Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/8c91a20ebf8fb4f706730cb48bb31a9b06827b16.roa
File: 8c91a20ebf8fb4f706730cb48bb31a9b06827b16.roa (raw, json)
Hash identifier: 6NV34+RltRQ4o8p+kqoEyUgbvmuyA/AaNO93jLmjh88=
Subject key identifier: 13:6D:ED:A1:04:F4:FD:67:0C:7E:84:8A:33:E0:3D:F3:B9:C5:E3:45
Certificate issuer: /CN=145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8
Certificate serial: 1C32C7
Authority key identifier: AB:5B:47:C3:F1:02:51:0A:B1:09:C5:03:CA:A3:E9:AD:7D:61:47:EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/8c91a20ebf8fb4f706730cb48bb31a9b06827b16.roa
Signing time: Mon 21 Nov 2022 15:53:16 +0000
ROA not before: Sun 20 Nov 2022 15:49:31 +0000
ROA not after: Thu 21 Nov 2024 15:49:31 +0000
asID: 27784
IP address blocks: 200.115.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 16:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1848007 (0x1c32c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8
Validity
Not Before: Nov 20 15:49:31 2022 GMT
Not After : Nov 21 15:49:31 2024 GMT
Subject: CN=8c91a20ebf8fb4f706730cb48bb31a9b06827b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:30:74:d1:fb:83:36:ba:1f:ac:4f:13:d2:f0:
c5:13:f4:8d:d0:ed:0a:a1:fe:4f:3d:4f:32:26:30:
99:6e:69:b9:a0:f0:c8:91:9b:04:47:7b:a9:5c:7b:
48:a1:02:89:0f:27:dc:9e:8e:32:5d:5f:98:8f:ec:
29:76:c1:ae:0f:35:98:62:86:84:c3:59:f0:10:75:
2b:97:9a:8c:de:ad:5c:c5:fc:9d:93:53:75:bf:c7:
5c:a6:9d:8f:bb:60:12:92:e1:b1:f7:9c:a0:a9:cf:
d4:0a:6e:2f:da:54:ad:b2:6a:02:8e:82:8c:de:6e:
a2:77:e4:2a:37:ff:9a:02:56:10:ef:71:89:9f:37:
a5:d6:76:e9:92:1b:53:8f:57:77:9d:a9:2f:6f:c6:
76:a3:9a:0b:b0:98:fa:40:3e:a4:0f:96:d2:9d:95:
1d:73:44:be:a8:22:47:cc:5a:6a:f2:42:fc:ed:1e:
da:e3:cd:5b:b9:57:5c:b6:0d:e4:16:79:fa:12:a5:
52:5a:8f:a7:7a:a1:60:ae:d8:fa:66:2a:11:4d:03:
88:ea:2e:65:a2:2f:39:9a:77:fb:8c:12:ae:cc:c7:
8a:10:14:0e:d2:bb:5c:1d:4d:10:60:3c:72:84:29:
e3:b4:f8:bb:f4:6a:83:d7:25:7c:3e:8c:83:6f:d8:
3f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6D:ED:A1:04:F4:FD:67:0C:7E:84:8A:33:E0:3D:F3:B9:C5:E3:45
X509v3 Authority Key Identifier:
keyid:AB:5B:47:C3:F1:02:51:0A:B1:09:C5:03:CA:A3:E9:AD:7D:61:47:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/8c91a20ebf8fb4f706730cb48bb31a9b06827b16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/46f5dfc7-3918-4a0a-9507-15998a1d69aa/145a17dccd8a54a74da82f1ca7eac9c2c55ce1d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e5:84:30:2a:ca:6f:d4:70:56:ed:05:f3:9d:a8:56:72:d1:
2e:0a:d2:63:38:d6:1f:39:56:4b:34:f2:b2:03:8d:05:0f:d9:
73:18:45:00:96:a5:d0:40:f3:27:09:8d:12:19:b3:f6:66:aa:
13:03:d3:8c:3c:b4:fd:91:6f:98:7a:4f:cb:67:84:73:a1:19:
1b:01:29:ea:5b:35:22:d6:65:37:2b:7d:85:13:c2:1e:04:3f:
07:32:b7:4e:f3:dd:b7:1a:0b:e3:e0:4f:b7:cf:8b:55:09:b4:
bd:d6:bf:86:ea:b3:0b:d4:8c:61:36:64:8a:94:34:a7:5f:52:
04:5f:46:6f:50:08:f3:59:71:ec:b6:66:29:f9:27:03:54:53:
ae:53:0e:bd:85:0f:fa:68:83:4e:78:28:03:48:12:58:f8:e3:
e2:cc:01:2e:00:91:64:ee:dd:8d:f0:52:1b:20:b0:59:d3:5f:
7a:f1:50:fd:ed:68:52:d1:06:6e:1a:fd:51:89:aa:b7:7f:a9:
49:93:96:09:29:d2:05:b6:49:c6:ce:bb:0b:fa:80:bb:7f:df:
48:08:93:68:3c:e8:3a:36:93:a1:c3:aa:1f:2a:33:6c:7b:89:
97:72:a2:33:2b:20:9f:2c:89:42:19:d0:0a:02:f3:7b:f9:ff:
2e:e6:27:79
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHDLHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE0
NWExN2RjY2Q4YTU0YTc0ZGE4MmYxY2E3ZWFjOWMyYzU1Y2UxZDgwHhcNMjIxMTIw
MTU0OTMxWhcNMjQxMTIxMTU0OTMxWjAzMTEwLwYDVQQDEyg4YzkxYTIwZWJmOGZi
NGY3MDY3MzBjYjQ4YmIzMWE5YjA2ODI3YjE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAizB00fuDNrofrE8T0vDFE/SN0O0Kof5PPU8yJjCZbmm5oPDI
kZsER3upXHtIoQKJDyfcno4yXV+Yj+wpdsGuDzWYYoaEw1nwEHUrl5qM3q1cxfyd
k1N1v8dcpp2Pu2ASkuGx95ygqc/UCm4v2lStsmoCjoKM3m6id+QqN/+aAlYQ73GJ
nzel1nbpkhtTj1d3nakvb8Z2o5oLsJj6QD6kD5bSnZUdc0S+qCJHzFpq8kL87R7a
481buVdctg3kFnn6EqVSWo+neqFgrtj6ZioRTQOI6i5loi85mnf7jBKuzMeKEBQO
0rtcHU0QYDxyhCnjtPi79GqD1yV8PoyDb9g/DQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBNt7aEE9P1nDH6EijPgPfO5xeNFMB8GA1UdIwQYMBaAFKtbR8PxAlEKsQnF
A8qj6a19YUfvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTQ1YTE3
ZGNjZDhhNTRhNzRkYTgyZjFjYTdlYWM5YzJjNTVjZTFkOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDZmNWRmYzctMzkxOC00YTBhLTk1MDctMTU5OThh
MWQ2OWFhLzhjOTFhMjBlYmY4ZmI0ZjcwNjczMGNiNDhiYjMxYTliMDY4MjdiMTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NmY1ZGZjNy0zOTE4LTRhMGEtOTUwNy0xNTk5
OGExZDY5YWEvMTQ1YTE3ZGNjZDhhNTRhNzRkYTgyZjFjYTdlYWM5YzJjNTVjZTFk
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhzKjANBgkqhkiG9w0BAQsFAAOCAQEAPuWEMCrKb9RwVu0F
852oVnLRLgrSYzjWHzlWSzTysgONBQ/ZcxhFAJal0EDzJwmNEhmz9maqEwPTjDy0
/ZFvmHpPy2eEc6EZGwEp6ls1ItZlNyt9hRPCHgQ/BzK3TvPdtxoL4+BPt8+LVQm0
vda/huqzC9SMYTZkipQ0p19SBF9Gb1AI81lx7LZmKfknA1RTrlMOvYUP+miDTngo
A0gSWPjj4swBLgCRZO7djfBSGyCwWdNfevFQ/e1oUtEGbhr9UYmqt3+pSZOWCSnS
BbZJxs67C/qAu3/fSAiTaDzoOjaTocOqHyozbHuJl3KiMysgnyyJQhnQCgLze/n/
LuYneQ==
-----END CERTIFICATE-----
Generated at Mon Feb 19 20:53:05 2024 by rpki-client on console-ams.rpki-client.org