Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/619a340912664a0121d970e3920b52f73bd526f9.roa
File: 619a340912664a0121d970e3920b52f73bd526f9.roa (raw, json)
Hash identifier: LoCFMlaIpEP80O064zos1BAom5bAhBhtHUPIGMKUNYo=
Subject key identifier: C8:46:A5:5E:72:FF:9D:47:C5:79:B4:D4:DF:C9:8D:85:83:E5:C3:75
Certificate issuer: /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial: 0C9D69
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/619a340912664a0121d970e3920b52f73bd526f9.roa
Signing time: Wed 24 Mar 2021 14:35:18 +0000
ROA not before: Wed 24 Mar 2021 14:35:18 +0000
ROA not after: Tue 24 Mar 2026 14:35:18 +0000
asID: 3273
IP address blocks: 66.231.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 826729 (0xc9d69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Validity
Not Before: Mar 24 14:35:18 2021 GMT
Not After : Mar 24 14:35:18 2026 GMT
Subject: CN=619a340912664a0121d970e3920b52f73bd526f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:41:83:8a:9c:4f:4b:b9:4c:6f:bf:f9:bb:
c7:87:ae:ec:7e:8f:42:c2:7b:31:1c:ea:1c:e6:b1:
19:1f:23:7c:34:0b:a2:13:70:99:46:52:75:bb:68:
97:39:33:32:eb:b9:cb:b5:f6:7b:8c:02:e0:c0:7e:
23:a3:dc:d8:64:e5:06:99:86:09:45:d0:44:69:1a:
2f:aa:2c:c6:9f:89:aa:ed:fa:00:eb:fa:8a:96:1e:
a4:3f:87:78:06:a9:ac:f8:71:24:2d:c8:17:30:d1:
56:85:69:43:17:9a:44:71:5f:7b:29:d9:b9:cb:22:
f9:3d:65:a1:75:3c:fa:dc:92:4e:fd:c2:5e:37:e0:
ad:d4:36:ce:a0:d6:d8:16:a8:08:d0:8a:0d:9d:64:
a9:11:1c:82:7e:a5:46:d6:07:c6:c2:0c:72:5b:14:
5e:48:44:31:73:94:cc:36:e6:5e:df:98:db:10:9c:
e8:3f:c6:4d:a6:4c:f8:d5:c6:26:3b:7c:fe:b5:37:
52:7d:20:85:30:ae:a8:53:6f:b6:17:97:ff:8e:e5:
65:cc:5e:36:5b:31:b0:af:04:66:bc:79:e9:30:6d:
12:62:25:a7:a2:a7:e6:74:fb:df:39:37:e4:29:aa:
03:23:f3:64:f5:ff:e7:95:05:05:e0:af:c7:0c:80:
28:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:46:A5:5E:72:FF:9D:47:C5:79:B4:D4:DF:C9:8D:85:83:E5:C3:75
X509v3 Authority Key Identifier:
keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/619a340912664a0121d970e3920b52f73bd526f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.231.64.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:79:d3:a3:be:a1:57:16:31:6b:a0:bd:df:f6:1b:5f:b7:92:
54:92:4f:48:c6:39:83:22:be:4e:33:fd:c2:43:09:52:d2:ef:
a5:c8:1d:45:cc:32:06:5b:e2:8f:97:ff:5a:69:68:65:a4:6d:
9e:a8:fe:1c:5c:80:ec:30:92:cc:2e:b5:02:ee:94:66:7d:0f:
