Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e34bd55e-41a7-4306-be7e-0a1586d5cf59/35176c02fdd35a534ddec7626d3aee1cb7e6d3e6.roa
File: 35176c02fdd35a534ddec7626d3aee1cb7e6d3e6.roa (raw, json)
Hash identifier: 6+E3FzythRmb+dQV/DwyY1/uP5+nbMypohZSwf/FVvw=
Subject key identifier: C8:22:19:78:52:E4:AB:60:65:04:9C:6E:79:57:C3:ED:9A:51:AC:14
Certificate issuer: /CN=c117f0121a5ef011f07c8d516305c00886bef690
Certificate serial: 136DDB
Authority key identifier: 24:1E:39:F9:68:BC:DD:99:50:0C:5C:BA:D4:E0:4B:D3:21:83:45:71
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c117f0121a5ef011f07c8d516305c00886bef690.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e34bd55e-41a7-4306-be7e-0a1586d5cf59/35176c02fdd35a534ddec7626d3aee1cb7e6d3e6.roa
Signing time: Mon 10 Oct 2022 13:47:57 +0000
ROA not before: Fri 07 Oct 2022 14:52:06 +0000
ROA not after: Mon 07 Oct 2024 14:52:06 +0000
asID: 271947
IP address blocks: 177.74.100.0/22 maxlen: 22
177.74.100.0/23 maxlen: 23
177.74.102.0/23 maxlen: 23
177.74.100.0/24 maxlen: 24
177.74.101.0/24 maxlen: 24
177.74.102.0/24 maxlen: 24
177.74.103.0/24 maxlen: 24
2803:33e0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1273307 (0x136ddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c117f0121a5ef011f07c8d516305c00886bef690
Validity
Not Before: Oct 7 14:52:06 2022 GMT
Not After : Oct 7 14:52:06 2024 GMT
Subject: CN=35176c02fdd35a534ddec7626d3aee1cb7e6d3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9c:c2:ea:36:12:46:0e:8a:fa:2f:6e:4e:7e:
51:52:81:0b:c9:ac:1e:2f:f6:1d:48:f0:31:a3:37:
6e:4e:41:61:25:9d:25:64:5d:a5:0f:81:ad:60:34:
7e:71:07:47:fa:20:f5:f2:e9:74:5e:1f:77:18:d9:
26:57:a5:05:02:f6:d3:dc:30:a0:1d:8f:99:ec:ee:
d1:c3:8d:af:8d:12:3d:7c:7b:86:c6:36:1e:67:16:
42:7e:aa:34:db:1a:ce:6b:df:08:7a:d7:0e:8c:22:
bc:6d:5e:6b:2e:15:96:b0:f3:9a:ec:ec:df:67:5b:
5a:50:33:f4:19:c3:23:5b:46:23:e7:b8:b1:c9:3d:
e7:cb:d9:dd:5a:87:54:1c:f9:09:8e:99:ed:76:f5:
6c:1d:c0:c9:af:21:ae:70:52:65:85:5b:ca:59:8b:
fd:89:13:06:d1:26:96:71:66:91:a3:4b:9c:db:85:
a5:c7:21:48:f6:86:46:56:6a:22:f4:3d:cc:ae:56:
12:b5:6f:3c:15:57:4d:f5:83:bf:05:0e:7f:48:c6:
1e:46:77:8a:63:0a:8d:22:0d:25:b2:b9:dd:89:fb:
86:55:15:5e:29:08:db:f6:3b:cc:78:76:f9:9b:4f:
5d:31:f5:af:10:45:ad:bf:e0:84:82:cb:d0:88:c9:
d5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:22:19:78:52:E4:AB:60:65:04:9C:6E:79:57:C3:ED:9A:51:AC:14
X509v3 Authority Key Identifier:
keyid:24:1E:39:F9:68:BC:DD:99:50:0C:5C:BA:D4:E0:4B:D3:21:83:45:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c117f0121a5ef011f07c8d516305c00886bef690.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e34bd55e-41a7-4306-be7e-0a1586d5cf59/35176c02fdd35a534ddec7626d3aee1cb7e6d3e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e34bd55e-41a7-4306-be7e-0a1586d5cf59/c117f0121a5ef011f07c8d516305c00886bef690.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.74.100.0/22
