Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/d0af5ddab23efbe0aba348dc173c0d9b33e097bb.roa
File: d0af5ddab23efbe0aba348dc173c0d9b33e097bb.roa (raw, json)
Hash identifier: 93qod5RgxxgNztQdTwBfXp078JQRZl7e+1+Q/oKjl5c=
Subject key identifier: BB:F3:18:7F:96:FF:CE:A1:6D:34:11:55:A8:56:43:9B:38:1C:FB:B2
Certificate issuer: /CN=f6fe25a266009db467ead60d5ec947af0402cb02
Certificate serial: 0324
Authority key identifier: B4:E7:FD:7E:36:23:82:23:C3:0C:03:91:F3:2B:E7:BF:31:0F:E8:2C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6fe25a266009db467ead60d5ec947af0402cb02.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/d0af5ddab23efbe0aba348dc173c0d9b33e097bb.roa
Signing time: Thu 25 Mar 2021 18:10:47 +0000
ROA not before: Thu 25 Mar 2021 03:00:00 +0000
ROA not after: Sat 25 Mar 2023 03:00:00 +0000
asID: 271885
IP address blocks: 45.68.4.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804 (0x324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fe25a266009db467ead60d5ec947af0402cb02
Validity
Not Before: Mar 25 03:00:00 2021 GMT
Not After : Mar 25 03:00:00 2023 GMT
Subject: CN=d0af5ddab23efbe0aba348dc173c0d9b33e097bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:4e:f4:ae:5b:bf:65:f6:27:b8:80:87:05:
09:05:dc:36:5d:56:ac:e7:99:93:82:14:78:76:30:
5f:15:aa:8d:0c:9d:33:88:9f:40:eb:4d:3a:e4:a5:
eb:dc:97:41:97:8a:35:6d:5c:69:8c:9f:24:01:75:
34:17:01:48:e4:98:3e:0e:46:58:00:bb:8e:c4:6d:
2d:3e:00:5c:6d:13:80:10:c7:7c:53:37:56:3b:59:
82:21:0e:27:2a:c3:60:00:e7:7d:d7:00:64:d9:a6:
ba:c7:d6:52:3b:d7:05:ec:38:47:55:d7:5a:0b:d9:
0d:c2:ae:23:8a:8c:fe:18:2d:c0:b0:2f:c9:5b:d8:
1a:79:48:4c:d3:19:0b:69:28:42:08:aa:37:f5:df:
b0:10:97:f2:42:e9:89:db:d3:33:fe:1d:12:78:55:
e6:35:af:1c:70:9c:75:99:66:6c:e4:e8:7f:24:8f:
b2:73:4d:a0:5b:d0:24:cb:11:b1:10:be:9b:28:19:
61:54:81:cf:2b:da:a4:5b:72:85:47:68:13:81:c2:
01:4a:b1:1c:5c:9d:45:ea:5b:6e:84:eb:64:08:b2:
e1:df:6e:84:18:64:b2:c1:de:2e:f7:4c:09:67:2e:
e2:43:3c:9a:63:b2:f1:18:0d:cf:12:5b:3d:94:f9:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F3:18:7F:96:FF:CE:A1:6D:34:11:55:A8:56:43:9B:38:1C:FB:B2
X509v3 Authority Key Identifier:
keyid:B4:E7:FD:7E:36:23:82:23:C3:0C:03:91:F3:2B:E7:BF:31:0F:E8:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f6fe25a266009db467ead60d5ec947af0402cb02.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/d0af5ddab23efbe0aba348dc173c0d9b33e097bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0138cf09-51ec-43d9-adc8-4aba0da39808/f6fe25a266009db467ead60d5ec947af0402cb02.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.4.0/22