f5:a2:8f:b9:a1:c9:50:57:cd:3f:00:84:ed:d9:d0:1e:56:f7:
e3:44:16:7a:c4:0a:79:51:cc:c1:f0:8b:b9:ee:1d:4b:00:5f:
71:a2:10:71:1d:43:20:65:58:36:c2:0f:26:01:3f:1e:c5:52:
6d:19:60:06:ac:25:8d:a5:fb:2a:69:c9:29:26:c8:ac:4a:23:
69:91:e0:dd:53:4f:3c:fd:16:18:db:da:21:16:5d:56:7a:d3:
2c:6f:18:b2:5b:3f:32:6e:06:2a:8d:65:b8:f5:ad:e4:50:2b:
ed:eb:7e:20:3e:b6:31:f9:9c:d5:fc:cd:8e:43:99:83:9a:3a:
76:67:98:dc:4b:87:c2:d1:ec:86:e5:69:57:a5:0c:7a:45:bb:
8e:d8:16:95:af:e3:73:f9:97:3d:87:b2:36:f8:12:4f:ca:98:
36:a5:e8:a9:13:84:c9:92:27:d8:ba:81:27:a5:1b:e9:a0:dd:
0e:aa:ab:a9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDJ1pMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
NjRlMjU3ZWFlMDRlZTI2ZDhlYjMzOWYxNDg3OTFiMzFjYzA4NzUwHhcNMjEwMzI0
MTQzNTE4WhcNMjYwMzI0MTQzNTE4WjAzMTEwLwYDVQQDEyg2MTlhMzQwOTEyNjY0
YTAxMjFkOTcwZTM5MjBiNTJmNzNiZDUyNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo0tBg4qcT0u5TG+/+bvHh67sfo9CwnsxHOoc5rEZHyN8NAui
E3CZRlJ1u2iXOTMy67nLtfZ7jALgwH4jo9zYZOUGmYYJRdBEaRovqizGn4mq7foA
6/qKlh6kP4d4Bqms+HEkLcgXMNFWhWlDF5pEcV97Kdm5yyL5PWWhdTz63JJO/cJe
N+Ct1DbOoNbYFqgI0IoNnWSpERyCfqVG1gfGwgxyWxReSEQxc5TMNuZe35jbEJzo
P8ZNpkz41cYmO3z+tTdSfSCFMK6oU2+2F5f/juVlzF42WzGwrwRmvHnpMG0SYiWn
oqfmdPvfOTfkKaoDI/Nk9f/nlQUF4K/HDIAoKwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMhGpV5y/51HxXm01N/JjYWD5cN1MB8GA1UdIwQYMBaAFGfGO6RHojXSKBwz
PpqDhyUXpLG+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2U2NGUy
NTdlYWUwNGVlMjZkOGViMzM5ZjE0ODc5MWIzMWNjMDg3NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjViNjM3YzYtY2RjZi00MjNkLThjMGMtY2Q2MTVh
Yjk4YTI0LzYxOWEzNDA5MTI2NjRhMDEyMWQ5NzBlMzkyMGI1MmY3M2JkNTI2Zjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNWI2MzdjNi1jZGNmLTQyM2QtOGMwYy1jZDYx
NWFiOThhMjQvY2U2NGUyNTdlYWUwNGVlMjZkOGViMzM5ZjE0ODc5MWIzMWNjMDg3
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAELnQDANBgkqhkiG9w0BAQsFAAOCAQEADnnTo76hVxYxa6C9
3/YbX7eSVJJPSMY5gyK+TjP9wkMJUtLvpcgdRcwyBlvij5f/WmloZaRtnqj+HFyA
7DCSzC61Au6UZn0P9aKPuaHJUFfNPwCE7dnQHlb340QWesQKeVHMwfCLue4dSwBf
caIQcR1DIGVYNsIPJgE/HsVSbRlgBqwljaX7KmnJKSbIrEojaZHg3VNPPP0WGNva
IRZdVnrTLG8Ysls/Mm4GKo1luPWt5FAr7et+ID62Mfmc1fzNjkOZg5o6dmeY3EuH
wtHshuVpV6UMekW7jtgWla/jc/mXPYeyNvgST8qYNqXoqROEyZIn2LqBJ6Ub6aDd
DqqrqQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:28 2023 by rpki-client on console-ams.rpki-client.org