Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/fa20dfbb21664e4666187c89d5389da31b35b5d0.roa
File: fa20dfbb21664e4666187c89d5389da31b35b5d0.roa (raw, json)
Hash identifier: jV/Mh5QeLsxG/SUOewLiAp+sm5DCw0YbQJ7MUHYi4OA=
Subject key identifier: 90:2A:FD:E0:0E:33:D8:73:DE:C7:D4:62:81:AE:04:E5:8C:3E:E9:B4
Certificate issuer: /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial: 0C9CFC
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/fa20dfbb21664e4666187c89d5389da31b35b5d0.roa
Signing time: Wed 24 Mar 2021 14:35:18 +0000
ROA not before: Wed 24 Mar 2021 14:35:18 +0000
ROA not after: Tue 24 Mar 2026 14:35:18 +0000
asID: 208969
IP address blocks: 66.231.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 826620 (0xc9cfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Validity
Not Before: Mar 24 14:35:18 2021 GMT
Not After : Mar 24 14:35:18 2026 GMT
Subject: CN=fa20dfbb21664e4666187c89d5389da31b35b5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e5:61:74:51:30:8c:2c:d7:02:70:74:c5:c4:
3c:ab:1f:33:72:56:fd:7c:bd:02:49:b6:65:e1:24:
30:45:2b:bb:1f:5f:50:49:e0:12:0d:64:38:f9:aa:
2c:36:81:30:7d:d9:f2:65:3d:44:62:c6:86:fd:1e:
6f:55:4e:15:c5:34:9f:ee:97:51:fa:24:b8:55:4d:
8f:ca:5f:aa:cd:84:a7:04:08:18:02:09:f5:c9:1b:
9b:26:85:df:e5:9a:a6:3c:6a:98:d0:85:bf:e7:c4:
0d:b5:90:0d:ee:63:e0:86:78:d9:77:83:fb:7f:29:
6d:2b:1a:5b:a1:a2:85:5c:1c:06:24:a7:cc:e2:03:
0b:c2:9c:c7:f7:10:b7:60:bb:d8:db:7b:e6:59:e9:
e3:34:d0:d5:b9:44:a3:3a:4c:dc:54:57:47:ee:59:
89:33:63:aa:d4:b7:fb:12:1f:e6:3e:a4:8b:4c:0f:
61:c0:39:ec:fe:b1:69:54:0b:14:48:c8:02:72:3b:
ea:55:8e:d1:67:57:bf:be:85:f8:6c:3c:01:a8:af:
27:ec:aa:4a:82:9d:24:6b:1b:ac:60:1a:02:b2:70:
2b:3e:8b:51:23:89:8c:4a:74:90:3f:86:4f:62:31:
16:19:f0:d8:46:21:2c:ff:3f:15:ee:05:24:fe:5a:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2A:FD:E0:0E:33:D8:73:DE:C7:D4:62:81:AE:04:E5:8C:3E:E9:B4
X509v3 Authority Key Identifier:
keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/fa20dfbb21664e4666187c89d5389da31b35b5d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.231.71.0/24
Signature Algorithm: sha256WithRSAEncryption
53:94:d9:73:36:27:82:00:67:71:44:84:99:df:33:aa:46:50:
8a:8f:67:20:4b:00:01:a4:85:d9:b2:8c:88:81:ad:01:be:cd:
4c:55:a1:c0:16:a6:88:1d:c9:67:93:95:f8:91:d9:4a:14:8b:
1a:95:d8:a9:8f:46:81:9d:9d:8c:0f:20:a4:94:4f:cd:a8:f7:
2b:9b:f9:6c:e7:2e:86:b2:40:53:3d:ae:67:05:5b:d8:97:5c:
d8:00:19:bf:b6:cf:dc:3e:2e:2d:cd:3e:f4:43:33:78:ee:e6:
a4:07:8a:11:b9:14:7d:ec:b1:6f:bd:d3:35:0a:da:dd:3d:d9:
59:73:66:b5:75:78:bc:04:4d:c8:cc:db:85:76:04:a2:de:32:
3c:27:19:40:8b:dc:cc:ef:0d:c5:b4:c0:43:69:c0:7e:99:c5:
12:f8:1d:b0:ba:9e:e4:05:87:be:d6:36:f4:91:45:a8:f6:19:
93:00:56:c9:e7:f8:42:45:70:9b:90:d8:56:0f:45:88:fb:8b:
96:d8:67:34:4f:04:5a:08:76:5b:12:f7:7e:65:eb:87:ac:41:
74:a7:f5:eb:de:c1:30:87:b5:6b:79:c8:36:33:04:1d:9e:8e:
42:80:6c:2d:01:03:76:f1:49:c7:83:b9:e7:f9:24:98:2b:75:
94:a2:9b:d2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDJz8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
NjRlMjU3ZWFlMDRlZTI2ZDhlYjMzOWYxNDg3OTFiMzFjYzA4NzUwHhcNMjEwMzI0
MTQzNTE4WhcNMjYwMzI0MTQzNTE4WjAzMTEwLwYDVQQDEyhmYTIwZGZiYjIxNjY0
ZTQ2NjYxODdjODlkNTM4OWRhMzFiMzViNWQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkOVhdFEwjCzXAnB0xcQ8qx8zclb9fL0CSbZl4SQwRSu7H19Q
SeASDWQ4+aosNoEwfdnyZT1EYsaG/R5vVU4VxTSf7pdR+iS4VU2Pyl+qzYSnBAgY
Agn1yRubJoXf5ZqmPGqY0IW/58QNtZAN7mPghnjZd4P7fyltKxpboaKFXBwGJKfM
4gMLwpzH9xC3YLvY23vmWenjNNDVuUSjOkzcVFdH7lmJM2Oq1Lf7Eh/mPqSLTA9h
wDns/rFpVAsUSMgCcjvqVY7RZ1e/voX4bDwBqK8n7KpKgp0kaxusYBoCsnArPotR
I4mMSnSQP4ZPYjEWGfDYRiEs/z8V7gUk/lr3kQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJAq/eAOM9hz3sfUYoGuBOWMPum0MB8GA1UdIwQYMBaAFGfGO6RHojXSKBwz
PpqDhyUXpLG+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2U2NGUy
NTdlYWUwNGVlMjZkOGViMzM5ZjE0ODc5MWIzMWNjMDg3NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjViNjM3YzYtY2RjZi00MjNkLThjMGMtY2Q2MTVh
Yjk4YTI0L2ZhMjBkZmJiMjE2NjRlNDY2NjE4N2M4OWQ1Mzg5ZGEzMWIzNWI1ZDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNWI2MzdjNi1jZGNmLTQyM2QtOGMwYy1jZDYx
NWFiOThhMjQvY2U2NGUyNTdlYWUwNGVlMjZkOGViMzM5ZjE0ODc5MWIzMWNjMDg3
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAELnRzANBgkqhkiG9w0BAQsFAAOCAQEAU5TZczYnggBncUSE
md8zqkZQio9nIEsAAaSF2bKMiIGtAb7NTFWhwBamiB3JZ5OV+JHZShSLGpXYqY9G
gZ2djA8gpJRPzaj3K5v5bOcuhrJAUz2uZwVb2Jdc2AAZv7bP3D4uLc0+9EMzeO7m
pAeKEbkUfeyxb73TNQra3T3ZWXNmtXV4vARNyMzbhXYEot4yPCcZQIvczO8NxbTA
Q2nAfpnFEvgdsLqe5AWHvtY29JFFqPYZkwBWyef4QkVwm5DYVg9FiPuLlthnNE8E
Wgh2WxL3fmXrh6xBdKf1697BMIe1a3nINjMEHZ6OQoBsLQEDdvFJx4O55/kkmCt1
lKKb0g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org