Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3230382e302f32312d3231203d3e203133393939.roa
File: 3230312e3135392e3230382e302f32312d3231203d3e203133393939.roa (raw, json)
Hash identifier: 5tfntWsU2K5eneei5BERDG/IZ1kn5Q/HKMhnROhcIfk=
Subject key identifier: 40:57:30:93:C5:80:F2:1D:E3:91:AC:69:86:A6:3D:CD:D9:2E:3B:6C
Certificate issuer: /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial: 10C00CF0D8C1A354F4C7C42DB849D47E555FDFDB
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3230382e302f32312d3231203d3e203133393939.roa
Signing time: Tue 05 Mar 2024 17:50:53 +0000
ROA not before: Tue 05 Mar 2024 17:45:53 +0000
ROA not after: Tue 04 Mar 2025 17:50:53 +0000
asID: 13999
IP address blocks: 201.159.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c0:0c:f0:d8:c1:a3:54:f4:c7:c4:2d:b8:49:d4:7e:55:5f:df:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Validity
Not Before: Mar 5 17:45:53 2024 GMT
Not After : Mar 4 17:50:53 2025 GMT
Subject: CN=40573093C580F21DE391AC6986A63DCDD92E3B6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:16:f1:5f:ef:fd:42:49:66:eb:56:39:59:
20:62:be:6c:00:b1:5a:3d:ad:cd:dd:7f:ed:7c:aa:
98:28:66:fa:b5:27:d2:a4:0e:54:f9:e5:7d:f6:25:
ee:03:f9:c1:a8:c1:28:89:6a:6d:cb:a5:ea:f0:eb:
37:7d:01:f3:2b:d4:c7:e2:c0:67:88:68:bd:8d:75:
89:cc:60:eb:35:14:ef:a1:45:5b:81:90:e5:eb:0a:
69:aa:0d:9d:8a:8e:d9:0a:1c:0f:9f:86:af:34:00:
c5:ab:a2:9a:74:26:a7:21:ec:5d:9d:17:c4:13:e3:
45:99:2e:e0:98:75:50:66:dc:d4:77:f2:e4:7c:00:
ff:e9:c3:bd:22:24:6e:ee:68:49:2c:d9:d2:bc:e2:
73:64:37:3c:a3:05:b1:3c:50:7d:c0:ea:74:73:01:
55:5e:36:c3:f9:2a:7c:50:3a:c2:e8:c9:20:fd:a2:
67:2c:80:41:93:b3:4a:f4:d4:70:af:d9:88:49:fc:
73:83:1a:5f:f5:65:8c:42:8a:77:da:dd:f4:30:37:
69:2f:1a:3d:61:d1:b4:18:e5:b6:74:4d:10:81:eb:
52:de:f7:aa:4b:54:a6:d5:14:72:80:b2:1a:dc:ce:
c1:22:cd:67:63:87:65:5d:0e:ae:30:e7:c8:3c:a6:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:57:30:93:C5:80:F2:1D:E3:91:AC:69:86:A6:3D:CD:D9:2E:3B:6C
X509v3 Authority Key Identifier:
keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3230382e302f32312d3231203d3e203133393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.208.0/21
Signature Algorithm: sha256WithRSAEncryption
32:48:8c:d5:49:c6:79:9c:2f:9f:73:ea:b2:a6:af:5f:74:c6:
03:24:e5:0f:20:84:0d:50:80:88:58:7c:26:23:9f:96:9a:5e:
06:83:1d:b6:06:79:86:4e:f0:39:5f:3d:1f:0c:2c:58:ab:2a:
cf:cf:e6:64:d3:15:f9:83:5f:bd:36:75:00:80:fa:a7:8a:cb:
02:e9:c5:40:33:af:4c:d3:82:59:be:00:c2:21:03:c6:a9:d9:
d9:bd:53:f0:45:92:d1:c5:b2:a3:d2:ec:9e:af:e7:68:11:0f:
58:2b:16:18:9c:d0:53:38:c8:48:78:ae:ca:ec:e7:a6:68:7c:
86:07:3b:d2:b7:04:6f:81:da:c3:6a:ab:79:76:ac:45:19:5b:
88:d2:6b:9c:0c:55:c2:d5:be:95:38:73:dc:96:fc:85:de:ae:
14:88:53:27:22:e5:40:8c:55:11:9e:d9:8d:1f:59:41:dc:c1:
e8:2d:30:9e:65:e0:5c:36:9a:fc:78:45:58:50:ae:7d:8c:4b:
8b:2c:b4:d2:03:56:e2:f8:27:2f:f0:71:02:c4:69:da:e9:75:
71:34:58:fe:2f:14:da:41:f3:5f:1f:c3:e4:58:0f:e8:45:e6:
64:d7:6b:b3:8b:8b:a9:b5:b0:66:a4:7f:a6:c7:99:77:52:0d:
24:96:90:0d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEMAM8NjBo1T0x8QtuEnUflVf39swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAxRjVDNzUzRUZEQjdGODQ3NkM2M0JCQjQxNDE3QjhF
MTk0QTJBMzAeFw0yNDAzMDUxNzQ1NTNaFw0yNTAzMDQxNzUwNTNaMDMxMTAvBgNV
BAMTKDQwNTczMDkzQzU4MEYyMURFMzkxQUM2OTg2QTYzRENERDkyRTNCNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoIBbxX+/9Qklm61Y5WSBivmwA
sVo9rc3df+18qpgoZvq1J9KkDlT55X32Je4D+cGowSiJam3Lperw6zd9AfMr1Mfi
wGeIaL2NdYnMYOs1FO+hRVuBkOXrCmmqDZ2KjtkKHA+fhq80AMWropp0Jqch7F2d
F8QT40WZLuCYdVBm3NR38uR8AP/pw70iJG7uaEks2dK84nNkNzyjBbE8UH3A6nRz
AVVeNsP5KnxQOsLoySD9omcsgEGTs0r01HCv2YhJ/HODGl/1ZYxCinfa3fQwN2kv
Gj1h0bQY5bZ0TRCB61Le96pLVKbVFHKAshrczsEizWdjh2VdDq4w58g8piwPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQFcwk8WA8h3jkaxphqY9zdkuO2wwHwYDVR0j
BBgwFoAUwB9cdT79t/hHbGO7tBQXuOGUoqMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQzAxRjVDNzUzRUZEQjdG
ODQ3NkM2M0JCQjQxNDE3QjhFMTk0QTJBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DMDFGNUM3NTNFRkRCN0Y4NDc2
QzYzQkJCNDE0MTdCOEUxOTRBMkEzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxNTY4RDhDOUFERERDQTNDRTc3MDM5NzI3N0Q1Mzk2QjYzMTc0REIw
QzdCMDhCNTc4NjMzQkMzMjY3RTE0Ny8wLzMyMzAzMTJlMzEzNTM5MmUzMjMwMzgy
ZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMTMzMzkzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyZ/Q
MA0GCSqGSIb3DQEBCwUAA4IBAQAySIzVScZ5nC+fc+qypq9fdMYDJOUPIIQNUICI
WHwmI5+Wml4Ggx22BnmGTvA5Xz0fDCxYqyrPz+Zk0xX5g1+9NnUAgPqnissC6cVA
M69M04JZvgDCIQPGqdnZvVPwRZLRxbKj0uyer+doEQ9YKxYYnNBTOMhIeK7K7Oem
aHyGBzvStwRvgdrDaqt5dqxFGVuI0mucDFXC1b6VOHPclvyF3q4UiFMnIuVAjFUR
ntmNH1lB3MHoLTCeZeBcNpr8eEVYUK59jEuLLLTSA1bi+Ccv8HECxGna6XVxNFj+
LxTaQfNfH8PkWA/oReZk12uzi4uptbBmpH+mx5l3Ug0klpAN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org