Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/51d420c95c07f8192900aae7b74cfc1165aba386.roa
File: 51d420c95c07f8192900aae7b74cfc1165aba386.roa (raw, json)
Hash identifier: UvYYbhIZEhjtN959skhFD2i7ztSK5mXjJsDpp96dvVo=
Subject key identifier: EA:6E:7C:B1:03:F1:67:47:16:6A:F6:D6:35:10:E7:6E:A5:22:6E:03
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 0E33B6
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/51d420c95c07f8192900aae7b74cfc1165aba386.roa
Signing time: Wed 24 Mar 2021 14:30:55 +0000
ROA not before: Wed 24 Mar 2021 14:30:53 +0000
ROA not after: Tue 24 Mar 2026 14:30:53 +0000
asID: 262208
IP address blocks: 201.234.3.0/24 maxlen: 24
201.234.6.0/24 maxlen: 24
201.234.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930742 (0xe33b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Mar 24 14:30:53 2021 GMT
Not After : Mar 24 14:30:53 2026 GMT
Subject: CN=51d420c95c07f8192900aae7b74cfc1165aba386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:d8:94:b0:24:22:0c:b9:65:25:a1:ab:14:
15:cd:7c:3a:e2:a7:65:01:7f:8c:5f:77:ff:d9:26:
b1:2c:27:29:5a:69:bb:b8:e2:01:be:07:b8:66:fe:
44:bd:7f:8a:c2:9a:be:15:19:07:1b:52:d5:51:06:
60:9b:8b:0d:0a:9e:3d:91:59:bc:42:58:23:e1:c1:
97:75:ca:86:a8:a4:36:ae:d5:93:a6:b3:91:ab:50:
67:7c:10:c7:84:3e:83:cc:d4:3c:9e:68:63:67:b6:
6e:75:64:2e:19:21:09:0f:20:67:8a:ef:f0:5c:e6:
df:9e:a9:0c:80:99:ab:3f:54:a6:f1:c6:da:94:7e:
e8:07:51:c7:7f:9a:18:49:28:ee:a3:f9:9b:ff:3b:
21:21:99:75:e6:94:2c:bb:df:26:ab:6a:b3:2c:dc:
d4:80:3f:38:66:29:ea:ae:92:f7:78:d8:57:5c:80:
16:8b:78:76:0c:aa:4a:24:d1:1d:9e:2f:a9:7d:1e:
cb:00:07:a3:79:b3:e8:f7:05:22:eb:01:87:39:7c:
9f:71:6d:89:2b:2a:7d:bd:2d:7e:9a:1d:68:5e:d9:
c8:b8:d6:2c:aa:31:0c:61:59:26:4a:10:4b:a4:3d:
b9:20:e5:2e:08:9b:58:ec:da:cb:d3:18:17:9b:19:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6E:7C:B1:03:F1:67:47:16:6A:F6:D6:35:10:E7:6E:A5:22:6E:03
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/51d420c95c07f8192900aae7b74cfc1165aba386.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.3.0/24
201.234.6.0/24
201.234.9.0/24
Signature Algorithm: sha256WithRSAEncryption
41:46:da:ea:f2:08:84:0c:51:7e:34:77:fc:3f:31:10:f4:fa:
ca:c1:95:08:5a:a5:7a:f3:09:31:31:25:41:91:d4:62:62:18:
54:73:f8:4f:5a:69:1e:36:a6:90:73:66:14:5c:e6:d5:08:c0:
e8:56:74:8e:cd:76:ed:08:3c:21:2b:6a:dd:1f:98:4f:01:fe:
39:69:ba:ef:7e:70:83:69:30:b8:6a:4f:42:59:68:c0:d3:48:
a6:27:c0:9f:d0:0f:46:6a:f0:3c:ad:2b:79:6b:e0:a9:05:a6:
3d:38:ae:b9:ba:23:e6:07:3b:44:00:36:12:34:13:14:aa:72:
ec:cc:fb:4d:f9:7f:ee:0c:7f:d4:5f:79:cc:0a:cb:13:31:fc:
3a:d6:b9:9b:6d:34:61:ec:f4:08:91:5a:d7:bf:3b:2e:2d:3c:
d7:69:da:3d:68:7d:4a:d4:79:e9:30:ac:fe:91:65:7c:e3:85:
fb:dc:b9:f3:f7:19:06:c1:7c:17:61:62:62:a9:9a:85:ee:4a:
6b:ef:37:d5:77:00:70:58:f8:ad:53:3f:df:dd:db:e0:0a:90:
1a:8a:f1:6f:10:97:be:73:67:9c:a5:0f:44:fa:19:c1:ba:a7:
58:af:7a:b6:24:1e:a2:9c:cf:40:f5:9b:6a:bb:60:11:e7:b0:
e5:68:25:f1
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDDjO2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc5
N2ZiYzZjZGRhMmYzNjYxYjJhMzM1MDYwY2I4NGQ4MDg3MDY2NTkwHhcNMjEwMzI0
MTQzMDUzWhcNMjYwMzI0MTQzMDUzWjAzMTEwLwYDVQQDEyg1MWQ0MjBjOTVjMDdm
ODE5MjkwMGFhZTdiNzRjZmMxMTY1YWJhMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjUjYlLAkIgy5ZSWhqxQVzXw64qdlAX+MX3f/2SaxLCcpWmm7
uOIBvge4Zv5EvX+Kwpq+FRkHG1LVUQZgm4sNCp49kVm8Qlgj4cGXdcqGqKQ2rtWT
prORq1BnfBDHhD6DzNQ8nmhjZ7ZudWQuGSEJDyBniu/wXObfnqkMgJmrP1Sm8cba
lH7oB1HHf5oYSSjuo/mb/zshIZl15pQsu98mq2qzLNzUgD84ZinqrpL3eNhXXIAW
i3h2DKpKJNEdni+pfR7LAAejebPo9wUi6wGHOXyfcW2JKyp9vS1+mh1oXtnIuNYs
qjEMYVkmShBLpD25IOUuCJtY7NrL0xgXmxlrPwIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFOpufLED8WdHFmr21jUQ526lIm4DMB8GA1UdIwQYMBaAFCtidz8C0hsm2p0G
Y2LQrCl1X2lJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzk3ZmJj
NmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTI3ZTQwOTUtMmY0NS00ZWM5LThmNzUtZTc5OTM4
NWZiYWQwLzUxZDQyMGM5NWMwN2Y4MTkyOTAwYWFlN2I3NGNmYzExNjVhYmEzODYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMjdlNDA5NS0yZjQ1LTRlYzktOGY3NS1lNzk5
Mzg1ZmJhZDAvNzk3ZmJjNmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAMnqAwMEAMnqBgMEAMnqCTANBgkqhkiG9w0BAQsFAAOCAQEA
QUba6vIIhAxRfjR3/D8xEPT6ysGVCFqlevMJMTElQZHUYmIYVHP4T1ppHjamkHNm
FFzm1QjA6FZ0js127Qg8IStq3R+YTwH+OWm6735wg2kwuGpPQllowNNIpifAn9AP
RmrwPK0reWvgqQWmPTiuuboj5gc7RAA2EjQTFKpy7Mz7Tfl/7gx/1F95zArLEzH8
Ota5m200Yez0CJFa1787Li0812naPWh9StR56TCs/pFlfOOF+9y58/cZBsF8F2Fi
Yqmahe5Ka+831XcAcFj4rVM/393b4AqQGorxbxCXvnNnnKUPRPoZwbqnWK96tiQe
opzPQPWbartgEeew5Wgl8Q==
-----END CERTIFICATE-----
Generated at Fri Jul 21 21:31:50 2023 by rpki-client on console-fra.rpki-client.org