Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/463139940ca6b41c588d61326946564ef2277a8c.roa
File: 463139940ca6b41c588d61326946564ef2277a8c.roa (raw, json)
Hash identifier: ziZCHksyrIBki2IzReoHkAieTIRvX3x9zL6ce4mPIxo=
Subject key identifier: E3:4A:B4:E5:76:EC:0B:A1:91:77:37:C2:0F:DA:4F:22:7F:C5:EB:76
Certificate issuer: /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial: 070309
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/463139940ca6b41c588d61326946564ef2277a8c.roa
Signing time: Tue 07 Mar 2023 18:15:33 +0000
ROA not before: Mon 06 Mar 2023 18:09:21 +0000
ROA not after: Fri 07 Mar 2025 18:09:21 +0000
asID: 22884
IP address blocks: 186.96.3.0/24 maxlen: 24
186.96.33.0/24 maxlen: 24
186.96.35.0/24 maxlen: 24
186.96.43.0/24 maxlen: 24
186.96.60.0/24 maxlen: 24
186.96.130.0/24 maxlen: 24
186.96.154.0/24 maxlen: 24
186.96.181.0/24 maxlen: 24
186.96.183.0/24 maxlen: 24
186.96.187.0/24 maxlen: 24
187.188.15.0/24 maxlen: 24
187.188.16.0/24 maxlen: 24
187.188.52.0/24 maxlen: 24
187.188.58.0/24 maxlen: 24
187.188.163.0/24 maxlen: 24
187.188.165.0/24 maxlen: 24
187.188.173.0/24 maxlen: 24
187.188.174.0/24 maxlen: 24
187.188.175.0/24 maxlen: 24
187.188.176.0/24 maxlen: 24
187.188.177.0/24 maxlen: 24
187.188.178.0/24 maxlen: 24
187.188.180.0/24 maxlen: 24
187.188.182.0/24 maxlen: 24
187.188.184.0/24 maxlen: 24
187.188.249.0/24 maxlen: 24
187.189.21.0/24 maxlen: 24
187.189.26.0/24 maxlen: 24
187.189.45.0/24 maxlen: 24
187.189.54.0/24 maxlen: 24
187.189.59.0/24 maxlen: 24
187.189.60.0/24 maxlen: 24
187.189.61.0/24 maxlen: 24
187.189.62.0/24 maxlen: 24
187.189.63.0/24 maxlen: 24
187.189.76.0/24 maxlen: 24
187.189.81.0/24 maxlen: 24
187.189.112.0/24 maxlen: 24
187.189.130.0/24 maxlen: 24
187.189.135.0/24 maxlen: 24
187.189.147.0/24 maxlen: 24
187.189.195.0/24 maxlen: 24
187.190.14.0/24 maxlen: 24
187.190.55.0/24 maxlen: 24
187.190.68.0/24 maxlen: 24
187.190.72.0/24 maxlen: 24
187.190.104.0/24 maxlen: 24
187.190.123.0/24 maxlen: 24
187.190.134.0/23 maxlen: 24
187.190.249.0/24 maxlen: 24
187.191.10.0/24 maxlen: 24
187.191.19.0/24 maxlen: 24
187.191.20.0/24 maxlen: 24
187.191.47.0/24 maxlen: 24
187.191.57.0/24 maxlen: 24
187.251.106.0/24 maxlen: 24
187.251.107.0/24 maxlen: 24
187.251.114.0/24 maxlen: 24
187.251.136.0/24 maxlen: 24
187.251.143.0/24 maxlen: 24
187.251.144.0/24 maxlen: 24
187.251.145.0/24 maxlen: 24
187.251.200.0/24 maxlen: 24
187.251.208.0/24 maxlen: 24
187.251.233.0/24 maxlen: 24
187.251.239.0/24 maxlen: 24
187.251.250.0/24 maxlen: 24
189.203.79.0/24 maxlen: 24
189.203.135.0/24 maxlen: 24
189.203.136.0/24 maxlen: 24
189.203.151.0/24 maxlen: 24
189.203.156.0/24 maxlen: 24
189.203.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459529 (0x70309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Validity
Not Before: Mar 6 18:09:21 2023 GMT
Not After : Mar 7 18:09:21 2025 GMT
Subject: CN=463139940ca6b41c588d61326946564ef2277a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:51:e3:b3:f8:47:0f:46:4c:49:9c:e1:1d:be:
9c:f4:11:64:d1:07:d0:e2:8b:79:6b:87:37:9d:80:
e8:23:c2:d8:a1:e8:45:29:68:25:92:00:78:7c:3a:
32:9b:b7:46:c4:15:33:1a:fa:84:4a:e3:16:e2:9c:
b9:84:dd:e8:2e:4b:40:d1:79:f3:d4:69:af:a4:14:
1e:8f:46:45:ad:95:5c:77:e1:19:1a:5e:11:4a:04:
bd:77:ce:22:9b:3a:d9:69:98:81:fc:54:5a:36:5e:
c0:ae:2d:92:16:1a:82:71:14:37:bb:a6:ba:fc:c0:
89:0f:a5:26:eb:28:11:42:68:eb:c0:6c:85:68:8d:
76:25:60:9d:18:a4:71:0e:90:99:8b:70:e8:01:54:
90:c5:c6:2c:5c:4e:3d:fd:e8:8f:4f:37:38:47:e9:
19:fd:d6:34:1d:3c:b4:21:27:4d:a8:e2:79:f6:b1:
df:a7:33:56:96:a2:da:18:3c:b6:8d:20:59:49:ad:
2e:2c:df:d9:1d:3d:81:4e:eb:ba:a6:47:cc:ce:6b:
78:11:ff:dc:2c:1c:5f:72:65:de:9c:09:2e:96:eb:
2f:9c:a6:89:9c:9c:82:da:d1:60:29:e0:f8:f9:f7:
6d:f8:c3:db:d8:6e:f8:95:37:ce:94:81:7c:10:7f:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4A:B4:E5:76:EC:0B:A1:91:77:37:C2:0F:DA:4F:22:7F:C5:EB:76
X509v3 Authority Key Identifier:
keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/463139940ca6b41c588d61326946564ef2277a8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.96.3.0/24
186.96.33.0/24
186.96.35.0/24
186.96.43.0/24
186.96.60.0/24
186.96.130.0/24
186.96.154.0/24
186.96.181.0/24
186.96.183.0/24
186.96.187.0/24
187.188.15.0-187.188.16.255
187.188.52.0/24
187.188.58.0/24
187.188.163.0/24
187.188.165.0/24
187.188.173.0-187.188.178.255
187.188.180.0/24
187.188.182.0/24
187.188.184.0/24
187.188.249.0/24
187.189.21.0/24
187.189.26.0/24
187.189.45.0/24
187.189.54.0/24
187.189.59.0-187.189.63.255
187.189.76.0/24
187.189.81.0/24
187.189.112.0/24
187.189.130.0/24
187.189.135.0/24
187.189.147.0/24
187.189.195.0/24
187.190.14.0/24
187.190.55.0/24
187.190.68.0/24
187.190.72.0/24
187.190.104.0/24
187.190.123.0/24
187.190.134.0/23
187.190.249.0/24
187.191.10.0/24
187.191.19.0-187.191.20.255
187.191.47.0/24
187.191.57.0/24
187.251.106.0/23
187.251.114.0/24
187.251.136.0/24
187.251.143.0-187.251.145.255
187.251.200.0/24
187.251.208.0/24
187.251.233.0/24
187.251.239.0/24
187.251.250.0/24
189.203.79.0/24
189.203.135.0-189.203.136.255
189.203.151.0/24
189.203.156.0/24
189.203.249.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:27:b0:09:92:33:6a:a5:54:7d:bd:86:09:6a:03:70:62:9c:
f2:99:c6:cf:e1:cf:fc:44:53:b5:14:06:07:ef:6c:18:3e:08:
93:17:85:98:a0:ef:09:a4:0b:33:51:cb:3d:18:63:15:d2:31:
81:5f:7d:10:d6:be:d3:88:7c:fb:8f:fa:7c:4f:2d:5f:cc:7f:
b1:9f:62:86:cf:b0:a9:b0:6a:08:c5:a5:22:38:d1:1c:82:d1:
eb:13:20:b3:9a:f8:14:b7:1f:24:55:e9:fa:11:5f:eb:85:24:
fc:ff:05:cb:2f:15:b6:42:f9:4e:5b:9a:60:7c:cf:1b:f4:05:
e9:6f:b2:00:6d:a3:3e:7d:8d:fc:9e:01:86:2e:a6:4d:cd:81:
7a:44:9f:59:f9:ed:ec:42:66:a7:ee:a6:ce:a0:fb:fd:1a:db:
9d:1a:66:19:7f:93:dd:12:91:19:d8:85:8a:4e:54:ca:a7:12:
01:50:4f:37:13:a2:2c:fd:d0:91:29:40:4c:71:be:aa:5f:2f:
e6:24:2d:dc:5b:fc:77:34:99:cf:79:ea:47:c0:e6:a2:69:d6:
0c:a8:93:b9:30:53:10:5e:32:b9:53:34:e0:50:e6:ce:80:cd:
a6:c3:0e:f9:bf:f5:5a:ac:cf:37:a7:0c:57:46:7a:87:c2:e7:
aa:dd:02:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:54 2023 by rpki-client on console-ams.rpki-client.org