Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/1ffa4332afd5503e712873f46fc7c09af838d7c3.roa
File: 1ffa4332afd5503e712873f46fc7c09af838d7c3.roa (raw, json)
Hash identifier: Nn29t+9M3wx3oMmKWD51ZAt4mMc5TcSlbH+GEPiHSfI=
Subject key identifier: 43:E3:FD:B3:72:65:81:60:CA:47:C5:6D:52:CA:E5:AE:3F:4E:32:D3
Certificate issuer: /CN=138405134343f63286b605fe9165839fd04a4252
Certificate serial: 104E1E
Authority key identifier: 13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/1ffa4332afd5503e712873f46fc7c09af838d7c3.roa
Signing time: Wed 21 Jul 2021 13:22:29 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 61468
IP address blocks: 192.188.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068574 (0x104e1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=138405134343f63286b605fe9165839fd04a4252
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=1ffa4332afd5503e712873f46fc7c09af838d7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:52:17:e1:f4:30:26:75:f5:88:7a:5c:91:
22:d5:88:da:ac:5f:0c:07:8b:43:39:25:fc:f4:6d:
6d:e4:36:6b:ad:9c:ba:d5:1f:1f:e8:e4:56:40:8f:
29:15:c8:ff:b0:06:04:ca:bd:d0:23:86:81:9f:f9:
e0:92:4a:43:3c:45:6f:1b:99:0f:ee:f6:da:db:2b:
a2:da:67:db:76:c8:54:5f:d2:8f:eb:79:e0:9e:98:
e0:df:6d:bd:76:6c:19:84:eb:40:1b:b8:94:35:48:
6f:8b:19:ee:c6:8b:61:69:92:70:c6:be:45:69:01:
0c:69:17:73:d5:08:02:44:4c:86:fc:13:10:47:ae:
0b:41:c9:0d:20:f2:2d:44:2f:b9:1e:dd:10:1d:e2:
de:d5:5a:a3:7b:ff:8f:08:af:e3:52:56:a9:77:33:
ba:ab:94:82:f2:79:83:91:ef:9c:a1:dd:09:3b:fc:
a2:44:67:82:40:be:78:11:de:1b:bc:4a:e8:b4:9a:
fd:85:cc:81:18:ab:1e:6f:a5:b4:d4:b5:82:f9:e4:
42:10:4b:31:b5:5a:25:8d:25:8d:82:f4:a8:e9:df:
0a:d8:27:9f:7e:d1:a1:1e:67:18:15:1c:7c:75:6d:
5a:f7:74:4d:b9:bc:c2:26:da:4f:f6:d4:74:d1:97:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E3:FD:B3:72:65:81:60:CA:47:C5:6D:52:CA:E5:AE:3F:4E:32:D3
X509v3 Authority Key Identifier:
keyid:13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/1ffa4332afd5503e712873f46fc7c09af838d7c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/138405134343f63286b605fe9165839fd04a4252.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.50.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ee:94:c4:ad:89:4a:c1:49:a3:b9:22:70:cf:dc:23:54:5a:
89:33:ef:87:34:28:00:47:8f:b3:36:5a:7b:9e:b7:67:62:ee:
be:82:8c:49:9a:35:aa:ce:ee:e0:3b:6f:14:48:0d:ec:4a:c2:
a2:dd:88:7e:bb:53:fd:b2:a4:7b:c4:aa:64:54:a1:ff:b3:56:
6e:5f:0d:56:bb:1c:57:f8:37:5e:18:8e:cb:49:4b:ec:09:df:
68:d5:20:9b:04:1c:e6:5c:a6:e9:ce:a7:b6:24:73:df:1e:2e:
99:70:ce:5b:b5:97:d6:e6:13:da:d7:9f:d6:2d:b3:c2:dd:ed:
7f:a4:8b:ea:c8:6e:c5:45:08:a4:fa:15:e3:62:95:8a:dc:15:
3d:ad:1e:a1:19:78:f7:61:ac:5e:31:da:c8:ef:31:ed:9f:ca:
89:cf:93:af:e1:04:e8:10:2b:5d:0d:46:05:47:3b:46:f9:cd:
a2:3a:95:bf:66:9c:b2:6b:a0:75:f4:1a:06:51:22:b5:43:c3:
fe:1d:7c:76:67:de:1d:4c:fa:d8:17:3b:fb:61:27:b8:1e:1b:
f4:be:d7:af:b7:b2:2f:52:2c:b4:ee:60:5a:0f:d2:ab:bc:21:
f6:cb:0a:71:2a:d6:a9:41:82:b4:0b:4d:37:0a:30:ef:71:b9:
56:d9:2e:48
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEE4eMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEz
ODQwNTEzNDM0M2Y2MzI4NmI2MDVmZTkxNjU4MzlmZDA0YTQyNTIwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygxZmZhNDMzMmFmZDU1
MDNlNzEyODczZjQ2ZmM3YzA5YWY4MzhkN2MzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi0xSF+H0MCZ19Yh6XJEi1YjarF8MB4tDOSX89G1t5DZrrZy6
1R8f6ORWQI8pFcj/sAYEyr3QI4aBn/ngkkpDPEVvG5kP7vba2yui2mfbdshUX9KP
63ngnpjg3229dmwZhOtAG7iUNUhvixnuxothaZJwxr5FaQEMaRdz1QgCREyG/BMQ
R64LQckNIPItRC+5Ht0QHeLe1Vqje/+PCK/jUlapdzO6q5SC8nmDke+cod0JO/yi
RGeCQL54Ed4bvErotJr9hcyBGKseb6W01LWC+eRCEEsxtVoljSWNgvSo6d8K2Cef
ftGhHmcYFRx8dW1a93RNubzCJtpP9tR00ZccRwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEPj/bNyZYFgykfFbVLK5a4/TjLTMB8GA1UdIwQYMBaAFBP0kj6QL0tSQsEY
H31Y/2+I749KMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTM4NDA1
MTM0MzQzZjYzMjg2YjYwNWZlOTE2NTgzOWZkMDRhNDI1Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjhlMDhmNWUtZmVjYy00OTViLWIzODgtNWU0YTVh
Yzk1MzA4LzFmZmE0MzMyYWZkNTUwM2U3MTI4NzNmNDZmYzdjMDlhZjgzOGQ3YzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82OGUwOGY1ZS1mZWNjLTQ5NWItYjM4OC01ZTRh
NWFjOTUzMDgvMTM4NDA1MTM0MzQzZjYzMjg2YjYwNWZlOTE2NTgzOWZkMDRhNDI1
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMC8MjANBgkqhkiG9w0BAQsFAAOCAQEAIe6UxK2JSsFJo7ki
cM/cI1RaiTPvhzQoAEePszZae563Z2LuvoKMSZo1qs7u4DtvFEgN7ErCot2IfrtT
/bKke8SqZFSh/7NWbl8NVrscV/g3XhiOy0lL7AnfaNUgmwQc5lym6c6ntiRz3x4u
mXDOW7WX1uYT2tef1i2zwt3tf6SL6shuxUUIpPoV42KVitwVPa0eoRl492GsXjHa
yO8x7Z/Kic+Tr+EE6BArXQ1GBUc7RvnNojqVv2acsmugdfQaBlEitUPD/h18dmfe
HUz62Bc7+2EnuB4b9L7Xr7eyL1IstO5gWg/Sq7wh9ssKcSrWqUGCtAtNNwow73G5
VtkuSA==
-----END CERTIFICATE-----
Generated at Thu Dec 14 18:35:10 2023 by rpki-client on console-ams.rpki-client.org