Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3135342e302f32342d3234203d3e2037303138.roa
File: 3139312e3130322e3135342e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: KT09mZlQ1SjUPTjKZZRwUaKKIkr3tuH9VwH3fe6qBV4=
Subject key identifier: 0A:CE:04:F9:66:15:55:26:A7:4B:84:C0:68:CA:22:93:16:50:2B:BF
Certificate issuer: /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial: 6A1CAA460B436CF8856A5AB9B842EF758740295A
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3135342e302f32342d3234203d3e2037303138.roa
Signing time: Mon 09 Sep 2024 14:40:00 +0000
ROA not before: Mon 09 Sep 2024 14:35:00 +0000
ROA not after: Mon 08 Sep 2025 14:40:00 +0000
asID: 7018
IP address blocks: 191.102.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 18:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:1c:aa:46:0b:43:6c:f8:85:6a:5a:b9:b8:42:ef:75:87:40:29:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Validity
Not Before: Sep 9 14:35:00 2024 GMT
Not After : Sep 8 14:40:00 2025 GMT
Subject: CN=0ACE04F966155526A74B84C068CA229316502BBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:23:34:c3:87:09:b8:41:5c:8e:0a:81:29:a6:
97:52:7f:73:d2:84:b1:82:63:74:b7:d0:53:dd:d7:
ed:67:9b:d5:a1:58:59:43:16:45:d5:17:79:0c:7d:
29:7b:04:52:9f:9e:1c:f4:1f:22:2b:e1:bc:31:f6:
39:c7:75:52:94:a8:f4:c1:99:0a:10:9f:f3:b7:10:
cf:55:24:df:76:a8:b5:69:a7:ed:2a:d1:dc:80:15:
79:2a:0f:ca:33:8e:72:28:a9:75:2c:a2:4a:43:7b:
9a:43:d5:37:9f:9f:45:28:4a:bd:5b:a6:06:78:c4:
3e:0c:0c:0a:98:79:c1:35:6e:4c:4a:9d:8f:8b:e5:
c5:76:ac:1b:71:d5:92:b3:65:78:39:34:cb:5c:35:
3b:7d:b9:2e:bf:e2:1a:d9:40:ac:e8:63:f9:29:1f:
c5:5b:ab:f2:1c:67:b3:ad:c9:81:e8:cb:10:b7:a6:
e0:7c:30:b3:e0:45:b4:31:07:b9:10:95:c9:c6:f6:
59:09:5f:fe:f0:62:48:a5:4f:d6:45:cf:7f:a1:7b:
83:6c:40:b2:c8:27:db:d2:10:5b:c9:b8:1f:af:c5:
f2:b0:bb:43:9f:9c:f3:5a:b0:c6:10:11:90:6d:94:
27:b6:cb:bd:34:d7:87:50:17:ad:3a:9a:33:38:2e:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CE:04:F9:66:15:55:26:A7:4B:84:C0:68:CA:22:93:16:50:2B:BF
X509v3 Authority Key Identifier:
keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3135342e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.102.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:af:58:8a:60:9d:ac:6b:30:d1:cf:fc:49:7e:f9:6b:6a:7b:
08:b3:d0:e8:db:75:c0:73:5e:f6:48:c6:b2:59:75:90:f2:82:
16:25:07:b2:95:a1:4a:28:58:c0:fa:e4:28:8d:d9:46:4d:1b:
d6:d9:ac:ad:1e:a8:b0:f4:ed:df:e1:c6:26:76:a3:39:82:00:
20:ed:d3:82:66:c8:6a:6e:8a:ad:9d:8e:4d:0d:96:7d:e9:0a:
7f:f9:a8:24:53:25:cc:47:04:30:e2:2f:31:8a:a7:6f:40:b6:
c6:77:7d:62:00:ec:35:16:f4:10:e3:c6:48:28:8f:6a:3c:5f:
09:f3:e8:76:8f:b9:37:80:f9:63:73:40:64:7f:ea:8d:30:88:
fc:dc:e9:28:9f:3b:e6:09:8e:8d:a5:a6:f7:da:3f:0b:5c:0a:
3b:4f:68:9f:f7:6c:60:e9:6d:c4:b6:19:4d:3a:79:b8:04:13:
2d:fc:4b:a3:c6:c1:af:f1:52:18:17:af:a6:53:e8:9d:f7:e3:
44:a4:0d:4d:3d:8a:cb:12:e3:f9:9b:bd:cb:1f:9b:8e:e3:5a:
d7:7a:08:1f:bf:a5:31:68:12:72:3a:23:cd:89:b6:c2:1f:bb:
a6:e2:ba:1d:a5:33:63:da:84:f0:87:97:28:8f:23:3c:6a:e1:
7e:2d:1e:d0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUahyqRgtDbPiFalq5uELvdYdAKVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFERkNEOTY5Mzk4QzdEMTRGQTE4RTQ0RDE2NDlBMEIy
MUM5NjU2OTAeFw0yNDA5MDkxNDM1MDBaFw0yNTA5MDgxNDQwMDBaMDMxMTAvBgNV
BAMTKDBBQ0UwNEY5NjYxNTU1MjZBNzRCODRDMDY4Q0EyMjkzMTY1MDJCQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUIzTDhwm4QVyOCoEpppdSf3PS
hLGCY3S30FPd1+1nm9WhWFlDFkXVF3kMfSl7BFKfnhz0HyIr4bwx9jnHdVKUqPTB
mQoQn/O3EM9VJN92qLVpp+0q0dyAFXkqD8ozjnIoqXUsokpDe5pD1Tefn0UoSr1b
pgZ4xD4MDAqYecE1bkxKnY+L5cV2rBtx1ZKzZXg5NMtcNTt9uS6/4hrZQKzoY/kp
H8Vbq/IcZ7OtyYHoyxC3puB8MLPgRbQxB7kQlcnG9lkJX/7wYkilT9ZFz3+he4Ns
QLLIJ9vSEFvJuB+vxfKwu0OfnPNasMYQEZBtlCe2y70014dQF606mjM4LpBXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUCs4E+WYVVSanS4TAaMoikxZQK78wHwYDVR0j
BBgwFoAUAd/NlpOYx9FPoY5E0WSaCyHJZWkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDRBMjczNDJBN0UxODQ5RjhBRkM0ODlFOTNDQTNEQzNG
NjVCOURDRDM2QjA0RkQyQjU4NENDRDJCODA1Qzc2LzAvMDFERkNEOTY5Mzk4QzdE
MTRGQTE4RTQ0RDE2NDlBMEIyMUM5NjU2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMURGQ0Q5NjkzOThDN0QxNEZB
MThFNDREMTY0OUEwQjIxQzk2NTY5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ0QTI3MzQyQTdFMTg0OUY4QUZDNDg5RTkzQ0EzREMzRjY1QjlEQ0Qz
NkIwNEZEMkI1ODRDQ0QyQjgwNUM3Ni8wLzMxMzkzMTJlMzEzMDMyMmUzMTM1MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL9mmjAN
BgkqhkiG9w0BAQsFAAOCAQEAta9YimCdrGsw0c/8SX75a2p7CLPQ6Nt1wHNe9kjG
sll1kPKCFiUHspWhSihYwPrkKI3ZRk0b1tmsrR6osPTt3+HGJnajOYIAIO3TgmbI
am6KrZ2OTQ2WfekKf/moJFMlzEcEMOIvMYqnb0C2xnd9YgDsNRb0EOPGSCiPajxf
CfPodo+5N4D5Y3NAZH/qjTCI/NzpKJ875gmOjaWm99o/C1wKO09on/dsYOltxLYZ
TTp5uAQTLfxLo8bBr/FSGBevplPonffjRKQNTT2KyxLj+Zu9yx+bjuNa13oIH7+l
MWgScjojzYm2wh+7puK6HaUzY9qE8IeXKI8jPGrhfi0e0A==
-----END CERTIFICATE-----
Generated at Wed Nov 6 19:54:04 2024 by rpki-client on console-ams.rpki-client.org