Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/1f62db8890074f94ad8b1fc7dfa1a563b4913f0e.roa
File: 1f62db8890074f94ad8b1fc7dfa1a563b4913f0e.roa (raw, json)
Hash identifier: mIJTB8HPrAiCnA6xu5jVEOarAPktEYenFBNKNUg3caI=
Subject key identifier: 13:51:DD:D7:3F:A8:B0:7B:2A:FB:2D:F3:57:79:66:12:15:1D:1A:FD
Certificate issuer: /CN=14544d678d65a7bfc793373410f1c5964d13b336
Certificate serial: 1DF34F
Authority key identifier: 4B:16:E4:2F:F1:48:2A:05:9C:C2:6D:DB:CC:6F:FF:48:DA:6A:3D:B2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14544d678d65a7bfc793373410f1c5964d13b336.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/1f62db8890074f94ad8b1fc7dfa1a563b4913f0e.roa
Signing time: Fri 03 Feb 2023 00:16:56 +0000
ROA not before: Thu 02 Feb 2023 00:14:42 +0000
ROA not after: Mon 03 Feb 2025 00:14:42 +0000
asID: 262196
IP address blocks: 168.121.208.0/22 maxlen: 22
181.118.208.0/20 maxlen: 20
190.4.112.0/20 maxlen: 20
190.184.240.0/20 maxlen: 20
2800:ab0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1962831 (0x1df34f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14544d678d65a7bfc793373410f1c5964d13b336
Validity
Not Before: Feb 2 00:14:42 2023 GMT
Not After : Feb 3 00:14:42 2025 GMT
Subject: CN=1f62db8890074f94ad8b1fc7dfa1a563b4913f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:e2:d8:c5:e2:91:f7:1d:c8:b2:5a:02:ee:
4a:5b:f5:b2:0e:b3:55:63:32:85:d4:13:e5:72:2b:
5e:20:b5:d8:90:70:3f:95:da:a0:bf:95:5c:2a:f0:
db:6b:98:f6:7e:60:59:06:31:69:78:ab:7c:44:4d:
c4:ad:04:95:51:7c:9e:04:4a:cb:a9:f3:4e:8f:ad:
f7:af:53:48:bc:4a:c5:9a:90:4d:dd:1c:7d:d8:9f:
b4:3f:1d:4c:0a:74:bd:30:a1:46:48:2f:1f:a8:a9:
bc:0f:e8:13:fb:9f:33:86:71:fc:8b:03:c8:a5:ab:
4b:93:2f:16:ad:c6:4c:60:03:c4:0f:b6:5d:49:c8:
78:fb:66:53:83:66:84:8e:0c:69:73:6b:9b:de:1a:
15:29:4f:76:73:52:5e:cc:8a:73:cb:b4:b1:4b:17:
15:4c:be:38:32:dc:69:bb:d4:5a:1e:f6:d8:c7:b8:
a8:92:2d:80:7b:de:b7:51:d5:52:c6:59:93:a0:7a:
04:1a:cb:0d:45:9a:f1:bd:ec:8f:83:03:37:78:b2:
be:2d:e4:68:e1:66:6b:d0:ea:37:cd:df:32:53:34:
4f:21:ea:14:e7:a2:40:30:f1:85:d9:2e:c1:5b:21:
d7:d8:2d:36:2c:f6:de:e5:ae:ca:e4:a3:dd:62:d1:
9a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:51:DD:D7:3F:A8:B0:7B:2A:FB:2D:F3:57:79:66:12:15:1D:1A:FD
X509v3 Authority Key Identifier:
keyid:4B:16:E4:2F:F1:48:2A:05:9C:C2:6D:DB:CC:6F:FF:48:DA:6A:3D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14544d678d65a7bfc793373410f1c5964d13b336.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/1f62db8890074f94ad8b1fc7dfa1a563b4913f0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/14544d678d65a7bfc793373410f1c5964d13b336.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.208.0/22
181.118.208.0/20
190.4.112.0/20
