Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/25d3f716232b99f08425849ec3f21c3ae1017228.roa
File: 25d3f716232b99f08425849ec3f21c3ae1017228.roa (raw, json)
Hash identifier: IR64r3Th8Jqr6gJ1SNq4vWwi7aPt/zBNN0fXcnduriM=
Subject key identifier: A8:48:D7:A8:9E:3D:BE:CC:4C:8A:DD:C1:F0:C4:BB:75:5A:7E:3D:71
Certificate issuer: /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial: 1E09C1
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/25d3f716232b99f08425849ec3f21c3ae1017228.roa
Signing time: Mon 08 May 2023 17:10:31 +0000
ROA not before: Sun 07 May 2023 17:10:30 +0000
ROA not after: Thu 08 May 2025 17:10:30 +0000
asID: 18734
IP address blocks: 201.148.16.0/24 maxlen: 24
189.202.211.0/24 maxlen: 24
189.204.250.0/24 maxlen: 24
189.202.229.0/24 maxlen: 24
189.202.128.0/17 maxlen: 24
189.202.144.0/24 maxlen: 24
189.202.248.0/24 maxlen: 24
189.202.251.0/24 maxlen: 24
189.202.252.0/24 maxlen: 24
200.57.8.0/24 maxlen: 24
200.57.10.0/24 maxlen: 24
2001:1278:8::/45 maxlen: 48
2001:1278:5::/48 maxlen: 48
2001:1278:6::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1968577 (0x1e09c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Validity
Not Before: May 7 17:10:30 2023 GMT
Not After : May 8 17:10:30 2025 GMT
Subject: CN=25d3f716232b99f08425849ec3f21c3ae1017228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:73:0c:8a:ec:41:c8:cf:70:57:b9:93:60:
b7:3a:dd:13:42:7e:d9:e4:51:10:46:9c:31:50:78:
b0:3e:67:30:5b:83:5a:53:39:d1:86:90:1a:04:0c:
7c:c1:c9:e6:1e:06:f1:fb:18:3b:f6:83:80:b9:0a:
51:86:37:03:47:d1:b8:cb:64:be:c3:47:85:74:52:
22:99:7b:a8:6a:31:59:a7:e2:5d:c5:9b:34:6c:7c:
af:e5:4e:4b:8b:47:a6:28:ad:86:65:d6:b2:75:4f:
45:97:5f:d6:54:a3:ef:9b:1a:77:2f:c4:da:78:4f:
da:cd:3d:ac:a7:61:ba:7b:93:4c:5b:6d:a1:a2:04:
9c:1b:23:1b:57:00:89:07:58:51:9b:bd:f2:0b:a5:
76:8b:54:4f:79:d3:e4:52:8f:cb:54:4a:54:fd:39:
30:aa:ab:af:b2:11:24:61:61:f2:f8:06:e5:81:e0:
31:e0:3e:b4:72:df:db:61:94:9e:0e:26:61:c1:12:
87:c8:d4:f0:6c:0c:21:c7:b1:38:68:33:bc:cb:d7:
2b:67:65:e6:30:a2:7d:ca:f9:65:c1:99:ab:08:c7:
0c:47:34:ed:26:e1:75:3c:ce:77:1d:3f:c9:4f:54:
7b:1f:b4:ec:6c:92:0d:25:f0:d9:dd:22:23:2a:0d:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:48:D7:A8:9E:3D:BE:CC:4C:8A:DD:C1:F0:C4:BB:75:5A:7E:3D:71
X509v3 Authority Key Identifier:
keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/25d3f716232b99f08425849ec3f21c3ae1017228.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.202.128.0/17
189.204.250.0/24
200.57.8.0/24
200.57.10.0/24
201.148.16.0/24
IPv6:
2001:1278:5::-2001:1278:6:ffff:ffff:ffff:ffff:ffff
2001:1278:8::/45
