2025 17:17:58 +0000
asID: 22368
IP address blocks: 190.184.168.0/21 maxlen: 24
190.184.176.0/21 maxlen: 23
190.184.186.0/23 maxlen: 23
190.184.188.0/22 maxlen: 23
190.184.184.0/23 maxlen: 24
190.13.0.0/22 maxlen: 22
190.13.4.0/22 maxlen: 23
190.13.8.0/22 maxlen: 22
190.96.216.0/21 maxlen: 24
190.96.218.0/23 maxlen: 23
190.96.220.0/22 maxlen: 23
190.96.214.0/23 maxlen: 24
190.96.217.0/24 maxlen: 24
170.80.8.0/22 maxlen: 23
201.221.128.0/23 maxlen: 24
201.221.131.0/24 maxlen: 24
201.221.132.0/22 maxlen: 24
201.221.136.0/22 maxlen: 24
201.221.140.0/23 maxlen: 24
190.184.128.0/18 maxlen: 24
190.184.128.0/21 maxlen: 23
201.221.143.0/24 maxlen: 24
201.221.144.0/22 maxlen: 24
201.221.148.0/23 maxlen: 24
190.184.136.0/22 maxlen: 24
201.221.151.0/24 maxlen: 24
201.221.152.0/21 maxlen: 24
190.184.140.0/22 maxlen: 23
190.184.144.0/22 maxlen: 24
190.184.148.0/22 maxlen: 23
190.184.152.0/21 maxlen: 23
190.184.160.0/21 maxlen: 23
190.124.108.0/22 maxlen: 22
190.124.112.0/22 maxlen: 22
190.124.116.0/22 maxlen: 23
190.124.120.0/21 maxlen: 23
190.13.12.0/22 maxlen: 23
190.13.24.0/21 maxlen: 21
190.13.32.0/20 maxlen: 21
190.124.96.0/21 maxlen: 24
190.124.96.0/23 maxlen: 23
190.124.98.0/23 maxlen: 24
190.124.100.0/23 maxlen: 24
190.124.102.0/24 maxlen: 24
190.124.104.0/22 maxlen: 23
186.183.218.0/23 maxlen: 24
186.183.220.0/22 maxlen: 23
186.183.224.0/21 maxlen: 23
186.183.234.0/23 maxlen: 23
186.183.236.0/22 maxlen: 23
186.183.246.0/23 maxlen: 24
186.183.248.0/22 maxlen: 24
186.183.252.0/23 maxlen: 23
186.183.158.0/23 maxlen: 24
186.183.160.0/22 maxlen: 23
186.183.164.0/23 maxlen: 24
186.183.166.0/23 maxlen: 23
186.183.168.0/21 maxlen: 23
186.183.176.0/23 maxlen: 23
186.183.178.0/23 maxlen: 24
186.183.180.0/22 maxlen: 23
186.183.184.0/21 maxlen: 23
186.183.192.0/20 maxlen: 23
186.183.208.0/21 maxlen: 23
186.183.216.0/23 maxlen: 23
190.96.160.0/19 maxlen: 24
190.96.160.0/22 maxlen: 24
190.96.164.0/24 maxlen: 24
181.174.36.0/22 maxlen: 23
181.174.40.0/21 maxlen: 23
181.174.48.0/22 maxlen: 23
181.174.52.0/23 maxlen: 23
181.174.34.0/24 maxlen: 24
190.96.166.0/23 maxlen: 24
190.96.168.0/24 maxlen: 24
190.96.170.0/23 maxlen: 24
190.96.172.0/23 maxlen: 24
190.96.176.0/22 maxlen: 23
190.96.175.0/24 maxlen: 24
190.96.180.0/22 maxlen: 22
190.96.192.0/21 maxlen: 24
181.174.56.0/22 maxlen: 24
181.174.54.0/23 maxlen: 24
181.174.57.0/24 maxlen: 24
190.96.192.0/23 maxlen: 24
181.174.62.0/23 maxlen: 23
190.96.194.0/23 maxlen: 23
190.96.196.0/22 maxlen: 23
181.174.60.0/23 maxlen: 24
190.96.208.0/20 maxlen: 24
190.96.208.0/23 maxlen: 23
190.96.211.0/24 maxlen: 24
190.96.212.0/24 maxlen: 24
190.96.128.0/21 maxlen: 21
181.174.0.0/20 maxlen: 23
181.174.16.0/23 maxlen: 24
181.174.18.0/23 maxlen: 23
181.174.20.0/22 maxlen: 23
181.174.24.0/21 maxlen: 23
181.174.32.0/23 maxlen: 23
186.183.128.0/21 maxlen: 23
186.183.136.0/22 maxlen: 23
