Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/797edc01212224071c2ac1093f21332854f20805.roa
File: 797edc01212224071c2ac1093f21332854f20805.roa (raw, json)
Hash identifier: +nHZzUP2hTp7PYI4C72BcNd7LOVjBr6Xoiim1GZvhkM=
Subject key identifier: 57:78:FF:6C:D3:1A:7B:85:87:FA:E3:51:17:9E:38:B8:97:37:9B:2A
Certificate issuer: /CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Certificate serial: 158150
Authority key identifier: 5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/797edc01212224071c2ac1093f21332854f20805.roa
Signing time: Fri 18 Mar 2022 21:01:04 +0000
ROA not before: Fri 18 Mar 2022 03:00:00 +0000
ROA not after: Mon 18 Mar 2024 03:00:00 +0000
asID: 26611
IP address blocks: 191.71.0.0/16 maxlen: 16
191.156.240.0/20 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1409360 (0x158150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Validity
Not Before: Mar 18 03:00:00 2022 GMT
Not After : Mar 18 03:00:00 2024 GMT
Subject: CN=797edc01212224071c2ac1093f21332854f20805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:fb:62:f5:64:7f:be:dc:b8:10:0d:39:e2:
b0:5a:f4:33:88:dc:1f:88:e7:27:6c:46:f3:a8:63:
c8:db:b9:75:d6:cc:15:e2:5e:28:b6:5b:66:29:b1:
54:9b:0c:e8:21:50:5f:fe:76:c2:19:b6:68:b9:9f:
30:0f:ab:65:eb:a8:b0:43:ab:07:38:8d:28:ba:90:
81:c7:97:3e:4d:3d:88:98:a7:6a:4e:32:1a:69:29:
42:a0:87:4f:8e:34:6f:0a:42:6f:d0:ad:80:75:ed:
b3:0f:8b:2d:fa:dd:e2:28:9e:0f:12:09:53:49:c6:
df:a3:5f:d9:5c:f9:a9:f3:10:02:96:8f:ef:30:81:
d2:5b:a6:17:8f:8c:71:be:e3:b0:55:34:f1:44:01:
88:6e:1e:20:8d:ca:37:fc:1f:91:7d:2a:37:c1:4b:
7e:ff:c8:28:92:3c:78:63:49:07:3a:57:69:9c:9a:
d6:f9:1e:9a:68:03:d2:b8:d9:4c:ac:b3:f3:f6:33:
ae:28:1c:ea:92:e6:ae:09:54:d2:0c:1d:d1:39:51:
9e:2a:9a:03:87:ac:14:f6:70:07:e3:68:4d:43:20:
1f:a7:bd:5f:49:21:2d:02:3b:bb:17:64:01:2a:10:
63:bc:68:53:67:1b:8f:6d:4e:f3:3c:f1:c4:ac:34:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:78:FF:6C:D3:1A:7B:85:87:FA:E3:51:17:9E:38:B8:97:37:9B:2A
X509v3 Authority Key Identifier:
keyid:5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/797edc01212224071c2ac1093f21332854f20805.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.71.0.0/16
191.156.240.0/20
Signature Algorithm: sha256WithRSAEncryption
71:29:00:21:a4:b2:a2:ff:44:44:12:b4:96:36:7d:00:aa:c5:
c9:5d:0d:47:78:45:7b:09:f5:1e:77:ac:c5:31:af:1b:50:ba:
76:6e:f0:19:71:d4:e7:51:a6:23:5b:10:ba:2d:b2:8f:95:13:
