Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/80c1c98e1a1908fbae282f1e696fc7eb5110c2cb.roa
File: 80c1c98e1a1908fbae282f1e696fc7eb5110c2cb.roa (raw, json)
Hash identifier: bpUwQYXDDOQDJNWR45eMUB91aEwriE/Ol09/3oG+05Q=
Subject key identifier: 8B:49:B3:B9:10:B6:24:0B:7F:3D:7D:7A:A5:0A:C8:E0:44:76:50:A9
Certificate issuer: /CN=8a34b88edc7711ba98c357c0cd7c26b4d31bbe13
Certificate serial: 26CE10
Authority key identifier: AC:7D:06:CC:8D:9C:83:2B:CF:18:0B:CB:6C:01:5E:C2:4A:6D:A7:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/80c1c98e1a1908fbae282f1e696fc7eb5110c2cb.roa
Signing time: Tue 05 Dec 2023 20:28:37 +0000
ROA not before: Tue 05 Dec 2023 20:28:36 +0000
ROA not after: Fri 05 Dec 2025 20:28:36 +0000
asID: 27947
IP address blocks: 200.10.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2543120 (0x26ce10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a34b88edc7711ba98c357c0cd7c26b4d31bbe13
Validity
Not Before: Dec 5 20:28:36 2023 GMT
Not After : Dec 5 20:28:36 2025 GMT
Subject: CN=80c1c98e1a1908fbae282f1e696fc7eb5110c2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:34:05:7e:49:81:2b:61:c5:0e:a6:3b:03:
84:3e:82:b9:1a:27:de:5d:e2:e0:d6:64:d5:e0:11:
9a:32:39:3c:c8:36:ce:f1:26:37:47:e1:15:f5:88:
8b:a8:dd:ce:f8:93:b1:d4:b2:27:94:f6:da:56:47:
c4:aa:81:ea:48:77:0b:02:0b:9c:d3:a3:da:ac:55:
c5:92:90:48:3b:80:8a:44:dc:10:5b:86:51:f7:44:
ea:5b:bc:f5:07:5b:d9:1f:7e:cb:52:50:eb:87:f5:
fa:de:74:50:49:81:f8:f4:a7:98:34:06:99:cf:70:
d7:5e:bc:4a:16:91:e9:06:1c:60:fa:9b:7e:7a:3a:
da:55:46:6c:6b:f4:bc:b0:7f:18:38:97:2f:a5:0d:
bb:97:34:7e:d8:17:bf:d0:dc:b0:2d:30:60:e3:54:
2b:94:5f:8d:ad:92:87:8f:c2:04:d2:68:c1:d3:9d:
a8:7c:44:6f:a4:df:18:af:98:52:53:4e:6a:ff:bd:
d2:84:4f:8f:3e:88:5a:f5:4d:5e:9e:7b:19:69:3c:
d8:36:1f:85:f6:8a:bc:90:e5:19:66:54:97:b7:3d:
12:00:ad:31:14:bc:d1:31:23:b8:67:f4:fb:4d:99:
f0:e4:e6:3e:f9:86:36:37:7f:39:49:24:c2:ca:60:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:49:B3:B9:10:B6:24:0B:7F:3D:7D:7A:A5:0A:C8:E0:44:76:50:A9
X509v3 Authority Key Identifier:
keyid:AC:7D:06:CC:8D:9C:83:2B:CF:18:0B:CB:6C:01:5E:C2:4A:6D:A7:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/80c1c98e1a1908fbae282f1e696fc7eb5110c2cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.148.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a3:e5:ef:b7:5e:41:da:bb:2a:9d:18:12:58:5d:d4:6d:87:
c0:95:e8:70:47:27:53:8f:a5:b8:55:f8:94:b3:49:c3:66:9c:
