Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/c143e1f72c74d27c255e90a36e8d04226461e9a7.roa
File: c143e1f72c74d27c255e90a36e8d04226461e9a7.roa (raw, json)
Hash identifier: s4g4noU6hN80eO+UdbdulnJms/bOiEKegARe7XK4P1o=
Subject key identifier: D0:6B:99:98:69:47:DD:6E:C3:B2:E2:39:32:DE:7C:96:24:6D:7D:1D
Certificate issuer: /CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Certificate serial: 12DFA8
Authority key identifier: 9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/c143e1f72c74d27c255e90a36e8d04226461e9a7.roa
Signing time: Fri 12 Nov 2021 14:16:40 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 262589
IP address blocks: 191.97.55.0/24 maxlen: 24
191.97.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1236904 (0x12dfa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=c143e1f72c74d27c255e90a36e8d04226461e9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:20:e9:e6:d0:d0:6a:61:4d:86:18:ef:c1:
c5:91:70:6c:1c:75:99:e1:1c:98:3c:58:43:58:16:
d0:da:b7:d8:c0:12:ff:85:0a:41:fe:2a:3a:0b:77:
77:05:e2:f4:fa:af:43:15:23:4f:a2:a1:b1:15:75:
68:94:32:46:07:ec:a3:57:0c:c2:3a:ba:3c:57:5f:
37:e2:ab:0c:5e:30:1e:c6:d4:c9:f1:a2:10:17:79:
ba:d2:25:33:cf:ab:fa:1f:fc:59:de:ab:73:58:fe:
2e:77:36:85:07:41:59:c0:9e:ae:7d:26:da:84:18:
71:2e:61:12:f6:a0:25:6c:71:da:80:a4:77:a0:91:
8e:e0:b5:91:f3:f9:46:39:aa:32:21:6c:e6:83:65:
8a:9a:cf:8e:ca:f2:03:bc:47:76:80:84:8d:28:17:
c1:41:bf:49:33:6e:a6:df:8e:63:ba:52:00:e3:43:
55:b1:d2:27:18:c0:1a:7c:25:8a:01:4e:87:a1:dd:
e8:2a:48:f2:c6:ca:0c:b7:ac:d3:4a:b3:31:03:db:
32:08:39:4a:98:62:42:95:d3:9d:8b:a5:f5:13:7b:
4f:fc:46:50:21:db:6f:16:4a:1a:25:b5:4e:23:46:
fa:0a:6d:3d:04:08:1e:6e:59:59:51:bb:d6:0e:08:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6B:99:98:69:47:DD:6E:C3:B2:E2:39:32:DE:7C:96:24:6D:7D:1D
X509v3 Authority Key Identifier:
keyid:9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/c143e1f72c74d27c255e90a36e8d04226461e9a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a9b9d9319d2010f9907e00e3e1940885c59db093.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.55.0/24
191.97.63.0/24
Signature Algorithm: sha256WithRSAEncryption
74:9a:0a:ca:47:41:84:f7:8a:e9:d4:18:22:f6:e8:f1:eb:55:
68:58:68:a7:f1:86:86:5f:d4:83:21:e9:48:15:7b:04:c0:28:
0d:9a:88:d2:87:73:67:df:9a:9c:b5:5b:f2:e5:89:cf:c3:bf:
6d:60:53:f6:6f:f1:8c:f8:34:d2:fd:9e:a2:b2:07:46:6e:ce:
5e:b4:e4:4a:69:7b:d6:53:ae:9e:d7:92:3d:d4:93:7a:0f:7f:
2d:b5:1f:3f:6c:e0:86:aa:72:ae:aa:99:fd:43:8e:19:a3:6b:
1b:39:7d:50:c7:74:54:0b:87:1d:31:99:5c:1c:1b:47:2b:f0:
06:83:14:36:a8:d9:35:dd:e8:38:34:f3:fd:5e:15:3f:cc:72:
e6:1a:db:67:e2:45:0c:b2:a9:57:af:56:7a:30:d2:4b:c4:4b:
da:4d:27:7f:03:5f:68:7d:39:3f:55:72:b0:c3:3d:86:c4:d1:
3b:53:c8:37:90:2a:d3:46:fb:c9:7a:6f:4e:3a:7d:8c:92:7e:
ca:18:97:a6:70:23:48:93:9d:f3:ee:02:42:f1:57:c1:ea:e9:
17:bb:1a:a1:8f:66:02:d2:12:f1:63:c1:fe:71:41:1c:b9:f1:
9e:f1:b2:b5:1f:8b:c4:25:c9:82:f5:a2:f2:35:60:6b:ad:4c:
d1:65:c4:0a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDEt+oMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
YjlkOTMxOWQyMDEwZjk5MDdlMDBlM2UxOTQwODg1YzU5ZGIwOTMwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhjMTQzZTFmNzJjNzRk
MjdjMjU1ZTkwYTM2ZThkMDQyMjY0NjFlOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApiMg6ebQ0GphTYYY78HFkXBsHHWZ4RyYPFhDWBbQ2rfYwBL/
hQpB/io6C3d3BeL0+q9DFSNPoqGxFXVolDJGB+yjVwzCOro8V1834qsMXjAextTJ
8aIQF3m60iUzz6v6H/xZ3qtzWP4udzaFB0FZwJ6ufSbahBhxLmES9qAlbHHagKR3
oJGO4LWR8/lGOaoyIWzmg2WKms+OyvIDvEd2gISNKBfBQb9JM26m345julIA40NV
sdInGMAafCWKAU6Hod3oKkjyxsoMt6zTSrMxA9syCDlKmGJCldOdi6X1E3tP/EZQ
IdtvFkoaJbVOI0b6Cm09BAgebllZUbvWDgh8FwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFNBrmZhpR91uw7LiOTLefJYkbX0dMB8GA1UdIwQYMBaAFJ6zvNr3SEc7fBdP
drVIXM7FXzPIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTliOWQ5
MzE5ZDIwMTBmOTkwN2UwMGUzZTE5NDA4ODVjNTlkYjA5My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjM3ZGMwY2YtNTFjNy00NGU1LTliZWMtNTE2YTI1
NWE4ODZiL2MxNDNlMWY3MmM3NGQyN2MyNTVlOTBhMzZlOGQwNDIyNjQ2MWU5YTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MzdkYzBjZi01MWM3LTQ0ZTUtOWJlYy01MTZh
MjU1YTg4NmIvYTliOWQ5MzE5ZDIwMTBmOTkwN2UwMGUzZTE5NDA4ODVjNTlkYjA5
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL9hNwMEAL9hPzANBgkqhkiG9w0BAQsFAAOCAQEAdJoKykdB
hPeK6dQYIvbo8etVaFhop/GGhl/UgyHpSBV7BMAoDZqI0odzZ9+anLVb8uWJz8O/
bWBT9m/xjPg00v2eorIHRm7OXrTkSml71lOunteSPdSTeg9/LbUfP2zghqpyrqqZ
/UOOGaNrGzl9UMd0VAuHHTGZXBwbRyvwBoMUNqjZNd3oODTz/V4VP8xy5hrbZ+JF
DLKpV69WejDSS8RL2k0nfwNfaH05P1VysMM9hsTRO1PIN5Aq00b7yXpvTjp9jJJ+
yhiXpnAjSJOd8+4CQvFXwerpF7saoY9mAtIS8WPB/nFBHLnxnvGytR+LxCXJgvWi
8jVga61M0WXECg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org