Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/308b296149a32c18fb71dceb1bb0e7c6b4a801cc.roa
File: 308b296149a32c18fb71dceb1bb0e7c6b4a801cc.roa (raw, json)
Hash identifier: EwvSnshxV3//X7Qa6jQsMNibN6+gAX6MvloLbZ8zRDs=
Subject key identifier: EC:21:D7:60:48:8E:20:2A:06:97:C3:5D:FB:25:DB:AB:5C:31:49:42
Certificate issuer: /CN=041358da0b12ee28b9288c87d937e0f22e1b65f4
Certificate serial: 118F26
Authority key identifier: B0:BC:E5:F8:0D:B5:B7:90:6E:48:7A:EF:49:04:84:E1:3C:2A:53:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/041358da0b12ee28b9288c87d937e0f22e1b65f4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/308b296149a32c18fb71dceb1bb0e7c6b4a801cc.roa
Signing time: Tue 28 Nov 2023 07:30:02 +0000
ROA not before: Tue 28 Nov 2023 07:30:02 +0000
ROA not after: Thu 27 Nov 2025 07:30:02 +0000
asID: 265796
IP address blocks: 181.191.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 14:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150758 (0x118f26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041358da0b12ee28b9288c87d937e0f22e1b65f4
Validity
Not Before: Nov 28 07:30:02 2023 GMT
Not After : Nov 27 07:30:02 2025 GMT
Subject: CN=308b296149a32c18fb71dceb1bb0e7c6b4a801cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:0a:b0:3e:98:8b:99:06:9a:d9:e9:3b:a9:
79:17:f5:45:00:9a:ce:b6:2d:91:64:30:59:6d:7a:
f3:7d:67:44:2f:c6:aa:77:24:c7:2a:d8:36:44:25:
32:60:6f:ec:fc:9f:28:22:17:06:04:00:57:ee:50:
70:ba:77:fa:50:c7:3e:14:6e:0b:10:70:de:a8:81:
00:bd:bb:76:4d:31:5f:84:e8:43:31:e8:28:7e:a2:
ab:8d:5b:da:09:fd:bb:9a:4a:e2:a2:29:fd:a8:bd:
7c:05:fb:4b:3a:9f:dc:97:d3:83:85:dc:dd:19:fe:
3e:17:53:ed:ad:b2:27:b4:f1:2f:e2:99:04:cc:b5:
82:93:2b:e5:4c:2c:ca:25:05:61:6b:ce:91:3d:e7:
b8:2e:11:4f:63:d6:37:ec:54:97:d5:7e:97:30:58:
c8:18:a3:4f:81:ef:84:af:ce:13:9b:b1:6b:42:0e:
67:df:b2:4a:4c:00:39:62:88:00:8b:ef:59:bc:65:
12:38:24:6f:61:87:f9:09:bd:b3:31:0d:9e:2f:be:
5f:05:56:c5:10:1e:fe:88:22:44:03:6f:68:58:ae:
d9:49:4f:f6:01:82:41:5a:88:a2:08:f3:1e:69:85:
2e:a6:5a:0b:67:46:d5:a5:e5:60:00:6b:84:8a:1f:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:21:D7:60:48:8E:20:2A:06:97:C3:5D:FB:25:DB:AB:5C:31:49:42
X509v3 Authority Key Identifier:
keyid:B0:BC:E5:F8:0D:B5:B7:90:6E:48:7A:EF:49:04:84:E1:3C:2A:53:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/041358da0b12ee28b9288c87d937e0f22e1b65f4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/308b296149a32c18fb71dceb1bb0e7c6b4a801cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/041358da0b12ee28b9288c87d937e0f22e1b65f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.191.124.0/22
