Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/e1abb9a3a3f62904f48ea13b3a812d7cd3f15064.roa
File: e1abb9a3a3f62904f48ea13b3a812d7cd3f15064.roa (raw, json)
Hash identifier: KPeuyvtXKr87zKZwpXOT0wAD+CgIV4cZdqS2shPJ+qI=
Subject key identifier: 8B:AC:88:12:F1:7A:FD:A8:98:61:82:46:32:20:A3:AA:78:D0:9D:3F
Certificate issuer: /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial: 1A1FDB
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/e1abb9a3a3f62904f48ea13b3a812d7cd3f15064.roa
Signing time: Wed 10 Aug 2022 19:54:00 +0000
ROA not before: Tue 17 May 2022 03:00:00 +0000
ROA not after: Fri 17 May 2024 03:00:00 +0000
asID: 27986
IP address blocks: 152.231.110.0/24 maxlen: 24
152.231.111.0/24 maxlen: 24
2800:300::/32 maxlen: 128
Validation: Failed, certificate revoked on Thu 01 Feb 2024 15:49:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1712091 (0x1a1fdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
Validity
Not Before: May 17 03:00:00 2022 GMT
Not After : May 17 03:00:00 2024 GMT
Subject: CN=e1abb9a3a3f62904f48ea13b3a812d7cd3f15064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:8b:92:0f:ee:12:54:10:b3:24:c5:79:e6:
1e:a3:ba:1f:ff:4c:da:e9:56:6d:6f:01:27:59:08:
e9:c4:99:3f:b6:f1:2b:7b:b2:b8:9a:de:e8:f9:52:
74:ee:0d:a7:bc:24:32:ee:15:0e:dc:fc:49:b5:65:
34:fb:97:6b:17:01:60:a7:6f:12:bb:b8:57:41:ed:
5f:26:50:a1:6e:6d:51:db:be:cd:25:75:09:e2:93:
24:89:93:ab:53:aa:6c:f0:66:00:b2:df:e6:7e:b3:
f9:09:65:7e:98:d1:2b:22:84:f5:5a:1e:cb:16:ac:
03:99:5a:38:ad:96:2b:0a:f3:ce:fc:bd:84:b6:38:
ea:55:07:99:ef:41:50:a2:e5:cb:d9:cf:f7:26:11:
93:c9:a2:e4:cb:03:df:91:5d:a7:db:6a:bf:e7:30:
b6:59:6c:1f:5d:13:85:7f:cb:d6:d7:66:5b:11:39:
cd:0a:11:d7:60:bf:b2:73:9f:2a:50:7f:c6:6b:59:
d5:8c:4e:1e:6e:f1:af:dc:f9:1a:c4:aa:ec:2f:53:
39:8e:f5:0a:ff:0a:4c:ab:23:23:04:6b:d7:0d:99:
37:48:35:6d:0a:d3:65:ca:e1:78:b2:22:17:b9:74:
fe:8a:48:4f:6f:de:cf:fa:6a:f5:ce:86:32:f0:de:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AC:88:12:F1:7A:FD:A8:98:61:82:46:32:20:A3:AA:78:D0:9D:3F
X509v3 Authority Key Identifier:
keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/e1abb9a3a3f62904f48ea13b3a812d7cd3f15064.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.110.0/23
IPv6:
2800:300::/32
Signature Algorithm: sha256WithRSAEncryption
78:70:9d:56:f1:35:1e:54:28:3c:3f:0a:7c:d8:3e:58:dd:0b:
8a:ec:23:a6:d1:48:bb:ae:90:43:19:74:60:ea:a0:40:62:32:
fa:1a:a6:4d:2c:36:83:7a:f7:e1:95:22:93:8f:b9:74:c6:fb:
bc:8c:61:7b:b2:6f:20:00:57:fc:c5:24:54:08:16:c8:29:a1:
61:7e:8f:63:56:e3:25:37:fc:70:6d:86:3d:f6:d7:aa:b0:41:
b7:6c:cf:93:c3:23:0d:68:c3:2d:e1:39:88:b5:ba:a7:ab:2a:
af:17:fd:78:fa:4c:ef:80:b4:04:4c:17:94:f9:f3:25:d3:56:
90:5f:a2:38:69:d9:98:78:46:ba:dd:01:d1:5c:44:33:81:16:
12:b0:97:2f:e8:24:6e:88:7e:bb:e0:71:1a:47:7d:fb:03:a2:
97:50:57:12:c8:2a:54:61:de:54:bc:c5:0b:46:36:8e:61:33:
d7:56:b2:31:80:0c:44:82:59:ce:72:70:d7:a2:92:7c:c8:13:
25:67:d5:32:a7:99:ad:b3:81:97:35:d8:29:f0:d1:0a:b7:40:
bf:fd:f2:15:4c:84:4d:60:25:dc:b9:ac:e9:0a:6f:8d:6a:c8:
2f:74:5b:68:03:61:2c:4f:8d:71:b4:fd:fc:5c:c7:5b:87:71:
e7:f6:85:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDGh/bMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
ZmJiYjE3M2MyMTdhYTgwMzBmYzZkOTM3OTg0MzU3OTIyOWNlMzEwHhcNMjIwNTE3
MDMwMDAwWhcNMjQwNTE3MDMwMDAwWjAzMTEwLwYDVQQDEyhlMWFiYjlhM2EzZjYy
OTA0ZjQ4ZWExM2IzYTgxMmQ3Y2QzZjE1MDY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr42Lkg/uElQQsyTFeeYeo7of/0za6VZtbwEnWQjpxJk/tvEr
e7K4mt7o+VJ07g2nvCQy7hUO3PxJtWU0+5drFwFgp28Su7hXQe1fJlChbm1R277N
JXUJ4pMkiZOrU6ps8GYAst/mfrP5CWV+mNErIoT1Wh7LFqwDmVo4rZYrCvPO/L2E
tjjqVQeZ70FQouXL2c/3JhGTyaLkywPfkV2n22q/5zC2WWwfXROFf8vW12ZbETnN
ChHXYL+yc58qUH/Ga1nVjE4ebvGv3PkaxKrsL1M5jvUK/wpMqyMjBGvXDZk3SDVt
CtNlyuF4siIXuXT+ikhPb97P+mr1zoYy8N7S8QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFIusiBLxev2omGGCRjIgo6p40J0/MB8GA1UdIwQYMBaAFG3Yh857qEWbykhx
HffAqeGP1nKBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVmYmJi
MTczYzIxN2FhODAzMGZjNmQ5Mzc5ODQzNTc5MjI5Y2UzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDRhZmQxNzAtMDc1ZS00M2RmLWI0YTEtYzM0Zjc2
YzE4Y2NlL2UxYWJiOWEzYTNmNjI5MDRmNDhlYTEzYjNhODEyZDdjZDNmMTUwNjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NGFmZDE3MC0wNzVlLTQzZGYtYjRhMS1jMzRm
NzZjMThjY2UvMDVmYmJiMTczYzIxN2FhODAzMGZjNmQ5Mzc5ODQzNTc5MjI5Y2Uz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAZjnbjANBAIAAjAHAwUAKAADADANBgkqhkiG9w0BAQsFAAOC
AQEAeHCdVvE1HlQoPD8KfNg+WN0LiuwjptFIu66QQxl0YOqgQGIy+hqmTSw2g3r3
4ZUik4+5dMb7vIxhe7JvIABX/MUkVAgWyCmhYX6PY1bjJTf8cG2GPfbXqrBBt2zP
k8MjDWjDLeE5iLW6p6sqrxf9ePpM74C0BEwXlPnzJdNWkF+iOGnZmHhGut0B0VxE
M4EWErCXL+gkboh+u+BxGkd9+wOil1BXEsgqVGHeVLzFC0Y2jmEz11ayMYAMRIJZ
znJw16KSfMgTJWfVMqeZrbOBlzXYKfDRCrdAv/3yFUyETWAl3Lms6QpvjWrIL3Rb
aANhLE+NcbT9/FzHW4dx5/aFpA==
-----END CERTIFICATE-----
Generated at Thu Feb 1 19:21:00 2024 by rpki-client on console-ams.rpki-client.org