IPv6:
2803:33e0::/32
Signature Algorithm: sha256WithRSAEncryption
67:b7:f9:2a:d3:e5:6c:2c:e6:6d:8c:f9:0c:2d:5f:9d:30:1e:
6c:1b:4f:44:2b:93:8a:16:59:91:d0:d7:e5:21:b0:fd:04:50:
aa:be:b2:24:00:15:ff:81:aa:bf:26:22:9e:76:05:26:e1:f1:
9a:84:18:ce:de:6a:06:f3:e0:96:3c:ef:5f:da:6c:1e:ee:61:
62:c5:40:45:de:f0:67:de:b2:41:d0:d9:84:d9:e5:86:31:b7:
54:3c:88:e2:00:9b:a9:2e:dd:fe:4d:cc:6a:92:ef:33:fb:a1:
6a:b7:fd:78:03:6a:53:d6:02:9b:86:81:82:2a:c1:af:c0:ae:
4e:93:8a:92:c3:87:f4:91:5f:a3:05:dc:46:a7:54:46:1f:71:
8c:a7:a8:a1:c8:fe:fd:ac:54:aa:2c:e7:bc:62:d2:af:15:f3:
fd:6e:6a:b0:0c:ff:b4:58:42:7b:77:3a:bd:aa:45:22:e2:8d:
ff:1a:47:3f:54:a5:e1:92:af:66:d2:6a:41:bb:8e:f9:59:50:
76:90:e0:2f:fd:76:2a:5f:86:10:6c:47:b5:b7:3f:8b:d1:96:
a8:06:e4:88:3c:5c:2a:85:96:cc:82:d3:32:f1:3b:20:b3:23:
c7:91:58:88:7c:c6:7a:2d:e1:94:62:45:0b:83:0e:6a:e4:e1:
5e:ee:60:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDE23bMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
MTdmMDEyMWE1ZWYwMTFmMDdjOGQ1MTYzMDVjMDA4ODZiZWY2OTAwHhcNMjIxMDA3
MTQ1MjA2WhcNMjQxMDA3MTQ1MjA2WjAzMTEwLwYDVQQDEygzNTE3NmMwMmZkZDM1
YTUzNGRkZWM3NjI2ZDNhZWUxY2I3ZTZkM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk5zC6jYSRg6K+i9uTn5RUoELyaweL/YdSPAxozduTkFhJZ0l
ZF2lD4GtYDR+cQdH+iD18ul0Xh93GNkmV6UFAvbT3DCgHY+Z7O7Rw42vjRI9fHuG
xjYeZxZCfqo02xrOa98IetcOjCK8bV5rLhWWsPOa7OzfZ1taUDP0GcMjW0Yj57ix
yT3ny9ndWodUHPkJjpntdvVsHcDJryGucFJlhVvKWYv9iRMG0SaWcWaRo0uc24Wl
xyFI9oZGVmoi9D3MrlYStW88FVdN9YO/BQ5/SMYeRneKYwqNIg0lsrndifuGVRVe
KQjb9jvMeHb5m09dMfWvEEWtv+CEgsvQiMnV3QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFMgiGXhS5KtgZQScbnlXw+2aUawUMB8GA1UdIwQYMBaAFCQeOflovN2ZUAxc
utTgS9Mhg0VxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzExN2Yw
MTIxYTVlZjAxMWYwN2M4ZDUxNjMwNWMwMDg4NmJlZjY5MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTM0YmQ1NWUtNDFhNy00MzA2LWJlN2UtMGExNTg2
ZDVjZjU5LzM1MTc2YzAyZmRkMzVhNTM0ZGRlYzc2MjZkM2FlZTFjYjdlNmQzZTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMzRiZDU1ZS00MWE3LTQzMDYtYmU3ZS0wYTE1
ODZkNWNmNTkvYzExN2YwMTIxYTVlZjAxMWYwN2M4ZDUxNjMwNWMwMDg4NmJlZjY5
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArFKZDANBAIAAjAHAwUAKAMz4DANBgkqhkiG9w0BAQsFAAOC
AQEAZ7f5KtPlbCzmbYz5DC1fnTAebBtPRCuTihZZkdDX5SGw/QRQqr6yJAAV/4Gq
vyYinnYFJuHxmoQYzt5qBvPgljzvX9psHu5hYsVARd7wZ96yQdDZhNnlhjG3VDyI
4gCbqS7d/k3MapLvM/uharf9eANqU9YCm4aBgirBr8CuTpOKksOH9JFfowXcRqdU
Rh9xjKeoocj+/axUqiznvGLSrxXz/W5qsAz/tFhCe3c6vapFIuKN/xpHP1Sl4ZKv
ZtJqQbuO+VlQdpDgL/12Kl+GEGxHtbc/i9GWqAbkiDxcKoWWzILTMvE7ILMjx5FY
iHzGei3hlGJFC4MOauThXu5gVQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org