![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2b030d66-8387-4c3a-8d3f-84ab0449b6f0/dca148592d6dc0c6680b17055fa72c1d236739ef.roa
File: dca148592d6dc0c6680b17055fa72c1d236739ef.roa (raw, json)
Hash identifier: fDybuE0g9TxfOExP84NrKVxY1OKJUBk25WfVaGLuCRU=
Subject key identifier: F0:D9:1B:FB:C3:9E:01:92:DD:38:C9:36:82:EE:2F:85:1F:3A:71:B9
Certificate issuer: /CN=bb9edf01828f3707ed8a3a1dda7972aaab536846
Certificate serial: 04E9B7
Authority key identifier: BB:54:12:68:D5:9B:3B:F5:EC:27:82:89:1A:37:96:7D:C3:F7:49:EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb9edf01828f3707ed8a3a1dda7972aaab536846.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2b030d66-8387-4c3a-8d3f-84ab0449b6f0/dca148592d6dc0c6680b17055fa72c1d236739ef.roa
Signing time: Thu 06 Jan 2022 17:50:43 +0000
ROA not before: Wed 16 Jun 2021 03:00:00 +0000
ROA not after: Thu 16 Jun 2033 03:00:00 +0000
asID: 264619
IP address blocks: 143.202.96.0/22 maxlen: 24
2803:7e40::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321975 (0x4e9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9edf01828f3707ed8a3a1dda7972aaab536846
Validity
Not Before: Jun 16 03:00:00 2021 GMT
Not After : Jun 16 03:00:00 2033 GMT
Subject: CN=dca148592d6dc0c6680b17055fa72c1d236739ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:6c:43:b4:48:74:c0:b8:5a:ac:47:d1:d7:
ea:b7:05:bd:ea:08:3e:51:c3:b6:80:e9:de:6f:0f:
95:06:86:50:26:02:28:9a:90:63:c6:75:2d:23:c8:
c6:b6:4c:d2:c8:4d:60:0b:50:7d:cf:eb:80:97:30:
f9:32:96:47:d1:dd:30:40:ed:c6:86:09:54:83:e9:
9f:23:14:1e:ef:f0:90:e6:db:7c:42:b8:a3:0c:34:
b5:0b:62:5e:83:9d:c2:d4:49:9e:82:6f:84:d5:b3:
65:2f:8d:a9:7a:c7:20:79:96:75:43:12:fd:07:d5:
c3:8c:14:43:66:65:ee:43:7b:5e:cc:63:6d:8d:e6:
a2:59:dd:73:e3:48:c7:59:a5:87:de:7e:89:b3:c8:
82:b7:ae:08:73:6e:c4:e7:b5:a4:04:4a:3e:29:21:
a9:75:25:19:43:ba:0b:65:ab:12:d4:0e:0f:8d:a5:
ca:12:32:02:32:f3:5c:68:dd:33:a2:a0:0c:23:40:
72:04:bd:72:32:cf:aa:b6:33:d0:24:a0:56:02:7d:
82:b1:7d:8b:a8:01:f3:a7:99:d6:1c:26:db:e1:7e:
b1:74:47:6b:5a:4d:7b:d2:4f:60:1e:c9:02:20:e5:
23:05:41:12:49:c3:75:b7:8d:1c:de:a4:cd:b8:7c:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D9:1B:FB:C3:9E:01:92:DD:38:C9:36:82:EE:2F:85:1F:3A:71:B9
X509v3 Authority Key Identifier:
keyid:BB:54:12:68:D5:9B:3B:F5:EC:27:82:89:1A:37:96:7D:C3:F7:49:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb9edf01828f3707ed8a3a1dda7972aaab536846.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2b030d66-8387-4c3a-8d3f-84ab0449b6f0/dca148592d6dc0c6680b17055fa72c1d236739ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2b030d66-8387-4c3a-8d3f-84ab0449b6f0/bb9edf01828f3707ed8a3a1dda7972aaab536846.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.96.0/22
IPv6:
2803:7e40::/32
Signature Algorithm: sha256WithRSAEncryption
5d:9c:54:79:6d:db:62:bc:df:2a:f3:a8:fe:3a:f7:72:f0:fe:
19:9e:5c:1c:f9:37:d4:4a:6d:db:d8:3e:55:2e:90:78:4e:80:
80:64:8f:ab:05:6f:52:cd:43:28:66:98:3b:f4:88:b2:b8:4b:
ad:04:fa:b1:0a:cc:97:0b:3e:4f:95:33:6c:aa:d3:68:bf:99:
ad:30:fd:17:78:a5:64:47:cb:1c:da:5b:5d:fe:5a:e8:2b:40:
19:d6:30:b0:7e:3b:0d:ac:ad:e5:d2:0d:20:1e:dc:e5:3b:6c:
18:aa:e3:0a:c8:37:a2:bf:20:05:65:58:ed:87:54:60:75:e7:
4a:30:b2:b6:90:3e:3c:4a:be:fe:90:e0:2d:96:5c:95:5f:2a:
49:e6:c0:d4:b3:27:41:10:e9:3d:dd:86:46:ba:a6:6f:bc:c6:
90:8c:62:4d:7c:0d:16:6a:6a:c9:1b:e2:57:c7:0a:40:aa:a5:
8e:ab:91:c5:f7:b1:61:0c:a6:32:13:55:3a:f1:00:a6:1d:83:
13:ba:a6:ef:0b:2c:47:00:c2:e7:dc:e6:9c:30:44:55:f4:1d:
47:1d:35:62:ce:40:03:6d:9b:da:df:17:29:7b:e2:60:97:ab:
e0:86:0b:50:c4:a4:7c:be:ab:93:e0:1b:9c:37:47:9f:79:09:
e1:b8:f3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 00:45:42 2023 by rpki-client on console-ams.rpki-client.org