Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/854910ee2b7dd4d90e4f086f1bbb8ed8d43e42a6.roa
File: 854910ee2b7dd4d90e4f086f1bbb8ed8d43e42a6.roa (raw, json)
Hash identifier: 07rCYgDkSt3I/WnMZV5JJBrU41sFi5k/xzyT/GoWOXo=
Subject key identifier: 0D:49:98:0D:5F:78:02:3B:B0:8E:68:50:3E:CF:E9:7C:36:E3:7A:A1
Certificate issuer: /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial: 0D9BC0
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/854910ee2b7dd4d90e4f086f1bbb8ed8d43e42a6.roa
Signing time: Wed 24 Mar 2021 14:37:06 +0000
ROA not before: Wed 24 Mar 2021 14:37:05 +0000
ROA not after: Tue 24 Mar 2026 14:37:05 +0000
asID: 52423
IP address blocks: 143.202.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891840 (0xd9bc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Validity
Not Before: Mar 24 14:37:05 2021 GMT
Not After : Mar 24 14:37:05 2026 GMT
Subject: CN=854910ee2b7dd4d90e4f086f1bbb8ed8d43e42a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:25:f3:3a:2f:9d:29:9c:0e:b8:0f:cc:26:74:
29:c2:4b:b5:40:13:9b:ad:03:c4:3d:5e:8a:fe:db:
b2:8d:78:34:f8:17:a9:43:5c:3f:c6:e7:f7:7b:df:
05:29:93:4e:33:b8:c1:5c:c6:50:10:5c:e5:a8:ad:
6a:20:aa:82:5e:d8:d1:6f:f5:54:44:32:1d:29:d5:
81:53:c1:aa:6e:4d:48:bd:9f:d6:1a:52:e4:7f:96:
e1:f1:19:b5:8f:a8:fc:7b:31:1e:b7:ad:88:3d:e2:
2d:d0:fa:e9:d8:64:c2:5b:5c:30:54:d6:16:69:c3:
37:c6:3e:52:9c:77:ec:44:45:99:98:73:e3:0a:f3:
03:7e:25:95:00:af:9d:01:6e:51:e0:35:ea:22:ce:
d3:f5:76:79:a3:8e:65:4f:5a:b6:d4:a8:bb:81:50:
5d:dc:25:b3:93:60:a5:d6:be:07:f4:cf:57:8c:de:
78:34:79:13:db:c0:44:ab:d7:fb:64:5f:b8:4b:01:
c9:f9:96:cb:97:7b:62:2f:91:bd:a5:3d:a8:54:52:
64:03:57:1c:c4:b7:73:3a:a9:75:4e:f6:ff:29:88:
6a:e3:c7:92:46:62:a7:3e:52:9a:33:6d:15:18:46:
d0:fc:19:98:17:81:ce:1b:b9:9c:07:cc:bf:3b:61:
ff:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:49:98:0D:5F:78:02:3B:B0:8E:68:50:3E:CF:E9:7C:36:E3:7A:A1
X509v3 Authority Key Identifier:
keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/854910ee2b7dd4d90e4f086f1bbb8ed8d43e42a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.160.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bf:60:04:63:52:a0:47:16:a7:c3:83:a1:c0:6d:7a:82:06:
6c:08:79:e7:d7:6b:6b:24:b1:9b:2f:4d:80:f0:e8:72:e7:bf:
eb:5c:aa:b0:6a:98:21:e1:a1:55:41:d8:0e:22:d1:4e:8d:b8:
