Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/fd63a8901c1fbfc2a5348c889c3f973259e25bde.roa
File: fd63a8901c1fbfc2a5348c889c3f973259e25bde.roa (raw, json)
Hash identifier: Kb6Zz+A/DmrM+i/Ipj/QFaryJelWrslqFs1qcJuYjxA=
Subject key identifier: 25:5F:0C:3E:58:F7:F9:B3:B2:22:15:E6:20:BD:65:5F:F7:A7:D0:F3
Certificate issuer: /CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Certificate serial: 1F9963
Authority key identifier: 08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/fd63a8901c1fbfc2a5348c889c3f973259e25bde.roa
Signing time: Thu 23 Mar 2023 18:23:41 +0000
ROA not before: Tue 23 Mar 2021 14:47:21 +0000
ROA not after: Tue 24 Mar 2026 14:47:21 +0000
asID: 27717
IP address blocks: 186.167.0.0/16 maxlen: 24
190.121.224.0/20 maxlen: 24
200.71.240.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2070883 (0x1f9963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Validity
Not Before: Mar 23 14:47:21 2021 GMT
Not After : Mar 24 14:47:21 2026 GMT
Subject: CN=fd63a8901c1fbfc2a5348c889c3f973259e25bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:af:17:02:2d:d2:d0:da:6b:d6:08:a6:6d:
5b:eb:f7:16:3a:e5:f9:df:d4:aa:56:cc:c9:cf:6d:
ec:53:26:c9:da:40:51:12:a3:38:83:2f:02:13:f2:
a1:bc:c3:f0:98:76:42:2e:74:53:05:c1:3d:5d:56:
02:76:74:34:4f:ae:10:59:2a:29:46:f4:ac:0e:fe:
a3:1c:4d:a7:6d:1f:cb:86:4a:a2:5f:d4:74:f1:41:
5d:81:2d:51:3f:04:7b:30:55:a1:e4:89:56:99:b3:
04:cc:56:27:8c:a7:1f:b5:36:e8:1f:62:6e:de:bd:
3b:7a:92:40:67:ce:8a:ff:66:e4:a8:37:54:d5:f7:
12:a7:b0:63:ca:d7:b7:d3:16:62:48:87:3f:44:9d:
a9:38:1c:5b:37:02:16:3f:e5:92:46:a5:d4:96:aa:
ee:cf:c6:65:54:b7:25:2d:cc:d2:5d:bc:75:bf:3b:
03:b6:3d:fe:ce:9c:84:8e:1e:8e:69:d1:26:28:76:
3a:5c:82:7c:95:91:82:f1:5f:8c:77:4f:81:7b:e7:
be:3c:d7:10:be:9b:44:0c:25:02:87:f8:9c:b4:80:
f8:32:ed:e9:7e:69:a0:9e:cd:30:f2:f2:7c:a9:2a:
f3:54:ed:50:cb:5c:e7:2c:fb:cd:c8:4d:77:cd:46:
69:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5F:0C:3E:58:F7:F9:B3:B2:22:15:E6:20:BD:65:5F:F7:A7:D0:F3
X509v3 Authority Key Identifier:
keyid:08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/fd63a8901c1fbfc2a5348c889c3f973259e25bde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/96fbc1b8c542f9384f9a2004e66a61080248cdc6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.167.0.0/16
190.121.224.0/20
200.71.240.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:6a:18:29:f0:b5:34:39:00:19:8d:2f:29:5c:70:da:e9:c2:
f0:0d:b8:df:82:26:82:50:9a:25:e1:a5:90:ce:87:36:7b:42:
36:a0:95:78:25:22:b0:ac:3b:9d:6f:4a:5a:2f:3b:71:24:83:
15:5f:d1:6c:4e:d7:e2:53:0e:0b:ac:8b:85:3e:2f:6c:f2:7b:
ad:25:a6:db:bc:f5:8b:e8:9b:2f:b6:75:dc:35:cc:ec:d1:89:
00:02:54:90:f3:7a:ac:ca:15:af:c7:84:62:9d:f1:a2:4a:96:
0c:0c:2d:81:1c:21:f3:45:25:c9:1d:ac:06:e1:fe:37:22:9a:
d5:4e:18:09:df:4c:ad:1a:1d:a8:6e:50:44:97:6d:e5:ca:b0:
07:47:b3:a0:f9:88:22:e3:5a:74:c0:61:85:28:cb:dc:6c:85:
a9:b2:6b:9c:99:43:f4:4e:ee:44:a9:67:95:5d:1a:85:0d:09:
f1:fd:d1:2c:06:25:b5:c7:89:11:21:ab:84:b0:bb:b2:8b:8e:
c2:15:ca:c2:59:68:59:51:e5:92:d3:d6:57:26:d9:5b:36:9e:
3d:17:28:79:ff:8c:20:d9:f5:17:fd:50:33:c9:fa:cc:67:94:
85:48:9f:38:c4:12:08:bd:b9:ef:15:00:b1:35:3b:1d:98:a3:
26:2f:98:a9
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIDH5ljMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk2
ZmJjMWI4YzU0MmY5Mzg0ZjlhMjAwNGU2NmE2MTA4MDI0OGNkYzYwHhcNMjEwMzIz
MTQ0NzIxWhcNMjYwMzI0MTQ0NzIxWjAzMTEwLwYDVQQDEyhmZDYzYTg5MDFjMWZi
ZmMyYTUzNDhjODg5YzNmOTczMjU5ZTI1YmRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApx6vFwIt0tDaa9YIpm1b6/cWOuX539SqVszJz23sUybJ2kBR
EqM4gy8CE/KhvMPwmHZCLnRTBcE9XVYCdnQ0T64QWSopRvSsDv6jHE2nbR/Lhkqi
X9R08UFdgS1RPwR7MFWh5IlWmbMEzFYnjKcftTboH2Ju3r07epJAZ86K/2bkqDdU
1fcSp7Bjyte30xZiSIc/RJ2pOBxbNwIWP+WSRqXUlqruz8ZlVLclLczSXbx1vzsD
tj3+zpyEjh6OadEmKHY6XIJ8lZGC8V+Md0+Be+e+PNcQvptEDCUCh/ictID4Mu3p
fmmgns0w8vJ8qSrzVO1Qy1znLPvNyE13zUZpcwIDAQABo4ICZjCCAmIwHQYDVR0O
BBYEFCVfDD5Y9/mzsiIV5iC9ZV/3p9DzMB8GA1UdIwQYMBaAFAgTOQmsgsKNsTeP
clNCyZ+fjVPiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTZmYmMx
YjhjNTQyZjkzODRmOWEyMDA0ZTY2YTYxMDgwMjQ4Y2RjNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTVmOTllMTAtNzhhZi00MmY2LWE3YTUtMDg5MmVm
MjJkMWQ4L2ZkNjNhODkwMWMxZmJmYzJhNTM0OGM4ODljM2Y5NzMyNTllMjViZGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NWY5OWUxMC03OGFmLTQyZjYtYTdhNS0wODky
ZWYyMmQxZDgvOTZmYmMxYjhjNTQyZjkzODRmOWEyMDA0ZTY2YTYxMDgwMjQ4Y2Rj
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAqBggrBgEFBQcBBwEB/wQb
MBkwFwQCAAEwEQMDALqnAwQEvnngAwQDyEfwMA0GCSqGSIb3DQEBCwUAA4IBAQBd
ahgp8LU0OQAZjS8pXHDa6cLwDbjfgiaCUJol4aWQzoc2e0I2oJV4JSKwrDudb0pa
LztxJIMVX9FsTtfiUw4LrIuFPi9s8nutJabbvPWL6JsvtnXcNczs0YkAAlSQ83qs
yhWvx4RinfGiSpYMDC2BHCHzRSXJHawG4f43IprVThgJ30ytGh2oblBEl23lyrAH
R7Og+Ygi41p0wGGFKMvcbIWpsmucmUP0Tu5EqWeVXRqFDQnx/dEsBiW1x4kRIauE
sLuyi47CFcrCWWhZUeWS09ZXJtlbNp49Fyh5/4wg2fUX/VAzyfrMZ5SFSJ84xBII
vbnvFQCxNTsdmKMmL5ip
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org