Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/6ba51909c47e2424e25c80b1c59157334a2282e8.roa
File: 6ba51909c47e2424e25c80b1c59157334a2282e8.roa (raw, json)
Hash identifier: 7Q1nXdoPc2TbfIxEjCUTXavZcjstmIszJ3M/0IV5/m8=
Subject key identifier: 9A:A8:69:CB:AE:3F:9F:87:7A:72:13:5A:C3:B8:B1:0D:72:77:19:90
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 0D06C1
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/6ba51909c47e2424e25c80b1c59157334a2282e8.roa
Signing time: Wed 24 Mar 2021 14:29:20 +0000
ROA not before: Wed 24 Mar 2021 14:29:18 +0000
ROA not after: Tue 24 Mar 2026 14:29:18 +0000
asID: 52508
IP address blocks: 201.182.143.0/24 maxlen: 24
138.204.247.0/24 maxlen: 24
2001:13c7:6019::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853697 (0xd06c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Mar 24 14:29:18 2021 GMT
Not After : Mar 24 14:29:18 2026 GMT
Subject: CN=6ba51909c47e2424e25c80b1c59157334a2282e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:48:0c:d4:1a:c8:c3:3a:28:c5:18:2e:15:33:
85:7d:cb:36:41:35:5c:3f:5f:48:3d:62:1c:59:cd:
f8:43:a7:ab:42:2f:57:6c:23:6b:2e:c1:4b:07:6b:
5d:67:39:f4:44:e3:db:bb:6b:df:34:9e:f7:ec:98:
b7:c4:e9:9a:df:42:8a:40:27:38:fa:6e:10:5d:d8:
46:43:6a:7b:e6:62:55:c5:bd:f6:55:ef:db:16:61:
fb:77:5e:6a:01:69:a1:b3:eb:74:e8:e9:9a:f3:99:
b7:d3:21:e0:09:08:42:96:83:64:d2:b6:11:87:62:
81:a9:89:d0:87:5b:ca:f8:c4:4d:1d:f3:97:d7:d6:
90:a2:45:3c:cf:67:4c:b2:a3:0f:ef:33:b1:04:af:
f3:d9:49:04:ab:ee:1c:5c:b4:19:cf:e1:13:ea:20:
8e:31:b6:7b:90:5e:a1:47:ce:c0:8c:70:f9:b9:9e:
f1:74:15:f2:87:0d:5b:be:a9:3c:65:c0:8d:ee:6e:
f1:46:4c:4e:85:10:9c:98:21:a0:c3:c7:ab:cf:f5:
d0:c6:16:34:89:52:58:31:f2:8f:af:45:2a:34:11:
16:7a:c3:4f:94:6c:99:e4:94:58:b2:eb:d4:89:70:
42:c1:78:31:89:43:b8:b8:95:88:30:39:93:9b:65:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A8:69:CB:AE:3F:9F:87:7A:72:13:5A:C3:B8:B1:0D:72:77:19:90
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/6ba51909c47e2424e25c80b1c59157334a2282e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.247.0/24
201.182.143.0/24
IPv6:
2001:13c7:6019::/48
Signature Algorithm: sha256WithRSAEncryption
3b:6d:a9:60:50:61:78:77:14:c6:b4:7a:26:6a:3a:ea:51:7a:
b5:39:22:d4:39:03:40:a1:9e:cf:21:3f:41:c1:67:d4:21:8a:
10:a0:08:89:4c:3e:ba:5c:48:97:3e:4e:8d:fd:71:ce:b0:29:
e0:ef:71:bc:f4:9a:04:6b:f8:59:01:ef:85:30:8d:e5:38:bd:
ce:08:f6:4d:b6:cf:97:4a:53:cf:9d:6d:cf:d9:a8:a6:39:7b:
6b:01:c1:48:65:fd:fb:5e:a9:e0:1c:75:33:b8:38:6f:2a:80:
9b:73:51:91:40:ec:05:94:69:a1:ee:82:9c:9e:fe:72:fb:1f:
9e:75:60:e5:6f:2c:07:dc:6d:5f:11:83:31:2e:81:4e:4f:9c:
1f:81:fa:03:c2:a3:8f:1f:8c:d8:ba:1d:fa:a5:13:b6:6b:76:
73:19:3c:d1:c1:cc:20:61:77:b6:cd:ff:11:7f:d7:92:2a:cb:
4c:a5:48:7c:30:f6:f0:20:95:be:4a:40:f1:b0:05:96:ad:c7:
32:75:f6:d9:ba:cc:d1:21:8b:c3:16:df:e3:f1:73:55:a5:2f:
e3:3e:f8:35:15:c2:bc:8c:fd:44:fc:59:16:e1:5a:bf:62:dd:
7c:d4:ba:a5:b4:ac:3c:13:21:d8:67:ae:80:84:ef:78:13:e9:
7a:f0:0b:7b
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDDQbBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjEwMzI0
MTQyOTE4WhcNMjYwMzI0MTQyOTE4WjAzMTEwLwYDVQQDEyg2YmE1MTkwOWM0N2Uy
NDI0ZTI1YzgwYjFjNTkxNTczMzRhMjI4MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgUgM1BrIwzooxRguFTOFfcs2QTVcP19IPWIcWc34Q6erQi9X
bCNrLsFLB2tdZzn0ROPbu2vfNJ737Ji3xOma30KKQCc4+m4QXdhGQ2p75mJVxb32
Ve/bFmH7d15qAWmhs+t06Oma85m30yHgCQhCloNk0rYRh2KBqYnQh1vK+MRNHfOX
19aQokU8z2dMsqMP7zOxBK/z2UkEq+4cXLQZz+ET6iCOMbZ7kF6hR87AjHD5uZ7x
dBXyhw1bvqk8ZcCN7m7xRkxOhRCcmCGgw8erz/XQxhY0iVJYMfKPr0UqNBEWesNP
lGyZ5JRYsuvUiXBCwXgxiUO4uJWIMDmTm2XHOwIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFJqoacuuP5+HenITWsO4sQ1ydxmQMB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxLzZiYTUxOTA5YzQ3ZTI0MjRlMjVjODBiMWM1OTE1NzMzNGEyMjgyZTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEAIrM9wMEAMm2jzAPBAIAAjAJAwcAIAETx2AZMA0GCSqGSIb3
DQEBCwUAA4IBAQA7balgUGF4dxTGtHomajrqUXq1OSLUOQNAoZ7PIT9BwWfUIYoQ
oAiJTD66XEiXPk6N/XHOsCng73G89JoEa/hZAe+FMI3lOL3OCPZNts+XSlPPnW3P
2aimOXtrAcFIZf37XqngHHUzuDhvKoCbc1GRQOwFlGmh7oKcnv5y+x+edWDlbywH
3G1fEYMxLoFOT5wfgfoDwqOPH4zYuh36pRO2a3ZzGTzRwcwgYXe2zf8Rf9eSKstM
pUh8MPbwIJW+SkDxsAWWrccydfbZuszRIYvDFt/j8XNVpS/jPvg1FcK8jP1E/FkW
4Vq/Yt181LqltKw8EyHYZ66AhO94E+l68At7
-----END CERTIFICATE-----
Generated at Mon Oct 30 12:51:51 2023 by rpki-client on console-fra.rpki-client.org