Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9e80b33c358c17a563d86d2dfc543f4c734c72d4.roa
File: 9e80b33c358c17a563d86d2dfc543f4c734c72d4.roa (raw, json)
Hash identifier: h4Hp7Lgb7kRA92qmDyhO+ZxSqw3J2lT4leQyNqvFM+A=
Subject key identifier: 87:3C:CF:23:06:8A:AD:B0:E0:00:E8:74:04:94:12:CB:AF:E0:77:49
Certificate issuer: /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial: 1E22C0
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9e80b33c358c17a563d86d2dfc543f4c734c72d4.roa
Signing time: Mon 08 May 2023 17:10:34 +0000
ROA not before: Sun 07 May 2023 17:10:30 +0000
ROA not after: Thu 08 May 2025 17:10:30 +0000
asID: 18734
IP address blocks: 189.204.235.0/24 maxlen: 24
189.204.236.0/24 maxlen: 24
189.204.250.0/24 maxlen: 24
189.202.128.0/17 maxlen: 24
189.202.248.0/23 maxlen: 24
189.202.251.0/24 maxlen: 24
189.202.252.0/24 maxlen: 24
189.204.200.0/24 maxlen: 24
200.57.16.0/20 maxlen: 24
201.148.0.0/18 maxlen: 24
201.148.64.0/19 maxlen: 24
189.204.128.0/17 maxlen: 24
189.202.211.0/24 maxlen: 24
189.202.229.0/24 maxlen: 24
168.197.120.0/22 maxlen: 24
189.202.144.0/24 maxlen: 24
200.33.74.0/24 maxlen: 24
200.33.84.0/24 maxlen: 24
201.140.80.0/20 maxlen: 24
201.140.96.0/19 maxlen: 24
200.57.0.0/20 maxlen: 24
189.202.181.0/24 maxlen: 24
189.202.182.0/24 maxlen: 24
200.57.8.0/24 maxlen: 24
200.57.10.0/24 maxlen: 24
2001:1278:5::/48 maxlen: 48
2001:1278:6::/47 maxlen: 48
2001:1278:8::/45 maxlen: 48
2001:1278::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1974976 (0x1e22c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Validity
Not Before: May 7 17:10:30 2023 GMT
Not After : May 8 17:10:30 2025 GMT
Subject: CN=9e80b33c358c17a563d86d2dfc543f4c734c72d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9b:a1:cb:b8:c7:96:e3:96:12:6c:aa:9a:9a:
f5:6e:26:c6:95:30:16:c2:96:ee:10:c6:b5:a9:d5:
5b:b9:e6:ad:75:7c:50:55:43:78:6c:39:d0:54:53:
f4:48:a2:37:ce:e5:81:3e:89:61:67:b2:6a:a2:07:
8d:db:77:00:38:e1:fd:e3:93:90:09:75:63:9c:a7:
e2:4e:ff:ea:29:78:29:99:33:b2:8d:04:4f:22:cc:
cc:46:e0:40:02:88:8d:cb:47:3e:78:17:10:99:a6:
aa:ba:ea:5d:09:f6:4a:47:3d:b6:c3:d3:a3:25:4e:
23:6e:ad:92:a4:48:7e:3a:ce:5b:15:78:a2:8b:71:
ce:32:ff:cb:53:ce:11:0b:97:6b:6d:08:8a:c2:01:
f1:cb:cf:f4:65:97:85:c2:f3:cf:2d:56:cf:04:ed:
07:93:4c:12:d8:93:ca:8e:b8:a5:8f:02:21:c3:47:
79:b5:25:45:22:71:d0:01:dd:68:3c:db:e8:4d:1b:
bc:8c:ab:0f:8e:04:64:09:9a:2a:34:43:22:c1:0e:
7e:2c:9d:97:3b:2a:89:43:d9:ff:5a:b6:ca:b2:87:
28:ec:37:c9:6d:45:74:d8:65:55:ea:08:9a:0e:08:
fc:17:93:60:36:b3:3a:0c:db:8f:0e:a2:bc:a6:b2:
89:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3C:CF:23:06:8A:AD:B0:E0:00:E8:74:04:94:12:CB:AF:E0:77:49
X509v3 Authority Key Identifier:
keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9e80b33c358c17a563d86d2dfc543f4c734c72d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.120.0/22
189.202.128.0/17
189.204.128.0/17
200.33.74.0/24
200.33.84.0/24
200.57.0.0/19
201.140.80.0-201.140.127.255
201.148.0.0-201.148.95.255
IPv6:
2001:1278::/32
Signature Algorithm: sha256WithRSAEncryption
7c:d9:2f:a2:9e:63:e2:94:d8:6f:f0:2f:c4:96:4b:ce:c4:b3:
f7:31:c5:5b:3f:4f:b2:5d:24:9a:cc:fd:88:8b:02:95:66:59:
3b:b4:2b:20:a6:76:04:59:31:39:1f:b6:e7:3f:3c:d6:43:de:
b3:6f:3b:3a:c0:90:32:c8:3b:f2:34:0e:a6:14:a4:9e:c0:0c:
bc:47:7b:18:f4:5a:a9:44:35:d0:19:78:54:d8:48:98:6f:f9:
5f:98:12:43:72:55:c2:21:8e:a2:05:5f:ce:99:a4:c5:34:36:
2f:c2:b4:57:0e:b0:bb:13:0f:7f:3e:3b:9d:0e:63:ec:f7:f8:
ce:d1:d7:7c:71:9e:9c:86:8f:48:27:06:73:57:43:a4:53:ac:
6c:6f:02:07:bf:95:8c:f6:f7:f5:9c:1d:5d:59:b9:1b:1a:e3:
a6:33:8c:53:d5:b1:53:13:24:38:ac:5a:15:41:57:70:c1:fe:
9b:7f:7b:f3:b2:cb:0c:a4:49:16:3f:71:7c:16:e3:29:d4:aa:
e6:1c:1b:29:9a:56:85:2e:4b:b5:c3:98:cd:48:e4:cf:e9:c9:
a5:b3:5b:dc:70:da:c4:42:95:7f:c4:24:9e:20:29:a2:63:55:
6f:c0:32:3b:f6:1c:ea:96:92:fc:80:04:c3:4a:04:95:ec:8c:
05:87:ab:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net