Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f3d7648a4a54cff938f15d2e405b1a5acd70c507.roa
File: f3d7648a4a54cff938f15d2e405b1a5acd70c507.roa (raw, json)
Hash identifier: NhYgKuNZYFLVs9C9VfxS2H54XiK8ochvfVNcwdkb7HU=
Subject key identifier: 6C:C3:C1:C7:E6:86:95:8E:C3:08:77:45:61:88:8A:3B:BC:BC:03:C3
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 0E3CD4
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f3d7648a4a54cff938f15d2e405b1a5acd70c507.roa
Signing time: Wed 24 Mar 2021 14:30:55 +0000
ROA not before: Wed 24 Mar 2021 14:30:53 +0000
ROA not after: Tue 24 Mar 2026 14:30:53 +0000
asID: 3356
IP address blocks: 200.41.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933076 (0xe3cd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Mar 24 14:30:53 2021 GMT
Not After : Mar 24 14:30:53 2026 GMT
Subject: CN=f3d7648a4a54cff938f15d2e405b1a5acd70c507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:1e:00:72:1b:4b:a2:61:3c:12:ba:f1:74:
c4:71:0f:22:3e:08:f5:65:70:5d:c4:12:64:f8:93:
d5:bc:eb:8e:64:ff:e3:07:94:37:d8:15:7d:13:88:
eb:40:73:1d:98:74:59:3f:d4:35:1b:66:75:87:cc:
27:49:ee:f0:c9:d6:1b:95:28:b2:cd:b6:f9:d7:b3:
d5:e7:0d:02:ce:04:f5:8a:1d:5c:3d:78:96:01:f7:
1e:a3:e6:b1:bc:cc:4d:1a:7c:2b:65:05:cf:42:5a:
9a:9f:47:f4:79:fc:d3:e3:90:6b:fe:15:96:a6:28:
01:8f:20:c2:ee:18:fb:18:63:ce:a8:95:76:cb:ec:
c3:da:e5:cd:79:ef:a6:01:b7:6c:74:c1:70:9c:b3:
33:51:c8:fa:bf:b1:3d:3e:eb:e8:10:cf:69:90:96:
29:15:49:d0:6b:d8:f2:65:78:7e:39:2b:c9:8e:91:
ce:3a:5d:0a:e3:6a:16:a6:5c:ab:27:ae:3d:a0:46:
d6:03:72:76:61:07:fb:ab:cd:fb:6c:15:07:f1:db:
ca:bd:ec:a0:50:93:93:1e:e4:36:91:4a:c2:ff:ad:
24:37:30:e7:d3:bd:be:9d:69:ca:82:4f:a1:17:52:
bc:5d:6c:7e:30:1b:3e:21:4b:77:1c:75:2d:0f:cd:
19:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C3:C1:C7:E6:86:95:8E:C3:08:77:45:61:88:8A:3B:BC:BC:03:C3
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f3d7648a4a54cff938f15d2e405b1a5acd70c507.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.41.8.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d9:a6:3b:a9:76:e8:5d:d5:25:4e:06:43:28:09:64:43:16:
17:3f:5e:93:e0:92:f0:83:46:12:d6:de:3b:8a:d3:08:69:22:
d9:54:57:ee:48:fd:e7:fd:86:e4:e6:4c:ee:e7:82:23:5e:81:
a4:df:ff:b4:7c:ac:6e:2a:da:f6:c7:7c:7f:38:4a:2a:b3:2e:
de:5c:a4:bd:97:58:ed:44:75:0e:10:5c:bc:b5:64:af:44:f0:
42:38:76:c4:89:7c:45:c0:93:87:13:98:23:d3:1c:53:d0:6e:
a7:a5:36:9f:4c:f9:35:ef:a6:70:d6:11:9d:f7:db:c3:82:97:
f2:be:2a:46:ac:9f:03:9d:36:99:8d:c0:ab:e9:c0:9b:25:4d:
bd:bc:6f:8d:c2:61:be:35:82:af:15:2e:d1:1d:6b:7f:a3:8c:
e5:22:88:60:44:33:c5:1c:20:a1:c3:d4:32:71:c5:7a:1d:f6:
7c:bb:de:b1:e8:bf:08:9f:ba:df:dd:ce:f3:5b:e4:c6:d6:a3:
89:57:e6:01:40:d0:7b:b0:44:69:8c:be:6a:bd:b8:21:dc:5e:
29:81:ae:e3:57:5d:05:cb:69:f0:a8:33:fb:35:c0:2f:47:6a:
b5:9a:8b:11:4e:bb:e9:67:db:8c:83:0e:45:43:94:bb:3c:56:
e6:ce:96:63
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDjzUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc5
N2ZiYzZjZGRhMmYzNjYxYjJhMzM1MDYwY2I4NGQ4MDg3MDY2NTkwHhcNMjEwMzI0
MTQzMDUzWhcNMjYwMzI0MTQzMDUzWjAzMTEwLwYDVQQDEyhmM2Q3NjQ4YTRhNTRj
ZmY5MzhmMTVkMmU0MDViMWE1YWNkNzBjNTA3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0tYeAHIbS6JhPBK68XTEcQ8iPgj1ZXBdxBJk+JPVvOuOZP/j
B5Q32BV9E4jrQHMdmHRZP9Q1G2Z1h8wnSe7wydYblSiyzbb517PV5w0CzgT1ih1c
PXiWAfceo+axvMxNGnwrZQXPQlqan0f0efzT45Br/hWWpigBjyDC7hj7GGPOqJV2
y+zD2uXNee+mAbdsdMFwnLMzUcj6v7E9PuvoEM9pkJYpFUnQa9jyZXh+OSvJjpHO
Ol0K42oWplyrJ649oEbWA3J2YQf7q837bBUH8dvKveygUJOTHuQ2kUrC/60kNzDn
072+nWnKgk+hF1K8XWx+MBs+IUt3HHUtD80ZpQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGzDwcfmhpWOwwh3RWGIiju8vAPDMB8GA1UdIwQYMBaAFCtidz8C0hsm2p0G
Y2LQrCl1X2lJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzk3ZmJj
NmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTI3ZTQwOTUtMmY0NS00ZWM5LThmNzUtZTc5OTM4
NWZiYWQwL2YzZDc2NDhhNGE1NGNmZjkzOGYxNWQyZTQwNWIxYTVhY2Q3MGM1MDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMjdlNDA5NS0yZjQ1LTRlYzktOGY3NS1lNzk5
Mzg1ZmJhZDAvNzk3ZmJjNmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgpCDANBgkqhkiG9w0BAQsFAAOCAQEAmtmmO6l26F3VJU4G
QygJZEMWFz9ek+CS8INGEtbeO4rTCGki2VRX7kj95/2G5OZM7ueCI16BpN//tHys
bira9sd8fzhKKrMu3lykvZdY7UR1DhBcvLVkr0TwQjh2xIl8RcCThxOYI9McU9Bu
p6U2n0z5Ne+mcNYRnffbw4KX8r4qRqyfA502mY3Aq+nAmyVNvbxvjcJhvjWCrxUu
0R1rf6OM5SKIYEQzxRwgocPUMnHFeh32fLvesei/CJ+6393O81vkxtajiVfmAUDQ
e7BEaYy+ar24IdxeKYGu41ddBctp8Kgz+zXAL0dqtZqLEU676WfbjIMORUOUuzxW
5s6WYw==
-----END CERTIFICATE-----
Generated at Fri Jul 21 21:29:53 2023 by rpki-client on console-ams.rpki-client.org