Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0e09ac67-1281-4f69-90cb-795ea83e99e7/869cab65ceb0442d7b7b199d824437c60784d046.roa
File: 869cab65ceb0442d7b7b199d824437c60784d046.roa (raw, json)
Hash identifier: RC8dcOGSy2lj3qR6QuQlROfKM0gboJhfIyjmZBrXxeY=
Subject key identifier: 45:EA:A7:A0:94:12:6B:6A:8D:49:D3:04:F8:3A:7F:27:F8:74:22:D7
Certificate issuer: /CN=c402a9a6a7d206670319a5692be8577f996a3072
Certificate serial: 0CD8C1
Authority key identifier: 50:61:90:77:BC:A3:B6:CE:64:76:F9:52:7C:E8:AB:C4:1B:C1:63:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c402a9a6a7d206670319a5692be8577f996a3072.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0e09ac67-1281-4f69-90cb-795ea83e99e7/869cab65ceb0442d7b7b199d824437c60784d046.roa
Signing time: Wed 24 Mar 2021 14:33:20 +0000
ROA not before: Wed 24 Mar 2021 14:33:20 +0000
ROA not after: Tue 24 Mar 2026 14:33:20 +0000
asID: 6471
IP address blocks: 131.0.108.0/24 maxlen: 24
131.0.109.0/24 maxlen: 24
131.0.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 21:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841921 (0xcd8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c402a9a6a7d206670319a5692be8577f996a3072
Validity
Not Before: Mar 24 14:33:20 2021 GMT
Not After : Mar 24 14:33:20 2026 GMT
Subject: CN=869cab65ceb0442d7b7b199d824437c60784d046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:f3:58:be:dd:76:dd:34:ca:7e:a6:35:9f:
24:e9:fa:d6:1f:29:cd:7f:26:26:fe:10:8f:ca:5a:
e7:df:97:b1:20:ff:4d:25:74:97:a6:3f:12:19:14:
12:5c:ee:fe:6a:99:d0:6e:40:5a:da:b6:8c:fa:7b:
8e:cf:98:2d:ed:01:9d:70:61:29:02:64:6b:ae:4c:
02:37:9a:ec:f0:2c:15:e6:4c:fd:46:26:11:94:e0:
03:42:18:6d:c3:b8:1a:95:16:fc:01:9c:0f:0c:79:
fd:71:72:84:16:a2:7d:8d:db:4b:94:96:5e:8c:0b:
89:07:5d:b2:b2:51:3b:76:77:6e:37:f0:77:20:4b:
04:f9:10:6b:66:58:1b:91:27:9d:e2:a2:98:ae:fe:
6c:fa:e5:05:90:92:18:f6:4a:88:96:9f:a2:1d:41:
41:f3:23:b1:0c:4c:58:1c:1c:c5:6a:d5:69:61:24:
a3:49:b5:98:0c:95:28:69:55:0e:84:85:66:94:e7:
34:e3:9f:5f:2d:11:6c:75:bf:c4:73:37:24:5a:8c:
1c:c7:15:f7:d8:74:b2:aa:70:e4:ef:64:0f:04:fd:
ac:34:8f:0e:c9:f9:87:32:dc:cb:fc:35:44:92:b0:
98:b2:70:af:ec:60:ba:f2:11:d7:ca:2a:db:54:36:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EA:A7:A0:94:12:6B:6A:8D:49:D3:04:F8:3A:7F:27:F8:74:22:D7
X509v3 Authority Key Identifier:
keyid:50:61:90:77:BC:A3:B6:CE:64:76:F9:52:7C:E8:AB:C4:1B:C1:63:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c402a9a6a7d206670319a5692be8577f996a3072.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0e09ac67-1281-4f69-90cb-795ea83e99e7/869cab65ceb0442d7b7b199d824437c60784d046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0e09ac67-1281-4f69-90cb-795ea83e99e7/c402a9a6a7d206670319a5692be8577f996a3072.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.108.0-131.0.110.255