Signature Algorithm: sha256WithRSAEncryption
0a:1f:63:3d:d4:29:d8:46:e9:36:58:e3:06:60:4d:90:81:30:
25:12:b5:b7:f1:f4:34:03:21:c5:b4:c5:5b:8a:64:d7:b8:26:
69:ec:4e:49:df:4d:18:01:75:d3:4e:b0:a3:13:08:27:86:20:
3e:81:89:f2:96:85:91:42:5d:57:3e:12:ba:5b:4f:dd:09:bd:
61:83:00:af:77:f0:79:68:e7:23:b7:cb:5e:ed:68:df:6d:24:
ef:77:88:c5:7a:dc:03:10:97:6c:54:6e:22:6a:a9:82:ad:39:
cd:ac:f3:42:05:a2:33:dd:8b:c0:c9:c0:97:85:63:0b:a5:55:
cb:a5:16:6d:93:b1:24:18:2a:82:55:03:86:64:8e:a9:46:a5:
9a:9b:eb:c8:ce:93:70:3a:cb:1f:4a:af:fe:56:b2:cc:fd:6c:
23:18:16:03:84:d9:71:37:3e:b4:55:b4:8e:d8:f7:90:65:c4:
fb:dd:20:67:57:d2:27:74:ab:d6:1e:b6:70:dd:1e:25:df:9e:
2e:69:67:ca:db:5b:69:b6:1f:f0:0e:b1:21:b2:50:a3:95:2b:
d2:0f:b1:26:ea:18:4d:7b:50:6c:77:a3:ed:b5:c9:cc:09:ef:
5b:bc:c5:9b:0d:d2:d4:15:3d:91:db:f8:0a:0c:19:c6:d8:4a:
a0:b3:a0:31
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIDHgnBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk3
ODNhYzliYWQyYjdiOTIyZjY0OGM5MGU4ODFiZjQ0OTc4MDY5YWQwHhcNMjMwNTA3
MTcxMDMwWhcNMjUwNTA4MTcxMDMwWjAzMTEwLwYDVQQDEygyNWQzZjcxNjIzMmI5
OWYwODQyNTg0OWVjM2YyMWMzYWUxMDE3MjI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlBxzDIrsQcjPcFe5k2C3Ot0TQn7Z5FEQRpwxUHiwPmcwW4Na
UznRhpAaBAx8wcnmHgbx+xg79oOAuQpRhjcDR9G4y2S+w0eFdFIimXuoajFZp+Jd
xZs0bHyv5U5Li0emKK2GZdaydU9Fl1/WVKPvmxp3L8TaeE/azT2sp2G6e5NMW22h
ogScGyMbVwCJB1hRm73yC6V2i1RPedPkUo/LVEpU/TkwqquvshEkYWHy+AblgeAx
4D60ct/bYZSeDiZhwRKHyNTwbAwhx7E4aDO8y9crZ2XmMKJ9yvllwZmrCMcMRzTt
JuF1PM53HT/JT1R7H7TsbJINJfDZ3SIjKg0DvQIDAQABo4ICmDCCApQwHQYDVR0O
BBYEFKhI16iePb7MTIrdwfDEu3Vafj1xMB8GA1UdIwQYMBaAFMqL6Qa6lrLFhJ+G
RkANLQxgDZdgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTc4M2Fj
OWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTBjNGI0YTAtNjQxNy00YTdjLTg3NTgtOWU2ZjRi
MGU5Njc5LzI1ZDNmNzE2MjMyYjk5ZjA4NDI1ODQ5ZWMzZjIxYzNhZTEwMTcyMjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMGM0YjRhMC02NDE3LTRhN2MtODc1OC05ZTZm
NGIwZTk2NzkvOTc4M2FjOWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBggrBgEFBQcBBwEB/wRN
MEswJAQCAAEwHgMEB73KgAMEAL3M+gMEAMg5CAMEAMg5CgMEAMmUEDAjBAIAAjAd
MBIDBwAgARJ4AAUDBwAgARJ4AAYDBwMgARJ4AAgwDQYJKoZIhvcNAQELBQADggEB
AAofYz3UKdhG6TZY4wZgTZCBMCUStbfx9DQDIcW0xVuKZNe4JmnsTknfTRgBddNO
sKMTCCeGID6BifKWhZFCXVc+ErpbT90JvWGDAK938Hlo5yO3y17taN9tJO93iMV6
3AMQl2xUbiJqqYKtOc2s80IFojPdi8DJwJeFYwulVculFm2TsSQYKoJVA4ZkjqlG
pZqb68jOk3A6yx9Kr/5Wssz9bCMYFgOE2XE3PrRVtI7Y95BlxPvdIGdX0id0q9Ye
tnDdHiXfni5pZ8rbW2m2H/AOsSGyUKOVK9IPsSbqGE17UGx3o+21ycwJ71u8xZsN
0tQVPZHb+AoMGcbYSqCzoDE=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net