186.183.142.0/23 maxlen: 23
186.183.144.0/21 maxlen: 23
186.183.152.0/22 maxlen: 23
186.183.156.0/23 maxlen: 23
186.183.140.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2444942 (0x254e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Validity
Not Before: Aug 29 17:17:58 2023 GMT
Not After : Aug 30 17:17:58 2025 GMT
Subject: CN=ff9c7de9bc0adcfe48dd9720ecaff22db58179ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:95:d2:4b:5a:bc:98:6a:f5:cc:ac:f2:c2:
89:08:13:94:64:69:f9:fe:5b:18:f9:b6:33:30:49:
04:49:49:70:c9:e9:97:64:1a:54:9c:1e:18:a6:47:
2c:31:30:a4:0a:7c:c3:3c:13:dd:f7:86:7d:20:91:
15:d5:d9:5d:34:aa:85:ab:9d:c5:e6:7f:8b:02:fa:
cb:2c:5a:70:5d:51:0b:0d:a1:4b:36:e3:a6:67:f6:
a7:f3:96:9e:91:ac:e6:60:1e:aa:4c:d3:d7:c7:c8:
84:1a:09:8d:ec:46:c5:77:4f:f2:0a:d9:77:41:a9:
c2:f7:35:01:b9:80:79:f8:36:e9:08:84:45:43:a0:
d9:e2:e6:c2:6a:9c:24:b0:d8:f6:a1:c7:42:ea:0e:
ea:cb:4b:8f:f9:9b:86:fd:48:69:c3:22:b5:4d:b1:
80:8a:08:1e:97:9b:e6:3b:8c:43:c2:36:b6:ed:35:
b3:db:e9:7a:95:bb:15:ad:05:73:af:bf:a4:a8:34:
d8:3e:72:6a:c8:08:33:f0:9b:22:70:e8:71:3d:88:
34:3f:b7:50:7b:9a:bc:a2:5f:3a:cb:47:75:36:b2:
5e:52:38:1b:94:e5:41:97:b3:c8:04:13:f3:e7:ec:
a9:0c:fa:d4:4d:d7:f7:8e:cf:f2:8a:79:10:43:f1:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:99:F3:2B:5A:33:1A:71:64:C1:AE:79:FD:BC:7C:6C:47:9C:5B:A6
X509v3 Authority Key Identifier:
keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/ff9c7de9bc0adcfe48dd9720ecaff22db58179ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.80.8.0/22
181.174.0.0-181.174.34.255
181.174.36.0-181.174.63.255
186.183.128.0-186.183.231.255
186.183.234.0-186.183.239.255
186.183.246.0-186.183.253.255
190.13.0.0/20
190.13.24.0-190.13.47.255
190.96.128.0/21
190.96.160.0-190.96.199.255
190.96.208.0/20
190.124.96.0/19
190.184.128.0/18
201.221.128.0/23
201.221.131.0-201.221.141.255
201.221.143.0-201.221.149.255
201.221.151.0-201.221.159.255
Signature Algorithm: sha256WithRSAEncryption
55:5c:f4:cb:3e:a7:63:65:4c:75:dd:b0:e4:70:aa:62:9f:2d:
0c:e4:1c:48:f8:48:33:0c:65:b8:f8:44:b0:1e:3b:9e:4f:a3:
56:c4:e1:bf:8e:50:d1:48:78:3c:23:33:f8:95:47:fc:76:21:
c0:77:06:a0:7f:3e:c0:34:a6:42:6d:e1:87:73:96:33:ab:b9:
53:0b:15:86:33:e5:be:fb:64:6c:b8:0a:53:52:5b:5d:23:54:
1f:05:f1:1e:a3:4f:b8:54:9c:a4:45:c8:7e:6d:e4:09:9d:b7:
2d:0b:9e:55:85:f7:a2:ee:81:f3:a1:17:2a:64:1a:72:f2:fe:
c9:63:70:06:c2:18:be:65:a6:b6:15:c5:e4:ac:61:35:a8:8a:
43:b6:4e:c2:80:65:b1:76:fc:3f:c4:0e:f5:dc:e4:aa:b2:90:
9a:49:92:9e:1c:80:c0:63:98:90:20:17:bb:e0:3a:e7:4d:84:
a1:1f:8c:0f:b8:31:22:d0:9a:dc:ae:16:de:20:2b:e2:ce:8e:
c0:a0:5c:e1:14:27:e2:91:4b:12:4a:61:4c:bc:1f:9b:7b:16:
c5:9b:54:07:4d:f2:b7:bc:ca:80:16:95:70:32:16:a2:3e:b4:
87:08:2d:a7:7e:03:64:39:0c:18:f0:67:47:6f:f5:e2:2e:84:
df:d5:64:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 18:08:10 2023 by rpki-client on console-fra.rpki-client.org