Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/d057db76b6ad7220b92537a3fd7a8421661ea9e4.roa
File: d057db76b6ad7220b92537a3fd7a8421661ea9e4.roa (raw, json)
Hash identifier: oQzNBWeK6iapVnHNvQs77L+7zsEjZ9LWK2kJ99cfcSg=
Subject key identifier: 5C:1D:02:9F:A8:9C:44:9D:06:DB:BD:0E:A3:DC:05:D9:43:24:76:1C
Certificate issuer: /CN=c355af2587e04fcb2db519de3ca0af885d613b77
Certificate serial: 23F768
Authority key identifier: BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/d057db76b6ad7220b92537a3fd7a8421661ea9e4.roa
Signing time: Mon 02 Oct 2023 18:28:44 +0000
ROA not before: Sun 01 Oct 2023 18:28:43 +0000
ROA not after: Thu 02 Oct 2025 19:28:43 +0000
asID: 1
IP address blocks: 168.227.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2357096 (0x23f768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c355af2587e04fcb2db519de3ca0af885d613b77
Validity
Not Before: Oct 1 18:28:43 2023 GMT
Not After : Oct 2 19:28:43 2025 GMT
Subject: CN=d057db76b6ad7220b92537a3fd7a8421661ea9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d4:4c:a8:90:5b:97:12:e7:50:d5:2a:38:bd:
66:58:28:fe:8b:eb:1a:ff:51:f9:5b:d2:04:99:d5:
b5:c1:18:5e:be:fb:6e:73:39:3e:8a:9b:5b:79:5d:
40:61:6d:76:59:e5:fe:94:f7:1b:81:e7:27:6f:5f:
b6:89:86:5f:47:9a:64:05:9f:63:f2:eb:bb:0f:d7:
2e:0c:60:af:14:70:25:60:e6:44:e5:50:f0:fc:af:
6b:82:15:92:5d:86:9b:53:79:4b:9f:6b:8d:21:2e:
8a:4f:b4:d4:35:bd:ac:e4:ac:55:ac:08:77:cf:97:
a5:e7:cc:25:e2:61:3f:fa:c1:c2:06:8b:16:ad:ca:
51:47:c0:b3:ef:64:40:b2:e5:63:02:41:40:2a:0b:
53:70:e5:90:8f:33:68:ee:47:49:5a:70:b3:c2:9b:
62:6e:b1:ca:ba:7f:dc:09:88:5f:32:5c:fa:b9:7a:
f2:3c:a1:d0:91:38:14:3e:51:f5:56:fe:dc:5e:58:
98:82:fd:0c:2c:e6:a6:30:24:35:3f:cf:4e:f5:ee:
68:47:80:eb:39:a2:9a:25:2b:bb:8e:8d:27:18:23:
63:ab:3e:7d:01:90:4d:32:da:0f:5c:5d:2e:20:5d:
7b:09:8c:7d:2c:57:30:b9:2e:4c:3f:11:01:94:36:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1D:02:9F:A8:9C:44:9D:06:DB:BD:0E:A3:DC:05:D9:43:24:76:1C
X509v3 Authority Key Identifier:
keyid:BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/d057db76b6ad7220b92537a3fd7a8421661ea9e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/c355af2587e04fcb2db519de3ca0af885d613b77.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.21.0/24
Signature Algorithm: sha256WithRSAEncryption
86:bd:80:e5:a0:67:5a:6f:8d:3c:41:b0:4a:52:38:80:67:ed:
79:4e:e1:b7:28:05:ff:a5:e3:5f:ea:ba:f5:15:7f:ea:3e:9e:
