Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/5f9e86b4cc2b36df44bd4063a5539474813025c4.roa
File: 5f9e86b4cc2b36df44bd4063a5539474813025c4.roa (raw, json)
Hash identifier: UhhtUCMPzspfvrqk62TQZdakle30hCClmxjSmI4Z+5k=
Subject key identifier: 64:77:26:12:A2:9B:41:15:65:74:5D:9D:0B:56:CE:0C:BF:59:80:97
Certificate issuer: /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial: 157DCF
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/5f9e86b4cc2b36df44bd4063a5539474813025c4.roa
Signing time: Fri 29 Dec 2023 03:40:01 +0000
ROA not before: Fri 29 Dec 2023 03:40:00 +0000
ROA not after: Mon 29 Dec 2025 03:40:00 +0000
asID: 198980
IP address blocks: 201.217.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1408463 (0x157dcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
Validity
Not Before: Dec 29 03:40:00 2023 GMT
Not After : Dec 29 03:40:00 2025 GMT
Subject: CN=5f9e86b4cc2b36df44bd4063a5539474813025c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:13:9d:e7:5e:63:ed:49:2a:74:7e:63:92:
9c:04:1b:65:b0:8a:fd:78:a1:6b:92:aa:73:92:c3:
ed:f0:c8:84:c0:50:dd:40:fa:96:b8:82:37:b7:07:
a1:03:2b:d4:e1:71:62:64:e6:0b:32:3a:be:3d:6c:
c4:29:b1:2c:8f:df:ef:03:46:90:af:50:9c:a6:63:
76:b6:d0:92:f9:e7:53:8d:19:dc:6e:6e:13:03:7c:
d3:ed:6f:0b:db:b3:a9:48:13:e9:7b:f4:5c:85:a3:
78:1e:46:ae:2b:51:38:b2:15:85:49:66:fa:1c:33:
3b:87:98:48:fc:2b:66:8d:41:1e:1f:53:55:8c:c8:
db:61:ca:7f:57:2d:8b:4e:cf:e5:0b:af:43:2a:30:
8e:d4:9f:52:a3:09:bc:33:ec:44:51:2c:ba:c8:35:
43:d1:fc:67:57:28:20:3f:bb:57:75:b8:26:e9:bf:
39:d6:56:44:f4:53:f8:f8:af:95:78:a9:ed:a1:25:
b9:0f:c4:e8:2b:6f:92:e5:0f:87:87:ef:a8:24:5f:
84:83:6b:2b:a0:3b:21:45:ee:29:5e:32:74:63:c4:
66:01:ef:8a:80:dd:4f:25:1b:cb:19:5b:b1:ce:5e:
a0:7f:26:ad:36:1d:e6:fb:f3:47:5d:81:a0:d5:ac:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:77:26:12:A2:9B:41:15:65:74:5D:9D:0B:56:CE:0C:BF:59:80:97
X509v3 Authority Key Identifier:
keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/5f9e86b4cc2b36df44bd4063a5539474813025c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.20.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d6:4b:56:67:9c:bf:52:2d:13:b0:13:57:cc:d6:81:71:76:
0f:ce:3f:51:c2:3b:c9:73:c9:54:bc:ef:41:ed:56:02:4c:aa:
10:d9:aa:99:9d:a5:bb:d6:49:24:04:b5:a7:0b:28:0d:9f:e3:
f6:60:ee:8d:f4:eb:f6:ae:31:f4:74:4f:0c:ea:7f:2e:77:da:
34:16:ae:4d:ee:32:d3:93:02:f2:0c:bd:c3:c0:38:f0:ca:65:
fc:bc:fd:0e:46:33:52:3e:9b:09:8c:61:ae:4c:82:83:4b:c6:
b8:4a:52:5f:d7:d7:eb:9b:f5:11:67:41:34:cb:96:c7:da:b9:
44:86:f8:b4:17:94:6e:dd:d9:5a:3f:d3:b7:c5:95:f8:a3:ff:
dd:b7:c4:81:85:a4:28:09:ea:36:37:9a:ea:71:24:c1:a6:63:
de:9f:a3:3f:28:cc:ae:1e:58:88:5f:b3:5b:96:cf:0f:02:3b:
b5:b9:e4:24:af:67:51:6a:cb:35:4d:c8:14:78:d8:5d:c7:82:
7f:0a:b3:e7:a8:53:7c:5f:80:59:0b:ad:d7:b8:d3:12:d7:bc:
62:68:1f:de:5f:66:e6:42:01:8a:c8:66:24:e3:c1:b8:be:43:
58:d5:52:ea:31:65:bb:15:9a:52:04:76:89:fc:41:ed:63:6c:
46:fb:8e:aa
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFX3PMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
NjlmYjM4N2JlZmM5NmYwMTlkMDE0YzZlNTIzNGQwOTU1NTUzYTkwHhcNMjMxMjI5
MDM0MDAwWhcNMjUxMjI5MDM0MDAwWjAzMTEwLwYDVQQDEyg1ZjllODZiNGNjMmIz
NmRmNDRiZDQwNjNhNTUzOTQ3NDgxMzAyNWM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzCoTnedeY+1JKnR+Y5KcBBtlsIr9eKFrkqpzksPt8MiEwFDd
QPqWuII3twehAyvU4XFiZOYLMjq+PWzEKbEsj9/vA0aQr1CcpmN2ttCS+edTjRnc
bm4TA3zT7W8L27OpSBPpe/RchaN4HkauK1E4shWFSWb6HDM7h5hI/CtmjUEeH1NV
jMjbYcp/Vy2LTs/lC69DKjCO1J9Sowm8M+xEUSy6yDVD0fxnVyggP7tXdbgm6b85
1lZE9FP4+K+VeKntoSW5D8ToK2+S5Q+Hh++oJF+Eg2sroDshRe4pXjJ0Y8RmAe+K
gN1PJRvLGVuxzl6gfyatNh3m+/NHXYGg1awA/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGR3JhKim0EVZXRdnQtWzgy/WYCXMB8GA1UdIwQYMBaAFAyFBRRHaAvbICkP
JHQ1FbXmEmp/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ2OWZi
Mzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTRhZDY4ZTMtYTdmMC00ZDUxLTg2NTgtY2NmOWMy
NmQzZWE3LzVmOWU4NmI0Y2MyYjM2ZGY0NGJkNDA2M2E1NTM5NDc0ODEzMDI1YzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNGFkNjhlMy1hN2YwLTRkNTEtODY1OC1jY2Y5
YzI2ZDNlYTcvOTQ2OWZiMzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnZFDANBgkqhkiG9w0BAQsFAAOCAQEABNZLVmecv1ItE7AT
V8zWgXF2D84/UcI7yXPJVLzvQe1WAkyqENmqmZ2lu9ZJJAS1pwsoDZ/j9mDujfTr
9q4x9HRPDOp/LnfaNBauTe4y05MC8gy9w8A48Mpl/Lz9DkYzUj6bCYxhrkyCg0vG
uEpSX9fX65v1EWdBNMuWx9q5RIb4tBeUbt3ZWj/Tt8WV+KP/3bfEgYWkKAnqNjea
6nEkwaZj3p+jPyjMrh5YiF+zW5bPDwI7tbnkJK9nUWrLNU3IFHjYXceCfwqz56hT
fF+AWQut17jTEte8Ymgf3l9m5kIBishmJOPBuL5DWNVS6jFluxWaUgR2ifxB7WNs
RvuOqg==
-----END CERTIFICATE-----
Generated at Fri Dec 29 22:44:07 2023 by rpki-client on console-fra.rpki-client.org