190.184.240.0/20
IPv6:
2800:ab0::/32
Signature Algorithm: sha256WithRSAEncryption
06:e8:2f:1d:9e:58:43:5f:92:bc:ac:83:80:33:3a:9b:64:3a:
ce:bd:36:ca:d5:10:02:65:84:dc:2c:af:fe:29:bc:93:e5:e2:
ca:06:69:a6:c5:ad:f4:8c:1e:6e:ce:92:e7:b0:7b:84:81:5b:
19:2e:56:95:bc:9a:93:b1:f5:23:1f:00:7a:ba:85:fb:fe:54:
f2:74:8f:6e:6e:35:da:d7:37:13:f8:17:4c:7d:f7:6f:ab:7e:
34:4a:f9:ef:43:16:f0:da:3c:75:40:81:33:3b:62:44:d7:00:
f0:73:57:84:73:90:19:b3:92:ca:c1:fb:04:21:6f:cf:98:23:
fc:c3:6d:7a:ff:de:67:3d:f3:31:8e:35:73:d8:92:f2:ff:57:
82:a9:75:bd:49:e3:60:21:c1:15:00:ac:db:9a:f2:b9:0b:07:
e0:5a:5d:be:3d:bb:59:52:6c:00:cc:f6:c3:97:fd:fe:29:72:
83:30:33:e1:0d:44:bc:28:fb:a9:13:5b:ef:8f:30:a9:d8:8a:
2d:1b:38:60:11:49:6c:ff:a4:dd:dc:28:e8:e9:07:9b:ca:f4:
be:23:98:dc:b5:80:c3:95:81:a4:16:0a:86:f7:9f:62:8d:d0:
75:c9:c7:eb:02:63:5b:14:3e:13:7b:01:64:97:c4:67:c7:55:
03:43:66:2a
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIDHfNPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE0
NTQ0ZDY3OGQ2NWE3YmZjNzkzMzczNDEwZjFjNTk2NGQxM2IzMzYwHhcNMjMwMjAy
MDAxNDQyWhcNMjUwMjAzMDAxNDQyWjAzMTEwLwYDVQQDEygxZjYyZGI4ODkwMDc0
Zjk0YWQ4YjFmYzdkZmExYTU2M2I0OTEzZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnWXi2MXikfcdyLJaAu5KW/WyDrNVYzKF1BPlciteILXYkHA/
ldqgv5VcKvDba5j2fmBZBjFpeKt8RE3ErQSVUXyeBErLqfNOj633r1NIvErFmpBN
3Rx92J+0Px1MCnS9MKFGSC8fqKm8D+gT+58zhnH8iwPIpatLky8WrcZMYAPED7Zd
Sch4+2ZTg2aEjgxpc2ub3hoVKU92c1JezIpzy7SxSxcVTL44Mtxpu9RaHvbYx7io
ki2Ae963UdVSxlmToHoEGssNRZrxveyPgwM3eLK+LeRo4WZr0Oo3zd8yUzRPIeoU
56JAMPGF2S7BWyHX2C02LPbe5a7K5KPdYtGazQIDAQABo4ICfDCCAngwHQYDVR0O
BBYEFBNR3dc/qLB7Kvst81d5ZhIVHRr9MB8GA1UdIwQYMBaAFEsW5C/xSCoFnMJt
28xv/0jaaj2yMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTQ1NDRk
Njc4ZDY1YTdiZmM3OTMzNzM0MTBmMWM1OTY0ZDEzYjMzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWNiZTA1NGItOWRjZC00OTA0LTk4ODEtYjVjNzE1
M2ViOWEwLzFmNjJkYjg4OTAwNzRmOTRhZDhiMWZjN2RmYTFhNTYzYjQ5MTNmMGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lY2JlMDU0Yi05ZGNkLTQ5MDQtOTg4MS1iNWM3
MTUzZWI5YTAvMTQ1NDRkNjc4ZDY1YTdiZmM3OTMzNzM0MTBmMWM1OTY0ZDEzYjMz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQx
MC8wHgQCAAEwGAMEAqh50AMEBLV20AMEBL4EcAMEBL648DANBAIAAjAHAwUAKAAK
sDANBgkqhkiG9w0BAQsFAAOCAQEABugvHZ5YQ1+SvKyDgDM6m2Q6zr02ytUQAmWE
3Cyv/im8k+XiygZppsWt9Iwebs6S57B7hIFbGS5Wlbyak7H1Ix8AerqF+/5U8nSP
bm412tc3E/gXTH33b6t+NEr570MW8No8dUCBMztiRNcA8HNXhHOQGbOSysH7BCFv
z5gj/MNtev/eZz3zMY41c9iS8v9Xgql1vUnjYCHBFQCs25ryuQsH4Fpdvj27WVJs
AMz2w5f9/ilygzAz4Q1EvCj7qRNb748wqdiKLRs4YBFJbP+k3dwo6OkHm8r0viOY
3LWAw5WBpBYKhvefYo3QdcnH6wJjWxQ+E3sBZJfEZ8dVA0NmKg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:57 2023 by rpki-client on console-ams.rpki-client.org