Signature Algorithm: sha256WithRSAEncryption
47:85:07:97:b5:da:a3:23:93:0e:37:6f:0f:2d:71:35:9f:13:
f2:53:05:ba:37:e8:c2:79:08:69:ba:04:9b:1d:78:c6:67:63:
bb:6d:d3:57:24:b3:bd:a3:1c:07:43:6a:b1:e2:ad:3b:7f:fd:
f8:f4:f6:e6:c0:b5:61:fc:ea:07:31:08:94:07:51:67:04:51:
f0:af:94:87:82:f1:fa:80:12:ff:25:dd:a4:09:1c:46:d1:42:
42:80:09:54:05:1e:8b:04:8a:7d:59:29:2e:bb:17:dd:dd:43:
5b:c4:e8:4a:fb:24:99:89:d7:e6:40:57:1b:96:ee:dc:7a:34:
32:4f:e0:d5:c9:29:b2:99:2a:5c:bd:4e:fd:e6:0f:b0:5f:f7:
22:f1:90:13:7a:77:9d:22:be:42:46:69:99:a2:b3:4a:52:9b:
33:99:2d:f5:24:63:b6:68:b8:e2:a5:61:22:b1:ff:5c:e0:c1:
e0:40:52:12:1f:f1:8e:0c:4f:45:94:22:92:f8:ad:a2:e4:ea:
2f:6e:aa:41:7f:7e:59:29:cd:74:57:26:90:95:14:0d:33:e3:
0a:e8:09:63:4c:75:c8:9e:c5:60:bb:28:61:45:29:b6:82:01:
58:b5:4f:8b:d1:e5:32:3d:27:70:6c:7c:92:1c:df:fd:97:de:
48:06:5d:26
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEY8mMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA0
MTM1OGRhMGIxMmVlMjhiOTI4OGM4N2Q5MzdlMGYyMmUxYjY1ZjQwHhcNMjMxMTI4
MDczMDAyWhcNMjUxMTI3MDczMDAyWjAzMTEwLwYDVQQDEygzMDhiMjk2MTQ5YTMy
YzE4ZmI3MWRjZWIxYmIwZTdjNmI0YTgwMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAva0KsD6Yi5kGmtnpO6l5F/VFAJrOti2RZDBZbXrzfWdEL8aq
dyTHKtg2RCUyYG/s/J8oIhcGBABX7lBwunf6UMc+FG4LEHDeqIEAvbt2TTFfhOhD
MegofqKrjVvaCf27mkrioin9qL18BftLOp/cl9ODhdzdGf4+F1PtrbIntPEv4pkE
zLWCkyvlTCzKJQVha86RPee4LhFPY9Y37FSX1X6XMFjIGKNPge+Er84Tm7FrQg5n
37JKTAA5YogAi+9ZvGUSOCRvYYf5Cb2zMQ2eL75fBVbFEB7+iCJEA29oWK7ZSU/2
AYJBWoiiCPMeaYUuploLZ0bVpeVgAGuEih/v7QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOwh12BIjiAqBpfDXfsl26tcMUlCMB8GA1UdIwQYMBaAFLC85fgNtbeQbkh6
70kEhOE8KlPYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDQxMzU4
ZGEwYjEyZWUyOGI5Mjg4Yzg3ZDkzN2UwZjIyZTFiNjVmNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmQ3MzI5YzAtM2FhYS00YTNmLWFkYTEtOWI4MDIx
Mjk4NTZmLzMwOGIyOTYxNDlhMzJjMThmYjcxZGNlYjFiYjBlN2M2YjRhODAxY2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZDczMjljMC0zYWFhLTRhM2YtYWRhMS05Yjgw
MjEyOTg1NmYvMDQxMzU4ZGEwYjEyZWUyOGI5Mjg4Yzg3ZDkzN2UwZjIyZTFiNjVm
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArW/fDANBgkqhkiG9w0BAQsFAAOCAQEAR4UHl7XaoyOTDjdv
Dy1xNZ8T8lMFujfownkIaboEmx14xmdju23TVySzvaMcB0NqseKtO3/9+PT25sC1
YfzqBzEIlAdRZwRR8K+Uh4Lx+oAS/yXdpAkcRtFCQoAJVAUeiwSKfVkpLrsX3d1D
W8ToSvskmYnX5kBXG5bu3Ho0Mk/g1ckpspkqXL1O/eYPsF/3IvGQE3p3nSK+QkZp
maKzSlKbM5kt9SRjtmi44qVhIrH/XODB4EBSEh/xjgxPRZQikvitouTqL26qQX9+
WSnNdFcmkJUUDTPjCugJY0x1yJ7FYLsoYUUptoIBWLVPi9HlMj0ncGx8khzf/Zfe
SAZdJg==
-----END CERTIFICATE-----
Generated at Thu Mar 21 18:22:34 2024 by rpki-client on console-ams.rpki-client.org