Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/5f35307ab4bf6997023e449c3a4f8cf9065c9a7a.roa
File: 5f35307ab4bf6997023e449c3a4f8cf9065c9a7a.roa (raw, json)
Hash identifier: 5Qag4Ou5syY+9yJRfeVsupFYNxQJN5iK6DonGG4SIwc=
Subject key identifier: BA:E8:B9:E4:F7:FB:82:6F:1B:15:D9:E7:3E:52:57:C5:6B:6C:A5:EB
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 123EE3
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/5f35307ab4bf6997023e449c3a4f8cf9065c9a7a.roa
Signing time: Fri 16 Apr 2021 02:17:12 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 27875
IP address blocks: 181.10.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1195747 (0x123ee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=5f35307ab4bf6997023e449c3a4f8cf9065c9a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:e8:f7:99:cf:b7:7e:09:17:03:0a:7c:e4:
28:e0:ba:a0:8b:17:1f:52:2a:c2:a2:b9:12:0c:5e:
f9:92:b9:42:8a:71:d4:2f:ab:89:31:9a:8d:50:57:
b7:ee:ee:e1:43:19:0c:1e:64:6c:8b:f6:9a:23:60:
34:86:9d:04:15:04:58:18:f7:fe:96:af:34:05:1b:
66:d8:2b:c3:d6:a8:f1:03:3e:d0:7d:97:7e:c8:46:
f1:b9:59:dd:40:fa:54:6d:10:ca:92:2a:e0:5b:e6:
97:c2:7d:0c:d0:5b:c5:ab:11:28:a5:06:0e:3b:8a:
8c:60:72:e3:bf:f0:88:db:9a:e9:f5:fe:75:f8:66:
ab:ef:40:ae:44:29:67:25:cf:d8:4d:34:59:37:b7:
12:b9:0f:e4:c7:9a:32:5d:db:9d:c1:ec:47:b3:d6:
35:c1:fa:94:a5:0a:a7:29:8f:87:9c:c9:ec:15:11:
67:e8:a1:c2:79:e4:3f:ea:c9:e0:19:a1:c0:9f:1d:
98:6a:21:a9:35:c6:91:1e:c5:49:98:16:b9:7e:62:
8c:6b:50:98:4e:a5:c2:5d:cd:1f:b2:27:2c:64:68:
38:9c:b8:82:5b:80:a2:63:e4:60:26:8f:db:80:90:
82:3d:f6:04:fc:57:8a:d7:2d:94:91:6a:7a:9f:4f:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E8:B9:E4:F7:FB:82:6F:1B:15:D9:E7:3E:52:57:C5:6B:6C:A5:EB
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/5f35307ab4bf6997023e449c3a4f8cf9065c9a7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.10.180.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:0d:a4:05:95:27:41:c1:50:a5:1c:cd:58:f8:d9:69:e6:b6:
33:d0:af:15:f1:54:a1:9c:40:3e:92:c9:90:71:73:12:b9:00:
38:07:ca:70:59:00:40:5b:2a:3c:c1:de:1b:80:31:51:7d:c3:
0b:88:ad:91:06:d1:e9:17:b7:99:88:86:a6:ec:bd:59:33:b7:
a4:dc:76:d4:09:fa:3b:99:38:bf:1c:6f:27:e3:a6:47:55:16:
f7:1c:0a:ba:97:42:52:74:f9:a0:41:33:40:fc:29:88:bd:50:
0e:78:50:b8:50:8c:8a:f7:77:a6:60:87:77:e1:6d:8c:97:f2:
5b:17:fc:fa:1e:5a:48:1f:bb:d7:c6:d8:73:24:9f:ab:af:9c:
18:5f:b2:7e:de:a3:53:8e:7c:83:bc:0c:d2:ad:04:37:cb:d7:
9a:1d:22:2f:79:5c:39:83:65:a0:7f:c6:11:fa:50:a7:85:ff:
fa:81:13:c8:4c:9b:dd:9f:d8:eb:b0:ca:ab:5e:af:e0:05:44:
77:6f:83:8a:31:aa:71:34:35:29:42:11:43:55:7e:06:80:a1:
af:13:6f:bc:93:6e:a6:d4:aa:29:d1:0f:32:c2:6e:4f:f5:00:
a9:d7:8d:6d:6d:c3:b7:42:54:38:da:f1:67:fa:d5:6a:6d:47:
58:94:d1:9d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEj7jMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg1ZjM1MzA3YWI0YmY2
OTk3MDIzZTQ0OWMzYTRmOGNmOTA2NWM5YTdhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqS7o95nPt34JFwMKfOQo4LqgixcfUirCorkSDF75krlCinHU
L6uJMZqNUFe37u7hQxkMHmRsi/aaI2A0hp0EFQRYGPf+lq80BRtm2CvD1qjxAz7Q
fZd+yEbxuVndQPpUbRDKkirgW+aXwn0M0FvFqxEopQYOO4qMYHLjv/CI25rp9f51
+Gar70CuRClnJc/YTTRZN7cSuQ/kx5oyXdudwexHs9Y1wfqUpQqnKY+HnMnsFRFn
6KHCeeQ/6sngGaHAnx2YaiGpNcaRHsVJmBa5fmKMa1CYTqXCXc0fsicsZGg4nLiC
W4CiY+RgJo/bgJCCPfYE/FeK1y2UkWp6n08JhQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLroueT3+4JvGxXZ5z5SV8VrbKXrMB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzVmMzUzMDdhYjRiZjY5OTcwMjNlNDQ5YzNhNGY4Y2Y5MDY1YzlhN2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUKtDANBgkqhkiG9w0BAQsFAAOCAQEAqg2kBZUnQcFQpRzN
WPjZaea2M9CvFfFUoZxAPpLJkHFzErkAOAfKcFkAQFsqPMHeG4AxUX3DC4itkQbR
6Re3mYiGpuy9WTO3pNx21An6O5k4vxxvJ+OmR1UW9xwKupdCUnT5oEEzQPwpiL1Q
DnhQuFCMivd3pmCHd+FtjJfyWxf8+h5aSB+718bYcySfq6+cGF+yft6jU458g7wM
0q0EN8vXmh0iL3lcOYNloH/GEfpQp4X/+oETyEyb3Z/Y67DKq16v4AVEd2+DijGq
cTQ1KUIRQ1V+BoChrxNvvJNuptSqKdEPMsJuT/UAqdeNbW3Dt0JUONrxZ/rVam1H
WJTRnQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org