Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/8213933000002b8bc044b6b2db9714b4969f64e0.roa
File: 8213933000002b8bc044b6b2db9714b4969f64e0.roa (raw, json)
Hash identifier: lv+1vUSAalK2vDR9m3nJ62Wjm1AI3Ld+p154cLQfQ+c=
Subject key identifier: 96:69:95:45:4B:3A:1B:87:7A:DB:2A:F3:D6:25:54:FB:49:8F:E2:9A
Certificate issuer: /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial: 27B206
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/8213933000002b8bc044b6b2db9714b4969f64e0.roa
Signing time: Tue 30 Jan 2024 16:42:19 +0000
ROA not before: Tue 30 Jan 2024 16:42:19 +0000
ROA not after: Fri 30 Jan 2026 16:42:19 +0000
asID: 52228
IP address blocks: 152.231.136.0/24 maxlen: 30
Validation: Failed, certificate revoked on Wed 31 Jan 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2601478 (0x27b206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Validity
Not Before: Jan 30 16:42:19 2024 GMT
Not After : Jan 30 16:42:19 2026 GMT
Subject: CN=8213933000002b8bc044b6b2db9714b4969f64e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ac:10:fa:34:82:76:0d:17:0d:85:e1:f6:a2:
7c:b8:e0:fb:c0:f0:10:b3:aa:11:52:0b:47:3d:9d:
78:0d:fe:9d:d3:04:b9:c8:39:5c:77:ab:01:8f:d2:
63:87:ee:07:af:45:d1:27:81:84:65:00:25:49:06:
ed:d7:33:f1:8d:4f:1e:7e:2e:94:cd:0d:2a:2f:e6:
66:68:8d:b6:e9:fe:49:8c:72:84:c3:65:d7:fc:9a:
c8:6d:4e:cb:69:b0:42:d3:bb:2c:e9:19:e5:b8:b9:
8a:1a:55:13:5b:5a:2f:3d:d3:a8:0a:17:ed:9f:4c:
25:a8:15:4e:e4:63:54:b4:ee:18:36:b3:54:08:22:
b0:d7:73:4d:f4:11:7a:13:de:ef:ef:08:c7:6c:02:
ac:17:55:69:38:a8:ec:00:97:be:5a:f3:31:3a:68:
d5:76:cc:9c:dd:37:b7:f4:0c:32:65:fb:89:89:48:
23:01:8c:45:3d:79:4b:05:a3:03:8b:cf:51:d5:7e:
50:b2:80:5b:bf:64:41:45:62:cc:ec:e4:43:f5:e0:
02:11:5d:a6:c8:3e:d0:50:99:56:48:f9:3d:af:6b:
3d:f6:6b:c7:d6:40:c2:63:1a:1e:48:af:14:1f:9c:
52:da:2f:8f:df:75:ea:84:d2:2e:83:c2:bf:c0:23:
cd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:69:95:45:4B:3A:1B:87:7A:DB:2A:F3:D6:25:54:FB:49:8F:E2:9A
X509v3 Authority Key Identifier:
keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/8213933000002b8bc044b6b2db9714b4969f64e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.136.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8c:82:b2:90:cb:76:18:76:24:39:af:c6:eb:1d:ce:3e:db:
95:ef:8d:b9:56:c7:84:73:2c:3f:65:67:a4:ff:12:d0:11:4b:
ac:57:4e:26:26:df:04:25:f8:80:d7:6f:29:85:8b:17:84:6c:
1e:d9:06:c4:95:16:70:6b:9f:3e:f3:dd:76:2f:26:84:e2:69:
66:4c:20:08:fc:03:61:7d:47:98:d4:b8:de:c5:5c:d9:f3:c4:
a1:5c:1d:61:dd:9b:f6:51:67:da:a0:c6:61:f1:86:1a:b4:5e:
9e:87:16:d8:8a:dc:a0:ce:2a:c6:37:c8:f0:51:6c:e4:21:ae:
4e:39:7c:b0:0c:bb:27:c9:47:12:0e:a8:72:54:8b:b8:c4:7e:
9c:90:0a:1e:a3:f3:6a:34:1a:61:dc:ca:ff:d9:fd:56:7f:37:
a5:f0:1a:c9:a4:50:e8:ef:49:1d:af:64:d7:3a:49:22:74:c9:
88:06:ff:eb:d7:52:cd:9c:40:3f:3e:c6:24:02:e9:58:4f:f4:
d3:62:dd:d2:55:16:d1:9c:35:6f:a8:69:4f:1d:ca:10:ae:09:
3c:b4:3c:5c:39:41:a8:09:4b:59:7c:87:84:8d:56:6a:c3:5e:
8a:4f:6c:df:00:48:04:e0:37:35:41:da:45:ad:15:3c:ba:12:
8d:d8:a3:70
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ7IGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdk
NjY2ZmM5NmM4N2I3MTNjMWYxZmM2YjI4OWU1MWZhZTI5OGE5ZmYwHhcNMjQwMTMw
MTY0MjE5WhcNMjYwMTMwMTY0MjE5WjAzMTEwLwYDVQQDEyg4MjEzOTMzMDAwMDAy
YjhiYzA0NGI2YjJkYjk3MTRiNDk2OWY2NGUwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlawQ+jSCdg0XDYXh9qJ8uOD7wPAQs6oRUgtHPZ14Df6d0wS5
yDlcd6sBj9Jjh+4Hr0XRJ4GEZQAlSQbt1zPxjU8efi6UzQ0qL+ZmaI226f5JjHKE
w2XX/JrIbU7LabBC07ss6RnluLmKGlUTW1ovPdOoChftn0wlqBVO5GNUtO4YNrNU
CCKw13NN9BF6E97v7wjHbAKsF1VpOKjsAJe+WvMxOmjVdsyc3Te39AwyZfuJiUgj
AYxFPXlLBaMDi89R1X5QsoBbv2RBRWLM7ORD9eACEV2myD7QUJlWSPk9r2s99mvH
1kDCYxoeSK8UH5xS2i+P33XqhNIug8K/wCPNDwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJZplUVLOhuHetsq89YlVPtJj+KaMB8GA1UdIwQYMBaAFDRGFVM9N+d+5XHJ
0pVIYegs/s8mMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2Q2NjZm
Yzk2Yzg3YjcxM2MxZjFmYzZiMjg5ZTUxZmFlMjk4YTlmZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjUwNTRjMGYtMTk4YS00N2M2LWIxMTItMTUyZTM0
NjAyMzhjLzgyMTM5MzMwMDAwMDJiOGJjMDQ0YjZiMmRiOTcxNGI0OTY5ZjY0ZTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNTA1NGMwZi0xOThhLTQ3YzYtYjExMi0xNTJl
MzQ2MDIzOGMvN2Q2NjZmYzk2Yzg3YjcxM2MxZjFmYzZiMjg5ZTUxZmFlMjk4YTlm
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJjniDANBgkqhkiG9w0BAQsFAAOCAQEAjIyCspDLdhh2JDmv
xusdzj7ble+NuVbHhHMsP2VnpP8S0BFLrFdOJibfBCX4gNdvKYWLF4RsHtkGxJUW
cGufPvPddi8mhOJpZkwgCPwDYX1HmNS43sVc2fPEoVwdYd2b9lFn2qDGYfGGGrRe
nocW2IrcoM4qxjfI8FFs5CGuTjl8sAy7J8lHEg6oclSLuMR+nJAKHqPzajQaYdzK
/9n9Vn83pfAayaRQ6O9JHa9k1zpJInTJiAb/69dSzZxAPz7GJALpWE/002Ld0lUW
0Zw1b6hpTx3KEK4JPLQ8XDlBqAlLWXyHhI1WasNeik9s3wBIBOA3NUHaRa0VPLoS
jdijcA==
-----END CERTIFICATE-----
Generated at Thu Feb 1 00:16:36 2024 by rpki-client on console-fra.rpki-client.org