Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/66d8a4d902ace35e86090ea8ae5c0de9ec217b96.roa
File: 66d8a4d902ace35e86090ea8ae5c0de9ec217b96.roa (raw, json)
Hash identifier: 1MsriiZlAGOqgkd7Eu+XJ/VKqorudeMpKTHjIatZ+34=
Subject key identifier: 65:3D:5E:ED:F4:04:E3:32:F8:94:81:43:4D:0A:32:EF:01:BB:A8:E2
Certificate issuer: /CN=877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b
Certificate serial: 0D7F1D
Authority key identifier: 44:33:AF:4C:AC:32:C0:87:C7:18:0E:6D:CE:36:41:99:FB:41:31:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/66d8a4d902ace35e86090ea8ae5c0de9ec217b96.roa
Signing time: Wed 24 Mar 2021 14:40:45 +0000
ROA not before: Wed 24 Mar 2021 14:40:44 +0000
ROA not after: Tue 24 Mar 2026 14:40:44 +0000
asID: 265657
IP address blocks: 2803:46c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 11 Jan 2024 23:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884509 (0xd7f1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b
Validity
Not Before: Mar 24 14:40:44 2021 GMT
Not After : Mar 24 14:40:44 2026 GMT
Subject: CN=66d8a4d902ace35e86090ea8ae5c0de9ec217b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:44:d8:a1:7b:1f:11:96:af:11:e6:26:af:
dc:4e:20:2a:9e:8b:f1:7b:f9:b0:fc:8d:87:8a:cd:
9b:84:6b:01:ba:c3:5b:17:29:45:b2:f3:d8:75:5c:
c3:2f:13:b7:4c:55:5a:48:58:44:a5:83:48:c4:06:
9e:8e:36:3d:9f:e2:df:cc:ae:ef:c4:f1:94:97:86:
ec:51:4e:18:36:10:ef:d0:d6:90:a3:b7:a0:a3:32:
c7:4a:ad:b3:53:d8:a9:2b:6d:9d:ae:84:7f:44:66:
32:02:56:56:a0:b9:4d:ec:57:ad:30:23:4d:ed:2e:
fb:19:cd:b9:04:97:d7:d6:7c:ae:1f:dc:59:ab:8c:
19:07:be:16:cb:93:e9:b4:4e:b5:6c:cc:c6:b6:7a:
40:c8:bf:27:1e:24:31:92:c1:0b:c3:83:ad:a1:aa:
fa:d9:55:5f:cb:99:79:f6:55:7c:4f:80:a8:ec:c4:
9c:5c:e2:54:5a:e6:4b:27:93:ab:fa:cf:da:80:70:
62:b1:89:63:65:e0:3c:8e:81:89:b7:38:c3:d9:fe:
ce:e4:4f:1b:83:a0:6a:cc:eb:86:85:d5:ce:85:b3:
f7:dd:27:cc:bf:7b:67:d0:ae:1a:1f:98:c6:ab:53:
da:d7:d4:90:f0:8c:b6:0d:d7:0b:66:2d:cd:82:75:
10:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3D:5E:ED:F4:04:E3:32:F8:94:81:43:4D:0A:32:EF:01:BB:A8:E2
X509v3 Authority Key Identifier:
keyid:44:33:AF:4C:AC:32:C0:87:C7:18:0E:6D:CE:36:41:99:FB:41:31:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/66d8a4d902ace35e86090ea8ae5c0de9ec217b96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:46c0::/32
Signature Algorithm: sha256WithRSAEncryption
26:c3:d3:a4:90:06:53:27:90:55:79:7c:e3:fa:b4:34:a4:74:
c2:e8:d3:33:c7:63:5c:11:25:ee:76:8f:8c:73:e9:65:35:94:
6b:53:a6:c0:0c:b9:4e:a3:84:02:fc:a5:c1:f6:74:ca:e5:a9:
4a:1a:e7:12:1d:dd:39:2e:37:6b:aa:3b:31:15:48:e3:e7:91:
09:b2:98:11:83:31:60:4d:ff:72:ca:d2:37:92:48:70:e8:d2:
37:63:7e:4d:12:d0:e7:96:1b:12:7d:e2:a1:54:f8:ff:00:72:
b6:c1:f1:e2:49:87:f5:94:b4:2b:55:37:fe:ba:16:d1:2f:02:
6b:b8:e9:45:d7:ed:24:75:a5:98:ac:30:26:de:ea:ab:38:bf:
fb:59:69:95:ff:34:8e:85:3a:c1:17:79:76:ec:09:03:0d:76:
53:e8:ad:2e:ab:79:b2:49:c6:b6:fc:e9:16:57:3b:82:2f:73:
6a:f9:fb:19:32:91:0a:b0:61:d8:8b:12:6f:36:9c:3a:01:48:
43:47:0b:fc:c1:24:8f:93:3b:b9:6b:b6:91:e6:fc:d0:72:66:
4e:0d:80:c0:2d:1f:c9:cc:99:bf:13:08:1a:34:2c:0b:61:d1:
81:03:95:47:96:2e:45:6c:e1:e9:63:61:ad:66:29:fe:07:51:
8c:81:63:eb
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDX8dMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg3
N2FjNDA5YzE1YWI5YWZiMjNlYTBlMmQzZjFjN2M2M2I3NmM5OGIwHhcNMjEwMzI0
MTQ0MDQ0WhcNMjYwMzI0MTQ0MDQ0WjAzMTEwLwYDVQQDEyg2NmQ4YTRkOTAyYWNl
MzVlODYwOTBlYThhZTVjMGRlOWVjMjE3Yjk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvlZE2KF7HxGWrxHmJq/cTiAqnovxe/mw/I2His2bhGsBusNb
FylFsvPYdVzDLxO3TFVaSFhEpYNIxAaejjY9n+LfzK7vxPGUl4bsUU4YNhDv0NaQ
o7egozLHSq2zU9ipK22droR/RGYyAlZWoLlN7FetMCNN7S77Gc25BJfX1nyuH9xZ
q4wZB74Wy5PptE61bMzGtnpAyL8nHiQxksELw4Otoar62VVfy5l59lV8T4Co7MSc
XOJUWuZLJ5Or+s/agHBisYljZeA8joGJtzjD2f7O5E8bg6BqzOuGhdXOhbP33SfM
v3tn0K4aH5jGq1Pa19SQ8Iy2DdcLZi3NgnUQawIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFGU9Xu30BOMy+JSBQ00KMu8Bu6jiMB8GA1UdIwQYMBaAFEQzr0ysMsCHxxgO
bc42QZn7QTE5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODc3YWM0
MDljMTVhYjlhZmIyM2VhMGUyZDNmMWM3YzYzYjc2Yzk4Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTBkMzc5OTItODZiNy00NGU4LWIwOTctNDc3ZGQz
NWQzNWY0LzY2ZDhhNGQ5MDJhY2UzNWU4NjA5MGVhOGFlNWMwZGU5ZWMyMTdiOTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MGQzNzk5Mi04NmI3LTQ0ZTgtYjA5Ny00Nzdk
ZDM1ZDM1ZjQvODc3YWM0MDljMTVhYjlhZmIyM2VhMGUyZDNmMWM3YzYzYjc2Yzk4
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDRsAwDQYJKoZIhvcNAQELBQADggEBACbD06SQBlMnkFV5
fOP6tDSkdMLo0zPHY1wRJe52j4xz6WU1lGtTpsAMuU6jhAL8pcH2dMrlqUoa5xId
3TkuN2uqOzEVSOPnkQmymBGDMWBN/3LK0jeSSHDo0jdjfk0S0OeWGxJ94qFU+P8A
crbB8eJJh/WUtCtVN/66FtEvAmu46UXX7SR1pZisMCbe6qs4v/tZaZX/NI6FOsEX
eXbsCQMNdlPorS6rebJJxrb86RZXO4Ivc2r5+xkykQqwYdiLEm82nDoBSENHC/zB
JI+TO7lrtpHm/NByZk4NgMAtH8nMmb8TCBo0LAth0YEDlUeWLkVs4eljYa1mKf4H
UYyBY+s=
-----END CERTIFICATE-----
Generated at Fri Jan 12 01:11:56 2024 by rpki-client on console-fra.rpki-client.org