Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9dd1b3586d450593f630b1d938a9d70e54355a40.roa
File: 9dd1b3586d450593f630b1d938a9d70e54355a40.roa (raw, json)
Hash identifier: xt7G2ysjsF4gFYGMm2kbVh3bMLZpRdoZUouUGPXXajA=
Subject key identifier: D8:06:93:D4:C8:2C:27:CC:32:B2:18:7E:D8:14:8E:68:7D:6F:00:8A
Certificate issuer: /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial: 1E0D8A
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9dd1b3586d450593f630b1d938a9d70e54355a40.roa
Signing time: Mon 08 May 2023 17:10:31 +0000
ROA not before: Sun 07 May 2023 17:10:30 +0000
ROA not after: Thu 08 May 2025 17:10:30 +0000
asID: 18734
IP address blocks: 201.148.16.0/24 maxlen: 24
189.202.211.0/24 maxlen: 24
189.202.229.0/24 maxlen: 24
189.202.128.0/17 maxlen: 24
189.202.144.0/24 maxlen: 24
189.202.248.0/24 maxlen: 24
189.202.251.0/24 maxlen: 24
189.202.252.0/24 maxlen: 24
200.57.8.0/24 maxlen: 24
200.57.10.0/24 maxlen: 24
2001:1278:e::/47 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1969546 (0x1e0d8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Validity
Not Before: May 7 17:10:30 2023 GMT
Not After : May 8 17:10:30 2025 GMT
Subject: CN=9dd1b3586d450593f630b1d938a9d70e54355a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:f7:b9:66:6a:18:01:11:81:9d:b2:af:cb:
e1:00:12:a4:c3:df:11:0c:04:45:9b:31:79:6d:f0:
13:70:28:61:29:2d:0e:a9:87:9b:4e:17:dc:6e:7b:
d9:89:00:ee:2b:9b:15:95:47:dd:02:45:d4:b4:8e:
40:46:e5:d8:5e:c6:ad:9c:f8:a2:54:92:36:a8:74:
4b:49:5d:2e:3a:b0:f3:74:cb:0d:9f:77:b9:41:38:
78:4c:ca:ae:07:9f:bb:30:8b:b8:c2:a6:7f:78:9c:
4d:45:fc:ac:16:c4:39:f0:3b:8b:10:26:bb:d8:d6:
41:d4:da:83:d1:3e:e2:90:ec:ec:f4:84:fa:68:96:
d1:5e:d4:78:43:5c:06:23:bf:f4:f4:46:d9:6a:3a:
5e:df:9e:f4:b7:db:5f:0d:18:57:11:43:93:62:37:
a6:2a:40:1e:ee:55:d5:d5:9e:d0:26:bd:39:c3:f1:
67:9b:92:01:03:67:0c:89:5c:76:b4:8d:22:a1:58:
8c:70:5a:51:fb:5f:20:4b:3f:a6:be:67:c2:a9:ef:
64:1a:2b:b8:3d:a9:f5:33:53:18:ae:17:f8:f1:19:
dc:5c:d3:cc:55:ad:34:2e:83:6b:de:60:dc:95:04:
8d:02:5f:93:74:00:a8:d0:53:5c:b0:fb:83:45:1c:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:06:93:D4:C8:2C:27:CC:32:B2:18:7E:D8:14:8E:68:7D:6F:00:8A
X509v3 Authority Key Identifier:
keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9dd1b3586d450593f630b1d938a9d70e54355a40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.202.128.0/17
200.57.8.0/24
200.57.10.0/24
201.148.16.0/24
IPv6:
2001:1278:e::/47
Signature Algorithm: sha256WithRSAEncryption
28:22:c8:3f:a7:6e:f1:0d:e6:ac:51:7d:bd:a2:d2:82:e1:b1:
7e:d9:27:c3:a9:03:71:74:1d:e6:e3:79:ad:5e:c6:30:13:08:
fc:68:69:41:7a:9d:d7:1f:90:01:86:d8:98:8d:39:89:2b:c5:
34:88:5f:08:b8:8a:0a:09:e1:ae:6c:e9:3d:cc:8e:b0:18:76:
0a:be:5b:2a:56:2e:b3:27:7b:4a:00:ae:fb:e4:65:e3:41:41:
be:f8:97:c0:e2:89:83:bf:8c:79:99:84:20:e7:27:0c:24:b4:
85:94:65:6f:bd:c8:1a:d3:63:2c:74:a5:a9:a9:be:49:c3:7d:
c5:bf:9f:33:1d:95:42:72:66:de:1d:0c:c2:9c:7f:e1:cd:df:
ff:76:43:5c:6a:24:54:40:40:f0:4c:91:90:53:a7:c1:08:f0:
3f:69:be:6a:d6:dc:a6:84:bf:84:fc:3b:83:0b:1e:04:dc:6b:
76:e8:cd:51:50:ab:32:36:37:0c:0e:54:0a:68:7c:0f:fb:40:
16:38:41:03:a8:d2:ed:af:24:75:2a:4a:27:9f:65:d7:4b:35:
40:2d:1e:fe:fc:68:fd:ce:fb:70:b0:9f:39:ba:e7:44:35:04:
28:4c:6d:ad:b8:6c:83:45:93:a7:25:ad:d4:0a:0b:a1:a8:9d:
1b:13:fa:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net