Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/aa01c7f1dfc7d8a2d9cc6b842d7ddce95d60b2b1.roa
File: aa01c7f1dfc7d8a2d9cc6b842d7ddce95d60b2b1.roa (raw, json)
Hash identifier: IJM300fXwysD6XKI6L1Wk+jVgKN2qdkdzhh2aILHwTg=
Subject key identifier: F0:78:05:B7:26:DD:82:61:D5:C2:21:B5:71:3B:A7:B8:3F:B5:F6:FC
Certificate issuer: /CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Certificate serial: 19EDC3
Authority key identifier: 61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/aa01c7f1dfc7d8a2d9cc6b842d7ddce95d60b2b1.roa
Signing time: Wed 01 Nov 2023 20:21:13 +0000
ROA not before: Wed 01 Nov 2023 20:21:13 +0000
ROA not after: Sat 01 Nov 2025 20:21:13 +0000
asID: 272992
IP address blocks: 131.221.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 28 Feb 2024 16:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1699267 (0x19edc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Validity
Not Before: Nov 1 20:21:13 2023 GMT
Not After : Nov 1 20:21:13 2025 GMT
Subject: CN=aa01c7f1dfc7d8a2d9cc6b842d7ddce95d60b2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c1:54:39:d1:ee:27:f0:49:10:ab:4e:87:d1:
35:3e:73:31:2b:ed:0d:e7:5d:81:9e:ff:5f:3d:1d:
25:01:3b:8c:6b:7d:8f:b9:51:4f:51:4b:9b:7b:3e:
2c:6e:67:d0:4d:89:c2:9b:6d:a1:93:73:a8:19:e0:
1d:85:db:fc:4d:99:21:fe:e3:a3:7d:73:ae:9a:99:
99:f4:95:d8:03:13:69:96:b1:12:9f:92:2a:97:92:
91:b3:1a:26:a9:b9:72:90:ea:66:28:7b:b2:ae:ff:
f6:cd:f4:2d:92:4b:bf:e7:18:25:98:8a:07:1f:56:
78:22:91:b6:7e:99:f5:b7:ec:b0:46:c0:6f:33:c7:
24:a8:78:bf:10:4a:61:bb:e2:f0:87:c4:ae:ee:05:
f1:26:bb:70:6c:ee:30:e3:b7:a4:95:a6:d3:47:9f:
19:05:be:72:3f:00:a7:14:2e:ed:d7:7e:58:fc:44:
48:f6:cd:96:c8:2b:d2:5c:4a:37:e9:43:b5:d4:02:
c4:73:44:9e:77:75:05:33:c6:f5:23:c0:31:e2:1c:
40:9a:12:30:fc:27:6d:39:17:b8:af:d3:52:e1:7d:
4d:11:8b:f3:29:42:38:8d:24:62:d8:84:b3:87:cb:
76:ed:97:61:64:a0:30:80:35:25:e1:23:c1:ed:13:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:78:05:B7:26:DD:82:61:D5:C2:21:B5:71:3B:A7:B8:3F:B5:F6:FC
X509v3 Authority Key Identifier:
keyid:61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/aa01c7f1dfc7d8a2d9cc6b842d7ddce95d60b2b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:31:6b:18:b4:15:a6:c0:58:d3:d1:c4:5b:e2:2e:af:c1:a3:
6a:54:a3:af:92:8c:11:2a:43:9c:17:5b:24:18:09:a6:0a:bf:
28:94:88:60:13:92:d7:a4:64:6b:da:4d:3d:1a:04:cf:6c:1e:
ab:eb:40:09:42:f1:1e:c7:8f:43:17:2d:0f:86:5a:4c:09:b2:
6f:42:65:97:07:53:c1:ba:aa:0d:8a:e1:ba:66:b1:a4:fc:15:
74:e1:fd:b1:fd:25:bb:cb:c4:c4:5f:9c:3d:3e:f8:19:40:2c:
70:5c:bf:4c:c9:80:37:7d:b6:54:ce:43:7a:93:65:9d:69:7b:
08:0e:04:da:99:fb:d7:a2:00:71:00:20:4c:c0:cf:c4:b4:4f:
b7:e0:cb:e0:08:12:05:30:0b:78:5a:2a:5a:87:b7:a9:f0:28:
c3:da:46:97:bd:51:9d:5f:61:cb:d5:a5:48:f8:f0:2a:de:6e:
e7:3d:2c:5e:21:c5:84:4f:28:d3:d5:d0:79:db:d2:d4:d0:2e:
4b:12:c5:38:9b:eb:ce:1f:8f:f0:1e:99:bc:4a:e7:80:2e:a3:
6d:24:21:b8:75:a5:02:8e:2c:1d:01:26:64:80:9a:51:99:6b:
be:8a:a6:7f:6a:69:6d:3b:70:ad:1e:ae:5e:fc:70:dc:02:bc:
43:10:02:8a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGe3DMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM3
NGUwYzdjMTBlM2NhMmU3ZDE5NDVlYWQ2YTllZTRjZDA0NThmNmMwHhcNMjMxMTAx
MjAyMTEzWhcNMjUxMTAxMjAyMTEzWjAzMTEwLwYDVQQDEyhhYTAxYzdmMWRmYzdk
OGEyZDljYzZiODQyZDdkZGNlOTVkNjBiMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhMFUOdHuJ/BJEKtOh9E1PnMxK+0N512Bnv9fPR0lATuMa32P
uVFPUUubez4sbmfQTYnCm22hk3OoGeAdhdv8TZkh/uOjfXOumpmZ9JXYAxNplrES
n5Iql5KRsxomqblykOpmKHuyrv/2zfQtkku/5xglmIoHH1Z4IpG2fpn1t+ywRsBv
M8ckqHi/EEphu+Lwh8Su7gXxJrtwbO4w47eklabTR58ZBb5yPwCnFC7t135Y/ERI
9s2WyCvSXEo36UO11ALEc0Sed3UFM8b1I8Ax4hxAmhIw/CdtORe4r9NS4X1NEYvz
KUI4jSRi2ISzh8t27ZdhZKAwgDUl4SPB7RMb+wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPB4Bbcm3YJh1cIhtXE7p7g/tfb8MB8GA1UdIwQYMBaAFGHuxv3CzC/O3OD3
LHLHVCyTDfbFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzc0ZTBj
N2MxMGUzY2EyZTdkMTk0NWVhZDZhOWVlNGNkMDQ1OGY2Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDk4NWU2NjctZGE5Zi00ZjE1LWFjZmYtNTlhMzY2
NjAzN2JlL2FhMDFjN2YxZGZjN2Q4YTJkOWNjNmI4NDJkN2RkY2U5NWQ2MGIyYjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wOTg1ZTY2Ny1kYTlmLTRmMTUtYWNmZi01OWEz
NjY2MDM3YmUvMzc0ZTBjN2MxMGUzY2EyZTdkMTk0NWVhZDZhOWVlNGNkMDQ1OGY2
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoPdKDANBgkqhkiG9w0BAQsFAAOCAQEAjTFrGLQVpsBY09HE
W+Iur8GjalSjr5KMESpDnBdbJBgJpgq/KJSIYBOS16Rka9pNPRoEz2weq+tACULx
HsePQxctD4ZaTAmyb0JllwdTwbqqDYrhumaxpPwVdOH9sf0lu8vExF+cPT74GUAs
cFy/TMmAN322VM5DepNlnWl7CA4E2pn716IAcQAgTMDPxLRPt+DL4AgSBTALeFoq
Woe3qfAow9pGl71RnV9hy9WlSPjwKt5u5z0sXiHFhE8o09XQedvS1NAuSxLFOJvr
zh+P8B6ZvErngC6jbSQhuHWlAo4sHQEmZICaUZlrvoqmf2ppbTtwrR6uXvxw3AK8
QxACig==
-----END CERTIFICATE-----
Generated at Wed Feb 28 20:08:10 2024 by rpki-client on console-ams.rpki-client.org