d8:a7:23:a6:e3:af:c1:f9:b2:27:54:87:c8:a5:de:35:db:25:
51:f2:a7:11:4c:f3:3f:ca:ef:e8:2d:fa:4d:c0:9a:6a:7b:81:
d8:51:43:28:17:3d:30:2c:18:dd:82:00:c5:02:11:f9:11:7e:
94:b2:b2:ec:e1:02:00:c1:82:cd:42:7b:77:6b:f3:d1:3f:0a:
12:71:1c:82:38:6f:7f:31:69:14:b2:67:c5:77:4d:b5:ec:59:
04:72:7d:2f:13:a2:3f:b0:b2:79:65:53:91:38:ac:c3:12:05:
c5:13:83:bf:f6:54:a6:89:5a:91:3a:b3:f6:64:1f:1c:de:b4:
5a:11:7c:4f:96:86:30:eb:e3:34:48:c6:6e:5b:f1:5b:fc:e2:
cb:bc:86:4c:43:cb:d7:d3:98:44:cf:2d:02:b1:21:05:57:3e:
c9:47:0d:fd:3e:f4:37:38:78:7f:9c:ba:c7:4f:9e:d2:59:b2:
09:e0:cc:7f:0d:63:8b:fc:90:d4:82:88:d4:b2:d2:1c:21:56:
ea:c2:f0:a7:f7:65:fb:c6:28:4d:a3:61:50:ce:28:b2:a2:87:
c7:e2:aa:8b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI/doMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMz
NTVhZjI1ODdlMDRmY2IyZGI1MTlkZTNjYTBhZjg4NWQ2MTNiNzcwHhcNMjMxMDAx
MTgyODQzWhcNMjUxMDAyMTkyODQzWjAzMTEwLwYDVQQDEyhkMDU3ZGI3NmI2YWQ3
MjIwYjkyNTM3YTNmZDdhODQyMTY2MWVhOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhdRMqJBblxLnUNUqOL1mWCj+i+sa/1H5W9IEmdW1wRhevvtu
czk+iptbeV1AYW12WeX+lPcbgecnb1+2iYZfR5pkBZ9j8uu7D9cuDGCvFHAlYOZE
5VDw/K9rghWSXYabU3lLn2uNIS6KT7TUNb2s5KxVrAh3z5el58wl4mE/+sHCBosW
rcpRR8Cz72RAsuVjAkFAKgtTcOWQjzNo7kdJWnCzwptibrHKun/cCYhfMlz6uXry
PKHQkTgUPlH1Vv7cXliYgv0MLOamMCQ1P89O9e5oR4DrOaKaJSu7jo0nGCNjqz59
AZBNMtoPXF0uIF17CYx9LFcwuS5MPxEBlDbfBQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFwdAp+onESdBtu9DqPcBdlDJHYcMB8GA1UdIwQYMBaAFLvLaOJp6kGeWNXY
me8J0IjQlKmXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzM1NWFm
MjU4N2UwNGZjYjJkYjUxOWRlM2NhMGFmODg1ZDYxM2I3Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDVlYjA1MTEtYmZjYy00ZjQzLThjNzEtOTA2ZGY3
OTkzODgyL2QwNTdkYjc2YjZhZDcyMjBiOTI1MzdhM2ZkN2E4NDIxNjYxZWE5ZTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wNWViMDUxMS1iZmNjLTRmNDMtOGM3MS05MDZk
Zjc5OTM4ODIvYzM1NWFmMjU4N2UwNGZjYjJkYjUxOWRlM2NhMGFmODg1ZDYxM2I3
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKjjFTANBgkqhkiG9w0BAQsFAAOCAQEAhr2A5aBnWm+NPEGw
SlI4gGfteU7htygF/6XjX+q69RV/6j6e2KcjpuOvwfmyJ1SHyKXeNdslUfKnEUzz
P8rv6C36TcCaanuB2FFDKBc9MCwY3YIAxQIR+RF+lLKy7OECAMGCzUJ7d2vz0T8K
EnEcgjhvfzFpFLJnxXdNtexZBHJ9LxOiP7CyeWVTkTiswxIFxRODv/ZUpolakTqz
9mQfHN60WhF8T5aGMOvjNEjGblvxW/ziy7yGTEPL19OYRM8tArEhBVc+yUcN/T70
Nzh4f5y6x0+e0lmyCeDMfw1ji/yQ1IKI1LLSHCFW6sLwp/dl+8YoTaNhUM4osqKH
x+Kqiw==
-----END CERTIFICATE-----
Generated at Mon Oct 2 20:19:09 2023 by rpki-client on console-fra.rpki-client.org