Signature Algorithm: sha256WithRSAEncryption
21:df:9c:4c:6e:74:73:0f:b5:82:70:6a:93:87:f4:28:37:b0:
eb:7e:1a:1c:e8:09:1a:5e:9d:cc:f7:e1:26:02:15:80:cc:f5:
24:ea:d1:42:bd:54:a2:43:70:75:5e:5a:08:50:a8:51:18:82:
10:af:67:0b:20:c3:fd:42:fe:5d:b1:22:4e:9b:ef:5f:66:2a:
94:98:b7:90:e2:26:37:90:92:93:d3:03:fc:68:0c:62:56:94:
57:6c:42:bb:25:31:95:60:cb:82:c9:9f:0b:b1:40:10:1c:ae:
01:f5:a1:4b:29:25:03:25:20:31:d5:b9:7c:be:38:e0:e5:8d:
67:48:67:99:d3:48:ab:09:94:bf:65:2f:41:1d:a0:5e:70:6a:
60:a1:da:c8:82:72:bd:13:cc:38:bd:cf:91:c6:96:58:9d:d5:
24:bc:7c:df:65:4a:ed:a4:03:9d:04:34:f7:86:f8:6a:b9:d9:
ab:4e:45:8a:c1:5b:51:ac:d4:47:3c:bb:8f:13:9c:4c:63:72:
f2:db:b1:1e:42:24:42:c6:00:eb:57:c9:15:ab:27:75:22:92:
e7:f6:d8:b8:0e:08:57:67:59:13:56:ea:ee:73:cf:c9:06:9a:
36:28:ef:6f:0d:a2:35:66:e8:d4:d3:30:ab:74:9a:34:3f:a0:
d3:38:06:6d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDDNjBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM0
MDJhOWE2YTdkMjA2NjcwMzE5YTU2OTJiZTg1NzdmOTk2YTMwNzIwHhcNMjEwMzI0
MTQzMzIwWhcNMjYwMzI0MTQzMzIwWjAzMTEwLwYDVQQDEyg4NjljYWI2NWNlYjA0
NDJkN2I3YjE5OWQ4MjQ0MzdjNjA3ODRkMDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmGrzWL7ddt00yn6mNZ8k6frWHynNfyYm/hCPylrn35exIP9N
JXSXpj8SGRQSXO7+apnQbkBa2raM+nuOz5gt7QGdcGEpAmRrrkwCN5rs8CwV5kz9
RiYRlOADQhhtw7galRb8AZwPDHn9cXKEFqJ9jdtLlJZejAuJB12yslE7dnduN/B3
IEsE+RBrZlgbkSed4qKYrv5s+uUFkJIY9kqIlp+iHUFB8yOxDExYHBzFatVpYSSj
SbWYDJUoaVUOhIVmlOc0459fLRFsdb/EczckWowcxxX32HSyqnDk72QPBP2sNI8O
yfmHMtzL/DVEkrCYsnCv7GC68hHXyirbVDZI/QIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFEXqp6CUEmtqjUnTBPg6fyf4dCLXMB8GA1UdIwQYMBaAFFBhkHe8o7bOZHb5
Unzoq8QbwWOMMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzQwMmE5
YTZhN2QyMDY2NzAzMTlhNTY5MmJlODU3N2Y5OTZhMzA3Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGUwOWFjNjctMTI4MS00ZjY5LTkwY2ItNzk1ZWE4
M2U5OWU3Lzg2OWNhYjY1Y2ViMDQ0MmQ3YjdiMTk5ZDgyNDQzN2M2MDc4NGQwNDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wZTA5YWM2Ny0xMjgxLTRmNjktOTBjYi03OTVl
YTgzZTk5ZTcvYzQwMmE5YTZhN2QyMDY2NzAzMTlhNTY5MmJlODU3N2Y5OTZhMzA3
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQCgwBsAwQAgwBuMA0GCSqGSIb3DQEBCwUAA4IBAQAh35xM
bnRzD7WCcGqTh/QoN7Drfhoc6AkaXp3M9+EmAhWAzPUk6tFCvVSiQ3B1XloIUKhR
GIIQr2cLIMP9Qv5dsSJOm+9fZiqUmLeQ4iY3kJKT0wP8aAxiVpRXbEK7JTGVYMuC
yZ8LsUAQHK4B9aFLKSUDJSAx1bl8vjjg5Y1nSGeZ00irCZS/ZS9BHaBecGpgodrI
gnK9E8w4vc+RxpZYndUkvHzfZUrtpAOdBDT3hvhqudmrTkWKwVtRrNRHPLuPE5xM
Y3Ly27EeQiRCxgDrV8kVqyd1IpLn9ti4DghXZ1kTVuruc8/JBpo2KO9vDaI1ZujU
0zCrdJo0P6DTOAZt
-----END CERTIFICATE-----
Generated at Sat Mar 16 00:16:28 2024 by rpki-client on console-fra.rpki-client.org