Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS6332.roa
File: AS6332.roa (raw, json)
Hash identifier: HtO37w4tSif9fesmb5FHzuvmysL8AGerzfiyPJyP4QE=
Subject key identifier: E5:1E:C0:9B:8E:3B:01:CF:1B:4C:89:34:2D:C7:11:EA:90:A7:13:EE
Certificate issuer: /CN=C868DC422443FA70E7761C0304061EB998BF7378
Certificate serial: 7956AE47251F9487EAF0B3302695A6074F9AC027
Authority key identifier: C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS6332.roa
Signing time: Tue 05 Mar 2024 18:06:10 +0000
ROA not before: Tue 05 Mar 2024 18:01:10 +0000
ROA not after: Tue 04 Mar 2025 18:06:10 +0000
asID: 6332
IP address blocks: 200.33.141.0/24 maxlen: 24
200.33.142.0/24 maxlen: 24
200.33.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 23:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:56:ae:47:25:1f:94:87:ea:f0:b3:30:26:95:a6:07:4f:9a:c0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C868DC422443FA70E7761C0304061EB998BF7378
Validity
Not Before: Mar 5 18:01:10 2024 GMT
Not After : Mar 4 18:06:10 2025 GMT
Subject: CN=E51EC09B8E3B01CF1B4C89342DC711EA90A713EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:07:b2:ba:46:f6:25:6f:48:9a:2c:2d:55:
f3:66:e5:8e:96:bc:75:35:c6:0f:5c:7e:bb:e2:ad:
e3:9a:35:3a:0d:3f:4d:e1:a4:af:7c:07:85:5e:b4:
1c:dd:68:cc:52:3d:bf:29:08:23:c3:27:27:bf:c5:
db:6c:99:b9:c7:4b:19:72:66:8c:2f:85:9b:74:22:
92:92:d5:9c:43:a4:a0:b9:77:12:11:25:e2:cc:69:
35:56:57:de:17:5e:2e:01:e9:c6:d3:12:3d:c1:a9:
96:6b:ec:06:67:d0:a6:b4:13:78:e8:3d:55:95:12:
f5:d6:d6:00:8f:e2:9b:7b:14:a8:87:bb:85:23:85:
46:c5:81:9b:67:7c:9b:1d:d5:ed:e1:5d:22:a0:56:
de:f1:3f:d6:30:52:56:59:56:4d:7a:2e:c7:d2:e8:
24:b2:9e:5f:dd:9b:05:be:50:7f:d9:ca:1e:59:ef:
03:04:a3:bd:83:fa:59:5d:d3:34:a5:2a:62:b5:d1:
20:1e:2f:f3:0d:7c:f9:05:29:45:20:6e:b7:9b:1d:
b0:82:39:1e:d4:c7:68:87:30:ae:89:0e:94:e3:61:
42:98:1b:06:64:cd:3a:a9:63:6f:db:44:cf:44:d6:
ed:b6:1b:90:4d:92:ba:df:30:dc:5a:d1:8f:c5:00:
b4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1E:C0:9B:8E:3B:01:CF:1B:4C:89:34:2D:C7:11:EA:90:A7:13:EE
X509v3 Authority Key Identifier:
keyid:C8:68:DC:42:24:43:FA:70:E7:76:1C:03:04:06:1E:B9:98:BF:73:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/C868DC422443FA70E7761C0304061EB998BF7378.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C868DC422443FA70E7761C0304061EB998BF7378.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3B87C93929EA1BE951549B8B74A3800C64833E85BE9D523BBA8EC24E94339AED/0/AS6332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.141.0-200.33.143.255
Signature Algorithm: sha256WithRSAEncryption
4e:52:69:49:d7:ec:1f:bf:59:92:84:8b:1a:4e:9d:c9:11:58:
62:e4:50:74:bb:c0:0d:3f:c7:1d:e2:f5:bf:83:f8:7b:28:a6:
b4:28:6f:f3:1e:8f:b1:92:31:62:88:2e:95:91:d7:81:d3:f3:
fd:1a:ba:0d:8a:66:d2:8c:95:86:f6:9b:9a:c9:85:e7:08:ff:
a0:c6:b3:de:e4:d7:7a:59:fc:70:c0:91:76:b3:18:dd:28:82:
8f:c6:b8:d3:52:3f:a2:d9:b7:a6:e5:d8:67:bb:0f:ac:b7:94:
b6:72:8a:ad:8f:60:4d:f5:ed:9c:25:1a:c4:35:ac:4b:49:7b:
dc:80:24:27:41:13:ef:c4:a3:d8:89:16:cc:75:0b:df:16:a1:
06:d6:d5:c8:ef:a5:90:e1:21:c7:19:3d:a0:10:1d:2f:c7:95:
b7:f4:39:f8:da:a0:df:00:25:d0:e1:63:68:91:0a:f2:94:69:
be:6e:61:89:ed:8a:10:de:80:86:cb:9e:32:58:0b:30:82:64:
de:97:b4:62:07:4f:77:f1:15:7c:d5:78:1b:15:a5:a6:63:1e:
5b:e3:fd:b6:b7:eb:cb:15:de:3a:d5:d2:96:ad:27:c1:41:26:
4d:0f:04:94:4b:d2:a3:f2:f6:a8:29:ae:40:27:fa:3b:77:b5:
e2:7c:82:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 04:21:14 2024 by rpki-client on console.sobornost.net