52:61:44:42:71:2c:65:3a:4a:28:1e:7c:f0:4f:f0:23:8f:98:
37:54:12:de:33:52:2b:00:e1:b3:cb:30:cb:2d:7d:cd:a0:69:
92:29:9e:7d:5e:1f:24:20:53:8e:d0:27:13:a8:b6:1e:8a:55:
cc:6c:bf:75:99:cf:bd:87:d6:ea:5c:58:f6:c8:ca:43:78:30:
28:8a:8a:69:50:6e:ee:29:65:56:ed:5a:c7:9c:15:c2:4f:f5:
ea:4e:fe:65:a8:d1:24:43:ce:34:36:5b:f3:21:68:92:e5:09:
8a:aa:e4:d9:5e:a0:22:1d:9b:54:8e:bc:53:86:d1:6d:ff:22:
2a:90:ce:df:f6:1b:06:3a:c0:98:29:1e:88:28:91:83:46:a5:
fa:47:15:d4:d4:5f:df:a1:8f:43:25:cb:55:a7:3e:2f:2d:ee:
a6:8a:2a:c8:8c:b6:a0:ec:33:2d:da:8c:5c:06:5d:93:00:0a:
26:88:ff:ed:9c:fd:5a:be:af:d6:a0:d4:5c:ce:3a:cf:e6:bc:
27:5b:06:d6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIDFYFQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE2
OGFjYTk0NWU1YjRlMGZhNTc1YmJlMDNiMWFmNjUxNDZlZjBiNmYwHhcNMjIwMzE4
MDMwMDAwWhcNMjQwMzE4MDMwMDAwWjAzMTEwLwYDVQQDEyg3OTdlZGMwMTIxMjIy
NDA3MWMyYWMxMDkzZjIxMzMyODU0ZjIwODA1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlRn7YvVkf77cuBANOeKwWvQziNwfiOcnbEbzqGPI27l11swV
4l4otltmKbFUmwzoIVBf/nbCGbZouZ8wD6tl66iwQ6sHOI0oupCBx5c+TT2ImKdq
TjIaaSlCoIdPjjRvCkJv0K2Ade2zD4st+t3iKJ4PEglTScbfo1/ZXPmp8xAClo/v
MIHSW6YXj4xxvuOwVTTxRAGIbh4gjco3/B+RfSo3wUt+/8gokjx4Y0kHOldpnJrW
+R6aaAPSuNlMrLPz9jOuKBzqkuauCVTSDB3ROVGeKpoDh6wU9nAH42hNQyAfp71f
SSEtAju7F2QBKhBjvGhTZxuPbU7zPPHErDRC5QIDAQABo4ICYDCCAlwwHQYDVR0O
BBYEFFd4/2zTGnuFh/rjUReeOLiXN5sqMB8GA1UdIwQYMBaAFFxQ5QNp/Z+ZppL2
iLlivHesiqnLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTY4YWNh
OTQ1ZTViNGUwZmE1NzViYmUwM2IxYWY2NTE0NmVmMGI2Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTgyMTgwNmMtMGU4Mi00MjA0LThiM2MtZGRlN2Mw
ZmM4ZDYyLzc5N2VkYzAxMjEyMjI0MDcxYzJhYzEwOTNmMjEzMzI4NTRmMjA4MDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xODIxODA2Yy0wZTgyLTQyMDQtOGIzYy1kZGU3
YzBmYzhkNjIvYTY4YWNhOTQ1ZTViNGUwZmE1NzViYmUwM2IxYWY2NTE0NmVmMGI2
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQV
MBMwEQQCAAEwCwMDAL9HAwQEv5zwMA0GCSqGSIb3DQEBCwUAA4IBAQBxKQAhpLKi
/0REErSWNn0AqsXJXQ1HeEV7CfUed6zFMa8bULp2bvAZcdTnUaYjWxC6LbKPlRNS
YURCcSxlOkooHnzwT/Ajj5g3VBLeM1IrAOGzyzDLLX3NoGmSKZ59Xh8kIFOO0CcT
qLYeilXMbL91mc+9h9bqXFj2yMpDeDAoioppUG7uKWVW7VrHnBXCT/XqTv5lqNEk
Q840NlvzIWiS5QmKquTZXqAiHZtUjrxThtFt/yIqkM7f9hsGOsCYKR6IKJGDRqX6
RxXU1F/foY9DJctVpz4vLe6miirIjLag7DMt2oxcBl2TAAomiP/tnP1avq/WoNRc
zjrP5rwnWwbW
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org