Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/d8c7906517f6d65816ca6e27061c6c8e68290bd2.roa
File: d8c7906517f6d65816ca6e27061c6c8e68290bd2.roa (raw, json)
Hash identifier: uv+ynoF9aH1ZslCdANIuUS1TTzaRR/LXDIQuJ2h7N1Q=
Subject key identifier: FE:A8:3B:25:7A:9F:64:FD:04:38:B1:79:A8:60:EA:B9:65:20:BF:F8
Certificate issuer: /CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Certificate serial: 108E73
Authority key identifier: B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/d8c7906517f6d65816ca6e27061c6c8e68290bd2.roa
Signing time: Wed 01 Mar 2023 15:03:04 +0000
ROA not before: Thu 31 Mar 2022 03:00:00 +0000
ROA not after: Mon 01 Apr 2024 03:00:00 +0000
asID: 265817
IP address blocks: 131.196.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 08:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1085043 (0x108e73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Validity
Not Before: Mar 31 03:00:00 2022 GMT
Not After : Apr 1 03:00:00 2024 GMT
Subject: CN=d8c7906517f6d65816ca6e27061c6c8e68290bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:42:08:88:4e:d7:f2:60:d0:df:04:c9:0f:
f1:ce:15:37:bb:b0:61:9a:ed:e7:7f:50:f6:11:23:
56:2f:8e:9a:d4:a8:51:39:d2:4f:96:e6:90:38:dd:
e3:50:74:9f:68:59:ec:91:b9:98:8a:b9:68:75:e5:
9d:6c:e9:15:03:5b:74:17:00:c0:16:4f:51:c9:4e:
ba:30:e2:0b:e1:8c:ea:74:3c:1d:d7:dd:ea:b5:29:
90:4c:fd:b0:41:92:0c:0d:77:bd:1e:90:d7:60:40:
19:83:fd:e1:67:ad:1d:37:c4:85:18:dd:02:bb:d5:
84:cc:7d:d1:a6:b2:d5:40:12:a7:5b:e9:9a:cc:f9:
e3:8e:ec:a8:18:02:9c:e3:28:8d:9d:a7:23:aa:08:
14:20:2b:91:cd:09:fc:a3:be:88:1f:fb:86:51:74:
a9:0a:e7:4c:fc:b4:66:b9:df:a7:af:20:b2:61:df:
2b:09:65:53:99:3e:c0:a0:4f:8a:45:27:ec:7a:9c:
32:3b:cd:73:4d:e4:eb:f8:d5:de:13:26:7c:27:64:
9c:f6:be:1c:8c:8e:af:51:18:5e:b2:15:8c:07:39:
88:ca:22:58:aa:da:6a:b2:fc:0e:3c:45:a1:3a:90:
cd:07:ad:cb:75:8f:64:94:ad:07:e2:ad:e2:00:03:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A8:3B:25:7A:9F:64:FD:04:38:B1:79:A8:60:EA:B9:65:20:BF:F8
X509v3 Authority Key Identifier:
keyid:B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/d8c7906517f6d65816ca6e27061c6c8e68290bd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/e8fffda6ca924f9f16686182b1a4d40171f239c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.82.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:20:14:b9:72:88:d5:b5:e7:10:ba:e7:58:3c:e4:7c:f9:59:
29:59:4c:70:85:97:e5:12:fe:f4:88:4a:7f:41:29:c4:3b:ab:
48:47:3b:d3:0e:11:59:96:4b:35:05:4b:69:8e:41:b2:30:21:
62:25:38:a8:5d:74:3a:90:96:9e:fb:6b:28:60:bf:e6:e4:31:
d4:21:da:55:c5:fd:e5:62:e8:b7:b1:c3:89:e8:74:ce:b6:31:
3e:0a:c7:ba:f5:53:2d:5e:1f:aa:14:82:22:27:4c:68:a6:4f:
00:1d:81:60:87:b6:e3:45:c1:30:6b:ee:f5:24:58:5d:65:c2:
f8:2b:a3:51:07:1c:fc:ee:e3:01:f7:47:eb:5e:9c:78:b7:f8:
36:71:71:9b:37:f9:3b:bf:fc:25:18:a3:0f:8d:6e:74:5f:58:
de:60:bd:4e:4a:30:29:40:39:76:7b:1a:d0:33:f2:6d:53:29:
e1:15:1c:c1:f8:18:92:6c:d5:2e:de:2d:7f:6c:77:5d:54:fc:
46:a9:48:be:5d:0c:86:bf:8d:2d:4e:20:15:4c:3d:ca:74:45:
10:9d:e6:3a:5f:b8:06:71:6c:e8:90:af:23:93:5d:3f:98:ab:
25:b0:bc:d6:10:6e:0b:19:fa:03:01:1c:40:16:e0:c2:d8:8a:
c2:0d:a6:7b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEI5zMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU4
ZmZmZGE2Y2E5MjRmOWYxNjY4NjE4MmIxYTRkNDAxNzFmMjM5YzEwHhcNMjIwMzMx
MDMwMDAwWhcNMjQwNDAxMDMwMDAwWjAzMTEwLwYDVQQDEyhkOGM3OTA2NTE3ZjZk
NjU4MTZjYTZlMjcwNjFjNmM4ZTY4MjkwYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnaFCCIhO1/Jg0N8EyQ/xzhU3u7Bhmu3nf1D2ESNWL46a1KhR
OdJPluaQON3jUHSfaFnskbmYirlodeWdbOkVA1t0FwDAFk9RyU66MOIL4YzqdDwd
193qtSmQTP2wQZIMDXe9HpDXYEAZg/3hZ60dN8SFGN0Cu9WEzH3RprLVQBKnW+ma
zPnjjuyoGAKc4yiNnacjqggUICuRzQn8o76IH/uGUXSpCudM/LRmud+nryCyYd8r
CWVTmT7AoE+KRSfsepwyO81zTeTr+NXeEyZ8J2Sc9r4cjI6vURheshWMBzmIyiJY
qtpqsvwOPEWhOpDNB63LdY9klK0H4q3iAAOFSwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFP6oOyV6n2T9BDixeahg6rllIL/4MB8GA1UdIwQYMBaAFLiCJ5zaYRvfggV8
BdwiymcW1T3iMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZThmZmZk
YTZjYTkyNGY5ZjE2Njg2MTgyYjFhNGQ0MDE3MWYyMzljMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzk2Y2UzZWItYjcyMS00NmQwLWIxNTQtZDNkNDdk
ZjI2OTUwL2Q4Yzc5MDY1MTdmNmQ2NTgxNmNhNmUyNzA2MWM2YzhlNjgyOTBiZDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83OTZjZTNlYi1iNzIxLTQ2ZDAtYjE1NC1kM2Q0
N2RmMjY5NTAvZThmZmZkYTZjYTkyNGY5ZjE2Njg2MTgyYjFhNGQ0MDE3MWYyMzlj
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIPEUjANBgkqhkiG9w0BAQsFAAOCAQEAPiAUuXKI1bXnELrn
WDzkfPlZKVlMcIWX5RL+9IhKf0EpxDurSEc70w4RWZZLNQVLaY5BsjAhYiU4qF10
OpCWnvtrKGC/5uQx1CHaVcX95WLot7HDieh0zrYxPgrHuvVTLV4fqhSCIidMaKZP
AB2BYIe240XBMGvu9SRYXWXC+CujUQcc/O7jAfdH616ceLf4NnFxmzf5O7/8JRij
D41udF9Y3mC9TkowKUA5dnsa0DPybVMp4RUcwfgYkmzVLt4tf2x3XVT8RqlIvl0M
hr+NLU4gFUw9ynRFEJ3mOl+4BnFs6JCvI5NdP5irJbC81hBuCxn6AwEcQBbgwtiK
wg2mew==
-----END CERTIFICATE-----
Generated at Sun Mar 31 16:34:05 2024 by rpki-client on console-fra.rpki-client.org