d1:67:a3:34:ec:a9:1b:03:6f:5c:f2:25:31:b4:0d:18:2e:19:
d3:96:03:9e:ce:2a:64:c6:a1:c4:7b:33:80:1d:19:48:e0:b6:
e8:b6:98:28:b6:03:6e:76:43:d6:97:1d:13:43:60:de:a6:91:
95:15:b5:a9:cb:20:cd:b7:c6:ed:7e:1c:80:4f:c4:11:56:11:
c2:48:44:d8:14:a7:be:4b:5c:57:ac:bf:55:59:ab:53:6c:75:
6d:47:a0:04:aa:9a:18:1d:42:fa:19:50:98:0a:f3:a6:e1:43:
a6:3d:f8:67:12:68:7d:ad:4f:d0:54:3f:6b:93:26:03:10:ca:
d4:fe:e7:0b:be:1a:de:80:44:55:77:08:18:ad:2c:93:4f:16:
8a:42:80:0c:26:63:8c:aa:af:45:0b:a0:41:bb:45:ba:ac:1c:
9d:71:fb:b5:4e:28:d9:b2:8b:1c:6b:b4:8a:f7:ff:96:a3:2e:
51:17:d7:9f:ce:5c:43:eb:b0:8d:54:8f:c7:43:52:81:3b:9e:
7f:24:71:5e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDZvAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
YTBmZjZlNjdiZDEzOTQ1YmJiMmM1NTlkNTIxNzZmNTgwMWY4ODMwHhcNMjEwMzI0
MTQzNzA1WhcNMjYwMzI0MTQzNzA1WjAzMTEwLwYDVQQDEyg4NTQ5MTBlZTJiN2Rk
NGQ5MGU0ZjA4NmYxYmJiOGVkOGQ0M2U0MmE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhCXzOi+dKZwOuA/MJnQpwku1QBObrQPEPV6K/tuyjXg0+Bep
Q1w/xuf3e98FKZNOM7jBXMZQEFzlqK1qIKqCXtjRb/VURDIdKdWBU8Gqbk1IvZ/W
GlLkf5bh8Rm1j6j8ezEet62IPeIt0Prp2GTCW1wwVNYWacM3xj5SnHfsREWZmHPj
CvMDfiWVAK+dAW5R4DXqIs7T9XZ5o45lT1q21Ki7gVBd3CWzk2Cl1r4H9M9XjN54
NHkT28BEq9f7ZF+4SwHJ+ZbLl3tiL5G9pT2oVFJkA1ccxLdzOql1Tvb/KYhq48eS
RmKnPlKaM20VGEbQ/BmYF4HOG7mcB8y/O2H/WwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFA1JmA1feAI7sI5oUD7P6Xw243qhMB8GA1UdIwQYMBaAFNSvsG+BwMJ5Bok5
NeKQRr2CIBiUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDlhMGZm
NmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzFhNzA2YWItZDNjZS00YmFjLThiNTEtMjY5NjM5
NDc1OTBlLzg1NDkxMGVlMmI3ZGQ0ZDkwZTRmMDg2ZjFiYmI4ZWQ4ZDQzZTQyYTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MWE3MDZhYi1kM2NlLTRiYWMtOGI1MS0yNjk2
Mzk0NzU5MGUvMDlhMGZmNmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAI/KoDANBgkqhkiG9w0BAQsFAAOCAQEAHb9gBGNSoEcWp8OD
ocBteoIGbAh559draySxmy9NgPDocue/61yqsGqYIeGhVUHYDiLRTo240WejNOyp
GwNvXPIlMbQNGC4Z05YDns4qZMahxHszgB0ZSOC26LaYKLYDbnZD1pcdE0Ng3qaR
lRW1qcsgzbfG7X4cgE/EEVYRwkhE2BSnvktcV6y/VVmrU2x1bUegBKqaGB1C+hlQ
mArzpuFDpj34ZxJofa1P0FQ/a5MmAxDK1P7nC74a3oBEVXcIGK0sk08WikKADCZj
jKqvRQugQbtFuqwcnXH7tU4o2bKLHGu0ivf/lqMuURfXn85cQ+uwjVSPx0NSgTue
fyRxXg==
-----END CERTIFICATE-----
Generated at Wed Aug 2 20:18:15 2023 by rpki-client on console-fra.rpki-client.org