Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/34cef8bb22359f3347d2171f58027b8981645de4.roa
File: 34cef8bb22359f3347d2171f58027b8981645de4.roa (raw, json)
Hash identifier: FMs3cLCH7XGI+WyCV5J77WIp8IHvk+RxU4bTLiEqnwM=
Subject key identifier: 8F:23:8E:C4:36:23:6F:39:FB:C6:DE:71:CE:33:81:83:66:F5:48:5C
Certificate issuer: /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial: 1AAC68
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/34cef8bb22359f3347d2171f58027b8981645de4.roa
Signing time: Mon 03 Oct 2022 19:29:28 +0000
ROA not before: Mon 03 Oct 2022 19:27:39 +0000
ROA not after: Thu 03 Oct 2024 20:27:39 +0000
asID: 6306
IP address blocks: 186.24.0.0/22 maxlen: 22
186.24.4.0/22 maxlen: 22
186.24.8.0/22 maxlen: 22
186.24.12.0/22 maxlen: 22
186.24.16.0/20 maxlen: 20
186.24.32.0/20 maxlen: 20
186.24.48.0/20 maxlen: 20
186.24.64.0/20 maxlen: 20
186.24.128.0/18 maxlen: 18
186.24.192.0/18 maxlen: 18
186.24.250.0/24 maxlen: 24
186.25.128.0/17 maxlen: 17
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1748072 (0x1aac68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Validity
Not Before: Oct 3 19:27:39 2022 GMT
Not After : Oct 3 20:27:39 2024 GMT
Subject: CN=34cef8bb22359f3347d2171f58027b8981645de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:27:d5:04:23:ce:5b:16:c4:42:3a:70:6d:
6f:7f:ce:09:fa:22:3a:89:0e:4b:b2:ad:33:ae:78:
84:ff:a1:0f:5a:24:34:56:c0:4f:58:2c:71:b3:62:
bd:f0:c9:1b:b4:44:f1:56:c5:02:61:30:76:39:82:
c9:c3:ad:c1:f0:19:d5:43:33:77:2e:ea:a7:ec:b5:
c2:b0:b0:2c:09:19:0e:2d:a1:44:e7:94:c9:e6:eb:
04:f0:2f:92:6b:5c:f3:2b:d1:b9:c5:17:c9:05:c3:
e4:83:5d:95:ed:dd:49:2f:b1:ed:bc:44:58:c9:72:
f2:2f:ae:67:ed:20:e9:a6:d4:39:8d:68:29:61:9f:
f9:e2:48:5a:d0:53:04:1f:75:a9:1c:15:b0:6b:da:
16:73:d5:1d:49:b1:93:e4:2a:42:6b:10:0f:8b:ee:
98:b8:13:9c:01:fa:38:25:c5:a8:ca:f2:a7:04:e3:
e3:68:cf:9b:8c:82:9b:b0:36:4f:10:8e:be:ab:a3:
37:e5:88:b0:d7:84:c1:1c:c0:75:ef:81:6d:af:23:
23:74:5e:88:ae:71:48:c9:fb:be:f6:3c:4d:ac:e7:
8a:fe:02:89:62:ff:85:2d:09:e4:98:15:9e:5e:fa:
6c:e2:de:6d:a8:1e:93:a5:b7:84:9d:ea:a2:df:10:
60:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:23:8E:C4:36:23:6F:39:FB:C6:DE:71:CE:33:81:83:66:F5:48:5C
X509v3 Authority Key Identifier:
keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/34cef8bb22359f3347d2171f58027b8981645de4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.24.0.0-186.24.79.255
186.24.128.0/17
186.25.128.0/17
Signature Algorithm: sha256WithRSAEncryption
08:89:bf:ac:66:ec:76:e8:17:87:dc:73:a8:26:d3:77:e3:9a:
fc:76:af:1d:9a:0e:ac:13:b9:a9:26:74:96:b8:b9:6b:e4:9f:
64:55:ed:de:9f:70:25:42:d7:69:3b:c9:ad:42:04:dd:fd:b9:
81:c3:5f:6e:5c:07:9c:a8:c1:c0:f2:6a:7a:6b:8b:8d:30:a5:
c5:8b:0c:a9:cb:51:2c:06:74:79:96:bb:e1:bc:dc:f8:7a:4d:
5f:29:6a:5e:f0:12:3d:ae:18:79:b6:6b:8f:5e:e6:16:8f:55:
2e:be:10:87:e8:70:bf:76:12:e9:88:db:3b:17:3c:af:76:21:
79:36:33:a4:dd:c7:ee:36:2e:1e:3b:7c:38:4f:07:90:00:dd:
3f:13:b9:b1:fa:05:2e:9b:69:f8:bb:d4:b6:73:6c:cc:92:ef:
5e:bf:ef:d2:c0:ba:b0:5b:24:32:97:07:75:da:ac:db:53:f4:
65:da:01:f5:f9:d2:ae:35:97:b8:81:bf:b0:ca:75:14:90:b7:
2a:5a:4b:ab:71:03:f7:5a:52:dc:96:02:bc:d8:07:59:cf:74:
46:09:20:14:e9:9a:6f:61:a8:cc:e3:d6:e3:b8:e9:7f:8e:52:
15:87:df:4c:ef:81:c7:57:c0:92:e4:cf:f5:fd:b8:4b:1a:23:
e8:7f:46:2f
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIDGqxoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM2
OWI5OWZjMmQyZWVmYmRiNzViYTY2M2Q1NzVhMTBhYzg0Zjc4YzEwHhcNMjIxMDAz
MTkyNzM5WhcNMjQxMDAzMjAyNzM5WjAzMTEwLwYDVQQDEygzNGNlZjhiYjIyMzU5
ZjMzNDdkMjE3MWY1ODAyN2I4OTgxNjQ1ZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvtsn1QQjzlsWxEI6cG1vf84J+iI6iQ5Lsq0zrniE/6EPWiQ0
VsBPWCxxs2K98MkbtETxVsUCYTB2OYLJw63B8BnVQzN3Luqn7LXCsLAsCRkOLaFE
55TJ5usE8C+Sa1zzK9G5xRfJBcPkg12V7d1JL7HtvERYyXLyL65n7SDpptQ5jWgp
YZ/54kha0FMEH3WpHBWwa9oWc9UdSbGT5CpCaxAPi+6YuBOcAfo4JcWoyvKnBOPj
aM+bjIKbsDZPEI6+q6M35Yiw14TBHMB174FtryMjdF6IrnFIyfu+9jxNrOeK/gKJ
Yv+FLQnkmBWeXvps4t5tqB6TpbeEneqi3xBgLQIDAQABo4ICbjCCAmowHQYDVR0O
BBYEFI8jjsQ2I285+8becc4zgYNm9UhcMB8GA1UdIwQYMBaAFCYyOkvAn0pmklw0
56DNBZ6h7QU7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzY5Yjk5
ZmMyZDJlZWZiZGI3NWJhNjYzZDU3NWExMGFjODRmNzhjMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjA0MzM0YTYtOGU1Ni00OTAzLTkwZjAtMWE4OTdm
YzkzNWM1LzM0Y2VmOGJiMjIzNTlmMzM0N2QyMTcxZjU4MDI3Yjg5ODE2NDVkZTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMDQzMzRhNi04ZTU2LTQ5MDMtOTBmMC0xYTg5
N2ZjOTM1YzUvYzY5Yjk5ZmMyZDJlZWZiZGI3NWJhNjYzZDU3NWExMGFjODRmNzhj
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAyBggrBgEFBQcBBwEB/wQj
MCEwHwQCAAEwGTALAwMDuhgDBAS6GEADBAe6GIADBAe6GYAwDQYJKoZIhvcNAQEL
BQADggEBAAiJv6xm7HboF4fcc6gm03fjmvx2rx2aDqwTuakmdJa4uWvkn2RV7d6f
cCVC12k7ya1CBN39uYHDX25cB5yowcDyanpri40wpcWLDKnLUSwGdHmWu+G83Ph6
TV8pal7wEj2uGHm2a49e5haPVS6+EIfocL92EumI2zsXPK92IXk2M6Tdx+42Lh47
fDhPB5AA3T8TubH6BS6bafi71LZzbMyS716/79LAurBbJDKXB3XarNtT9GXaAfX5
0q41l7iBv7DKdRSQtypaS6txA/daUtyWArzYB1nPdEYJIBTpmm9hqMzj1uO46X+O
UhWH30zvgcdXwJLkz/X9uEsaI+h/Ri8=
-----END CERTIFICATE-----
Generated at Tue Aug 15 20:54:58 2023 by rpki-client on console-fra.rpki-client.org