Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/9c83842b86ff0fd6e070a567b7ce1701d41a9ebe.roa
File: 9c83842b86ff0fd6e070a567b7ce1701d41a9ebe.roa (raw, json)
Hash identifier: kCnzgpF/iMUSMEz7xZ2cwSnFaIr4k8fBPsaKUj42mnc=
Subject key identifier: 2D:69:91:A2:22:61:9E:84:5A:E0:39:90:F8:5E:2E:68:77:AC:9F:EE
Certificate issuer: /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial: 1799DB
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/9c83842b86ff0fd6e070a567b7ce1701d41a9ebe.roa
Signing time: Wed 25 May 2022 01:13:21 +0000
ROA not before: Tue 24 May 2022 03:00:00 +0000
ROA not after: Fri 24 May 2024 03:00:00 +0000
asID: 267699
IP address blocks: 66.231.69.0/24 maxlen: 24
66.231.71.0/24 maxlen: 24
66.231.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1546715 (0x1799db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Validity
Not Before: May 24 03:00:00 2022 GMT
Not After : May 24 03:00:00 2024 GMT
Subject: CN=9c83842b86ff0fd6e070a567b7ce1701d41a9ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:09:c5:56:5e:c6:5b:2b:6f:c7:e7:90:41:57:
35:78:e0:6b:8c:cc:b6:6e:07:2d:7e:4a:e8:2a:43:
5e:45:79:ca:89:ed:d9:95:8f:72:2f:57:b1:cb:d8:
0e:8d:ad:44:45:cd:f4:8c:95:7b:b2:c7:43:6e:22:
af:8f:c7:88:cc:c5:05:1e:2f:f7:fd:5d:75:d7:73:
09:81:26:e5:38:b3:fb:f5:56:75:29:a7:0a:6c:69:
c5:0a:e6:c4:e9:3f:a3:43:e2:3f:34:5f:42:40:41:
71:24:fa:9a:58:11:da:6a:08:bb:32:99:dc:67:54:
0d:97:21:2a:a7:6f:dd:52:1a:0b:b4:24:5e:57:bc:
ad:ed:91:7d:20:1a:9f:51:3e:50:78:78:76:9d:1c:
69:ef:24:66:11:48:35:d3:d9:17:fd:6a:25:3b:e6:
5e:84:d0:6d:98:db:f8:ef:7f:29:f3:e4:4f:d5:66:
8c:54:8b:51:e2:47:78:bd:78:14:84:44:6a:c6:18:
c3:ed:08:13:ae:fb:55:1e:f5:68:07:27:cb:ba:29:
f1:3c:3e:cf:af:06:82:73:43:44:ba:b1:4e:e1:a4:
58:99:cc:f7:51:5b:2f:0f:b8:e9:7c:dd:d6:17:09:
5d:41:d4:ca:53:b1:fd:83:cf:be:7f:8d:4d:fa:20:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:69:91:A2:22:61:9E:84:5A:E0:39:90:F8:5E:2E:68:77:AC:9F:EE
X509v3 Authority Key Identifier:
keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/9c83842b86ff0fd6e070a567b7ce1701d41a9ebe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.231.69.0/24
66.231.71.0/24
66.231.77.0/24
Signature Algorithm: sha256WithRSAEncryption
47:94:bb:a0:d7:81:57:6f:5c:69:8e:f9:68:91:fb:48:9c:a9:
ff:fd:b8:82:be:b7:08:c2:45:05:05:5d:84:15:e1:90:43:d5:
65:65:f4:1c:cd:f2:80:63:f0:fd:c9:27:7d:59:69:13:29:79:
f1:f3:05:7a:18:79:e2:36:11:e2:c8:3c:57:36:bc:c1:b1:37:
b4:0c:54:30:3e:08:0a:aa:f3:d0:e3:31:0c:73:83:92:a6:c8:
ea:f3:67:62:39:d3:b6:b4:65:f0:d7:ee:ca:1c:69:ee:df:7c:
5b:e4:ea:35:9c:b3:66:2a:25:90:ff:34:fb:69:1d:93:7e:8b:
d7:de:8d:3b:15:4b:86:de:83:e7:83:48:3b:c8:4d:5b:9a:f9:
87:55:8f:ab:f4:56:3e:43:33:35:a2:43:df:88:d6:f4:1c:ea:
a7:fd:e5:f3:60:04:e3:e7:f6:3a:db:5d:05:94:fa:28:99:be:
f8:1d:ea:39:24:d8:b6:6e:dc:26:4c:c5:83:c8:41:b0:f3:e1:
3e:38:83:3f:12:2e:21:8b:7e:44:de:e3:1a:96:1f:d5:a5:31:
e7:9c:53:c6:ae:b4:02:8f:cf:e9:76:55:20:6d:47:42:23:73:
23:40:82:9b:2d:00:2d:71:86:43:34:ac:ce:94:5d:4a:5e:dd:
46:dd:7f:8e
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDF5nbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
NjRlMjU3ZWFlMDRlZTI2ZDhlYjMzOWYxNDg3OTFiMzFjYzA4NzUwHhcNMjIwNTI0
MDMwMDAwWhcNMjQwNTI0MDMwMDAwWjAzMTEwLwYDVQQDEyg5YzgzODQyYjg2ZmYw
ZmQ2ZTA3MGE1NjdiN2NlMTcwMWQ0MWE5ZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAggnFVl7GWytvx+eQQVc1eOBrjMy2bgctfkroKkNeRXnKie3Z
lY9yL1exy9gOja1ERc30jJV7ssdDbiKvj8eIzMUFHi/3/V1113MJgSblOLP79VZ1
KacKbGnFCubE6T+jQ+I/NF9CQEFxJPqaWBHaagi7MpncZ1QNlyEqp2/dUhoLtCRe
V7yt7ZF9IBqfUT5QeHh2nRxp7yRmEUg109kX/WolO+ZehNBtmNv4738p8+RP1WaM
VItR4kd4vXgUhERqxhjD7QgTrvtVHvVoByfLuinxPD7PrwaCc0NEurFO4aRYmcz3
UVsvD7jpfN3WFwldQdTKU7H9g8++f41N+iCqbQIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFC1pkaIiYZ6EWuA5kPheLmh3rJ/uMB8GA1UdIwQYMBaAFGfGO6RHojXSKBwz
PpqDhyUXpLG+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2U2NGUy
NTdlYWUwNGVlMjZkOGViMzM5ZjE0ODc5MWIzMWNjMDg3NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjViNjM3YzYtY2RjZi00MjNkLThjMGMtY2Q2MTVh
Yjk4YTI0LzljODM4NDJiODZmZjBmZDZlMDcwYTU2N2I3Y2UxNzAxZDQxYTllYmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNWI2MzdjNi1jZGNmLTQyM2QtOGMwYy1jZDYx
NWFiOThhMjQvY2U2NGUyNTdlYWUwNGVlMjZkOGViMzM5ZjE0ODc5MWIzMWNjMDg3
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAELnRQMEAELnRwMEAELnTTANBgkqhkiG9w0BAQsFAAOCAQEA
R5S7oNeBV29caY75aJH7SJyp//24gr63CMJFBQVdhBXhkEPVZWX0HM3ygGPw/ckn
fVlpEyl58fMFehh54jYR4sg8Vza8wbE3tAxUMD4ICqrz0OMxDHODkqbI6vNnYjnT
trRl8Nfuyhxp7t98W+TqNZyzZiolkP80+2kdk36L196NOxVLht6D54NIO8hNW5r5
h1WPq/RWPkMzNaJD34jW9Bzqp/3l82AE4+f2OttdBZT6KJm++B3qOSTYtm7cJkzF
g8hBsPPhPjiDPxIuIYt+RN7jGpYf1aUx55xTxq60Ao/P6XZVIG1HQiNzI0CCmy0A
LXGGQzSszpRdSl7dRt1/jg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org