Signature Algorithm: sha256WithRSAEncryption
71:fb:4c:f5:d4:d0:bd:d3:c1:10:58:54:68:64:f2:ee:15:75:
7f:3f:fc:be:b9:c3:d6:c3:42:0c:5d:b8:05:fb:d2:1f:82:92:
49:85:8c:11:5a:e3:2f:23:5c:db:78:8c:e8:e8:b7:2b:68:fc:
a1:03:01:d0:27:d5:4a:46:31:56:5a:d2:48:cb:63:28:d4:b0:
ed:9b:90:5c:c5:64:e6:f6:f3:08:61:e1:1f:c8:cf:6a:d8:04:
74:dd:31:0b:e7:79:81:43:5d:a3:be:13:a6:cc:86:98:d3:5f:
d8:fa:a4:6a:78:18:3d:3f:e0:92:67:41:9f:00:e8:8a:99:c0:
8d:c0:fc:af:15:92:48:73:2e:c8:f8:d7:e2:90:c7:b5:07:d5:
f1:1f:68:7b:99:9d:f4:19:57:7f:ca:90:ca:db:29:07:18:b2:
00:b6:57:f5:41:fd:b5:20:7f:e3:24:1e:e6:b4:01:eb:84:31:
d7:92:17:54:0d:74:39:5e:eb:0f:7f:66:08:f7:2d:4d:3b:0c:
91:07:b4:7e:ab:cb:40:e2:37:9a:9e:fa:4d:b4:81:4f:14:18:
37:38:83:8f:83:80:e7:34:3c:54:a8:0d:5f:1d:80:17:38:11:
d4:51:85:15:ea:55:da:44:00:79:28:92:a9:72:9d:21:12:02:
66:7d:dd:59
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZjZm
ZTI1YTI2NjAwOWRiNDY3ZWFkNjBkNWVjOTQ3YWYwNDAyY2IwMjAeFw0yMTAzMjUw
MzAwMDBaFw0yMzAzMjUwMzAwMDBaMDMxMTAvBgNVBAMTKGQwYWY1ZGRhYjIzZWZi
ZTBhYmEzNDhkYzE3M2MwZDliMzNlMDk3YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCPNk70rlu/ZfYnuICHBQkF3DZdVqznmZOCFHh2MF8Vqo0MnTOI
n0DrTTrkpevcl0GXijVtXGmMnyQBdTQXAUjkmD4ORlgAu47EbS0+AFxtE4AQx3xT
N1Y7WYIhDicqw2AA533XAGTZprrH1lI71wXsOEdV11oL2Q3CriOKjP4YLcCwL8lb
2Bp5SEzTGQtpKEIIqjf137AQl/JC6Ynb0zP+HRJ4VeY1rxxwnHWZZmzk6H8kj7Jz
TaBb0CTLEbEQvpsoGWFUgc8r2qRbcoVHaBOBwgFKsRxcnUXqW26E62QIsuHfboQY
ZLLB3i73TAlnLuJDPJpjsvEYDc8SWz2U+dk3AgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUu/MYf5b/zqFtNBFVqFZDmzgc+7IwHwYDVR0jBBgwFoAUtOf9fjYjgiPDDAOR
8yvnvzEP6CwwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9mNmZlMjVh
MjY2MDA5ZGI0NjdlYWQ2MGQ1ZWM5NDdhZjA0MDJjYjAyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wMTM4Y2YwOS01MWVjLTQzZDktYWRjOC00YWJhMGRh
Mzk4MDgvZDBhZjVkZGFiMjNlZmJlMGFiYTM0OGRjMTczYzBkOWIzM2UwOTdiYi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzAxMzhjZjA5LTUxZWMtNDNkOS1hZGM4LTRhYmEw
ZGEzOTgwOC9mNmZlMjVhMjY2MDA5ZGI0NjdlYWQ2MGQ1ZWM5NDdhZjA0MDJjYjAy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLUQEMA0GCSqGSIb3DQEBCwUAA4IBAQBx+0z11NC908EQWFRo
ZPLuFXV/P/y+ucPWw0IMXbgF+9IfgpJJhYwRWuMvI1zbeIzo6LcraPyhAwHQJ9VK
RjFWWtJIy2Mo1LDtm5BcxWTm9vMIYeEfyM9q2AR03TEL53mBQ12jvhOmzIaY01/Y
+qRqeBg9P+CSZ0GfAOiKmcCNwPyvFZJIcy7I+NfikMe1B9XxH2h7mZ30GVd/ypDK
2ykHGLIAtlf1Qf21IH/jJB7mtAHrhDHXkhdUDXQ5XusPf2YI9y1NOwyRB7R+q8tA
4jeanvpNtIFPFBg3OIOPg4DnNDxUqA1fHYAXOBHUUYUV6lXaRAB5KJKpcp0hEgJm
fd1Z
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org