55:9a:fb:c5:5b:85:82:e4:21:7e:06:50:c9:b3:ee:2c:a3:33:
e1:97:21:98:15:8e:86:a7:70:38:a1:58:26:e1:65:de:22:25:
89:ca:96:3b:ee:1a:47:16:0e:9f:85:40:02:0c:f4:81:b8:41:
d2:77:bb:4f:52:31:6a:df:1d:dd:93:de:5f:b3:13:11:92:90:
69:84:3c:45:af:be:fe:85:87:25:f0:93:f0:b4:93:97:2d:d9:
da:54:79:77:26:2b:62:3d:ba:36:47:63:dc:99:ee:96:35:76:
6b:ba:25:55:35:53:53:79:57:6b:fc:a3:e7:00:6d:8c:1f:0d:
19:b7:4d:b7:57:b1:09:37:b3:97:a3:9e:9b:76:fb:15:9c:84:
97:d5:f2:2b:9c:9a:77:28:7e:d3:9e:a8:ea:40:b9:1f:59:4b:
c4:2d:99:0e:6c:8f:36:d5:a4:95:5d:2d:36:b5:84:bc:08:5f:
91:13:f6:2a:88:e4:b5:c8:37:2a:34:7e:e9:07:3e:e9:29:4e:
ab:c4:f7:77:db:d9:ec:bf:cd:fe:c8:56:fa:9e:18:9e:6e:18:
24:78:d6:ff
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJs4QMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhh
MzRiODhlZGM3NzExYmE5OGMzNTdjMGNkN2MyNmI0ZDMxYmJlMTMwHhcNMjMxMjA1
MjAyODM2WhcNMjUxMjA1MjAyODM2WjAzMTEwLwYDVQQDEyg4MGMxYzk4ZTFhMTkw
OGZiYWUyODJmMWU2OTZmYzdlYjUxMTBjMmNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt+o0BX5JgSthxQ6mOwOEPoK5GifeXeLg1mTV4BGaMjk8yDbO
8SY3R+EV9YiLqN3O+JOx1LInlPbaVkfEqoHqSHcLAguc06ParFXFkpBIO4CKRNwQ
W4ZR90TqW7z1B1vZH37LUlDrh/X63nRQSYH49KeYNAaZz3DXXrxKFpHpBhxg+pt+
ejraVUZsa/S8sH8YOJcvpQ27lzR+2Be/0NywLTBg41QrlF+NrZKHj8IE0mjB052o
fERvpN8Yr5hSU05q/73ShE+PPoha9U1ennsZaTzYNh+F9oq8kOUZZlSXtz0SAK0x
FLzRMSO4Z/T7TZnw5OY++YY2N385SSTCymBYjwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFItJs7kQtiQLfz19eqUKyOBEdlCpMB8GA1UdIwQYMBaAFKx9BsyNnIMrzxgL
y2wBXsJKbaePMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGEzNGI4
OGVkYzc3MTFiYTk4YzM1N2MwY2Q3YzI2YjRkMzFiYmUxMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDlhOWI2ODUtMzk3ZC00ZDRmLTg3MzQtNmU4ZmI5
NjUxZjIxLzgwYzFjOThlMWExOTA4ZmJhZTI4MmYxZTY5NmZjN2ViNTExMGMyY2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wOWE5YjY4NS0zOTdkLTRkNGYtODczNC02ZThm
Yjk2NTFmMjEvOGEzNGI4OGVkYzc3MTFiYTk4YzM1N2MwY2Q3YzI2YjRkMzFiYmUx
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgKlDANBgkqhkiG9w0BAQsFAAOCAQEAiaPl77deQdq7Kp0Y
Elhd1G2HwJXocEcnU4+luFX4lLNJw2acVZr7xVuFguQhfgZQybPuLKMz4ZchmBWO
hqdwOKFYJuFl3iIlicqWO+4aRxYOn4VAAgz0gbhB0ne7T1Ixat8d3ZPeX7MTEZKQ
aYQ8Ra++/oWHJfCT8LSTly3Z2lR5dyYrYj26Nkdj3JnuljV2a7olVTVTU3lXa/yj
5wBtjB8NGbdNt1exCTezl6Oem3b7FZyEl9XyK5yadyh+056o6kC5H1lLxC2ZDmyP
NtWklV0tNrWEvAhfkRP2Kojktcg3KjR+6Qc+6SlOq8T3d9vZ7L/N/shW+p4Ynm4Y
JHjW/w==
-----END CERTIFICATE-----
Generated at Sun Dec 31 09:12:28 2023 by rpki-client on console-fra.rpki-client.org