Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/062050f2393ab0df3c8b52a9910ce75698903aca.roa
File: 062050f2393ab0df3c8b52a9910ce75698903aca.roa (raw, json)
Hash identifier: +Ss3Biaj3Qqw1EVssK43J1s4CrhKhscyMFih042fOEM=
Subject key identifier: 87:24:FC:32:C0:AC:34:21:A2:3A:3F:66:FF:6F:2B:84:27:45:92:5E
Certificate issuer: /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial: 1DB05D
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/062050f2393ab0df3c8b52a9910ce75698903aca.roa
Signing time: Mon 23 Jan 2023 18:15:40 +0000
ROA not before: Sun 22 Jan 2023 18:11:29 +0000
ROA not after: Thu 23 Jan 2025 18:11:29 +0000
asID: 202
IP address blocks: 45.232.116.0/22 maxlen: 24
181.193.0.0/16 maxlen: 24
181.194.0.0/15 maxlen: 24
200.91.64.0/18 maxlen: 24
200.91.128.0/18 maxlen: 24
201.191.0.0/16 maxlen: 24
201.192.0.0/12 maxlen: 24
201.237.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1945693 (0x1db05d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Validity
Not Before: Jan 22 18:11:29 2023 GMT
Not After : Jan 23 18:11:29 2025 GMT
Subject: CN=062050f2393ab0df3c8b52a9910ce75698903aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:3f:fa:91:a2:66:8e:b5:66:2b:78:96:b3:
b1:ca:1d:3b:fe:bc:50:c4:a2:b9:51:e3:c3:f3:5a:
40:16:75:4d:eb:77:13:83:66:36:01:9e:66:08:fc:
91:6a:09:4b:9c:a9:b8:4d:26:b1:de:60:de:8a:d7:
10:41:ac:2b:12:27:d6:f8:3a:a4:67:af:f8:e8:9a:
79:36:72:98:4b:2b:98:50:05:18:28:0f:60:2e:79:
db:21:f7:ad:94:8d:ca:ca:b2:05:55:de:60:66:63:
56:19:8b:24:7c:b4:28:e6:6e:74:45:05:ee:c8:e2:
c2:7b:9b:ac:c6:73:5b:60:db:a4:19:c8:4c:c9:76:
82:b5:9a:91:65:9f:f7:c4:9d:73:6c:eb:08:bd:cf:
cd:68:65:23:b6:e6:a6:e7:9d:21:e4:3f:51:25:eb:
86:5b:1d:e3:2c:7a:5b:a4:4b:bd:ff:71:9c:ff:12:
aa:73:09:e7:2f:9a:3e:a9:b7:df:1a:fd:67:a6:0d:
4d:6e:bb:ea:41:44:48:5a:9a:bc:30:f6:98:3a:26:
56:34:f8:1e:de:03:3b:ce:51:91:48:2a:c1:69:1f:
ea:60:9c:af:e6:03:5f:70:ca:d4:f0:00:cd:87:87:
48:e7:a9:63:9a:02:d1:a8:a9:57:74:f2:cd:3d:bc:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:24:FC:32:C0:AC:34:21:A2:3A:3F:66:FF:6F:2B:84:27:45:92:5E
X509v3 Authority Key Identifier:
keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/062050f2393ab0df3c8b52a9910ce75698903aca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.116.0/22
181.193.0.0-181.195.255.255
200.91.64.0-200.91.191.255
201.191.0.0-201.207.255.255
201.237.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:86:f8:29:cf:00:98:44:6f:d8:18:18:3f:1f:b5:72:38:90:
e3:14:d4:d5:d1:8a:10:73:06:4d:e6:02:0d:17:00:d6:98:1f:
85:60:f8:6e:9e:42:61:94:d4:e2:8b:ac:e6:c6:9a:61:c0:cf:
fd:fb:1a:52:52:dd:e0:fc:6b:80:7f:13:49:3d:ab:d5:3d:0c:
bc:b3:e1:d4:ac:1d:f9:dd:cc:45:54:94:fe:b8:dd:7f:02:78:
7a:e8:71:9d:2a:b4:a1:18:6d:35:9b:12:be:a5:2b:e7:fe:91:
2f:0f:0e:a0:6d:78:19:50:24:c2:bc:a8:0e:80:f3:f8:7c:cb:
23:90:e4:14:7b:04:cd:d2:79:fa:fd:1e:f8:1c:91:50:c8:99:
22:77:0e:cd:3b:4b:95:8b:ae:56:19:3f:06:1d:fe:9d:22:ec:
25:64:65:55:04:6d:7b:21:c0:55:5a:3b:cb:39:46:8d:47:9e:
15:10:ef:cf:fa:29:9e:e2:09:29:2b:a2:bb:a5:5a:88:ba:1a:
08:4f:3d:26:56:f3:98:32:c0:2a:e8:dd:e4:1e:32:c6:7f:58:
b0:48:3b:af:0c:0a:2a:63:e5:b5:d6:0c:a6:a3:a1:6f:ac:ab:
3f:9f:9e:54:52:01:86:f6:ed:58:72:68:3b:48:1a:70:a0:44:
72:d9:c9:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 14 20:57:43 2023 by rpki-client on console-fra.rpki-client.org