Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/fe39d43235429092d5fdcf92a4c20bc270831e77.roa
File: fe39d43235429092d5fdcf92a4c20bc270831e77.roa (raw, json)
Hash identifier: sSB9FtnAc8WcVBgouIZsuGhzgTg8VCZBmRqxzS/jIio=
Subject key identifier: 0F:C2:62:70:23:FA:CD:6E:6C:A0:8D:27:8F:2F:42:EC:65:0C:9F:42
Certificate issuer: /CN=e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e
Certificate serial: 177A59
Authority key identifier: 20:CB:01:94:FA:06:20:C5:24:3F:A3:60:40:49:A8:5A:77:66:76:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/fe39d43235429092d5fdcf92a4c20bc270831e77.roa
Signing time: Tue 12 Jul 2022 14:30:36 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 267820
IP address blocks: 45.174.129.0/24 maxlen: 24
45.174.130.0/24 maxlen: 24
45.174.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1538649 (0x177a59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=fe39d43235429092d5fdcf92a4c20bc270831e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:99:82:5c:08:1d:21:9e:47:16:c5:0c:22:
13:cd:9b:fd:4c:fe:9c:3c:8e:6c:a2:c3:c4:90:56:
23:60:8a:29:fa:60:a9:c1:ea:64:cf:fb:b8:89:ac:
40:a3:c8:39:78:1b:d3:8b:4f:6a:f7:38:ac:38:00:
dd:b8:4b:be:3e:c3:78:ee:a1:27:87:6e:49:ea:74:
5d:a1:1b:1f:25:c4:51:37:0b:de:f9:42:8d:5d:70:
0e:b8:ce:6f:a9:19:d6:da:95:f0:08:07:30:45:15:
7d:5f:4e:74:84:54:8b:af:0d:aa:89:cd:9d:90:94:
88:a0:38:62:63:c3:e2:53:eb:1e:50:d1:d8:12:54:
d6:99:aa:cd:5b:82:d0:4d:5a:11:17:5f:52:35:8a:
bf:9f:32:e0:50:dd:ce:23:84:5c:a2:72:57:bb:d9:
bb:17:9f:86:f2:de:37:9d:54:00:cb:28:b2:e3:03:
96:2e:92:44:d2:bb:85:fb:7c:02:48:1b:06:9f:ed:
57:9f:ec:eb:a7:25:cc:fd:a2:f6:82:e1:29:d7:da:
a5:d3:ae:b3:1f:df:b8:e1:72:2d:9b:2a:4e:70:c8:
13:74:8c:b4:66:ce:3b:9c:b6:03:a2:a5:de:ae:b9:
ef:ca:d0:06:f0:32:ad:f9:81:7f:c7:b4:82:58:2f:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C2:62:70:23:FA:CD:6E:6C:A0:8D:27:8F:2F:42:EC:65:0C:9F:42
X509v3 Authority Key Identifier:
keyid:20:CB:01:94:FA:06:20:C5:24:3F:A3:60:40:49:A8:5A:77:66:76:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/fe39d43235429092d5fdcf92a4c20bc270831e77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.129.0-45.174.131.255
Signature Algorithm: sha256WithRSAEncryption
b8:29:ab:2e:d0:f3:2b:ec:09:fe:58:66:6d:93:44:d8:d9:13:
8e:23:34:90:e4:70:7d:97:73:48:2c:de:39:9a:43:a7:83:bc:
6f:f6:ce:6d:00:b4:b5:17:40:09:15:e2:3a:be:8d:97:cb:eb:
b1:fb:1c:79:01:f6:fb:03:b8:b9:25:82:38:cb:67:22:eb:f6:
24:bf:3c:73:e0:43:05:fd:fa:fe:4a:94:33:c9:c6:59:cd:d9:
b4:77:49:c9:7d:12:11:59:bc:f9:3a:37:de:1c:66:43:7a:1c:
b9:48:c3:dd:ce:56:c4:17:d2:73:dc:11:1b:84:56:79:1b:3e:
14:41:6b:ff:69:3c:14:b8:f7:5f:7e:4b:f6:35:8a:83:96:aa:
72:6c:12:40:e6:0a:9a:0a:95:ee:f1:cd:59:33:5c:79:76:a8:
8d:32:e8:24:2f:e3:66:95:0b:71:ad:2c:f3:52:3f:53:a6:a5:
c0:2e:32:d2:c2:d5:35:fe:be:78:df:52:49:cc:53:2b:be:75:
5c:a8:6f:d9:3c:08:f6:d0:8a:49:eb:34:a1:7a:77:eb:e4:6c:
7e:ed:61:e7:cd:2c:f8:17:b0:42:bf:65:e7:95:29:39:71:5f:
f9:30:b4:35:be:ba:a1:bc:c5:9e:8e:77:ed:10:40:4f:df:2e:
44:15:08:ed
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDF3pZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
ZjZiNWY5Y2I4NmVlMTA5MWIyMTkwZTZjMWJkYTg5ODRiM2QxNGUwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhmZTM5ZDQzMjM1NDI5
MDkyZDVmZGNmOTJhNGMyMGJjMjcwODMxZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl82ZglwIHSGeRxbFDCITzZv9TP6cPI5sosPEkFYjYIop+mCp
wepkz/u4iaxAo8g5eBvTi09q9zisOADduEu+PsN47qEnh25J6nRdoRsfJcRRNwve
+UKNXXAOuM5vqRnW2pXwCAcwRRV9X050hFSLrw2qic2dkJSIoDhiY8PiU+seUNHY
ElTWmarNW4LQTVoRF19SNYq/nzLgUN3OI4RconJXu9m7F5+G8t43nVQAyyiy4wOW
LpJE0ruF+3wCSBsGn+1Xn+zrpyXM/aL2guEp19ql066zH9+44XItmypOcMgTdIy0
Zs47nLYDoqXerrnvytAG8DKt+YF/x7SCWC+IPQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFA/CYnAj+s1ubKCNJ48vQuxlDJ9CMB8GA1UdIwQYMBaAFCDLAZT6BiDFJD+j
YEBJqFp3ZnadMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTVmNmI1
ZjljYjg2ZWUxMDkxYjIxOTBlNmMxYmRhODk4NGIzZDE0ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTYyMGUyMjYtOWU4MC00M2NmLWE4MTgtMzc0NTE3
ZjU0NzhhL2ZlMzlkNDMyMzU0MjkwOTJkNWZkY2Y5MmE0YzIwYmMyNzA4MzFlNzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xNjIwZTIyNi05ZTgwLTQzY2YtYTgxOC0zNzQ1
MTdmNTQ3OGEvZTVmNmI1ZjljYjg2ZWUxMDkxYjIxOTBlNmMxYmRhODk4NGIzZDE0
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQALa6BAwQCLa6AMA0GCSqGSIb3DQEBCwUAA4IBAQC4Kasu
0PMr7An+WGZtk0TY2ROOIzSQ5HB9l3NILN45mkOng7xv9s5tALS1F0AJFeI6vo2X
y+ux+xx5Afb7A7i5JYI4y2ci6/Ykvzxz4EMF/fr+SpQzycZZzdm0d0nJfRIRWbz5
OjfeHGZDehy5SMPdzlbEF9Jz3BEbhFZ5Gz4UQWv/aTwUuPdffkv2NYqDlqpybBJA
5gqaCpXu8c1ZM1x5dqiNMugkL+NmlQtxrSzzUj9TpqXALjLSwtU1/r5431JJzFMr
vnVcqG/ZPAj20IpJ6zShenfr5Gx+7WHnzSz4F7BCv2XnlSk5cV/5MLQ1vrqhvMWe
jnftEEBP3y5EFQjt
-----END CERTIFICATE-----
Generated at Wed Jan 3 18:36:39 2024 by rpki-client on console-ams.rpki-client.org