Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/d207bbfebd7c5d60f4f7f01fbfdb4924f4e6b4d2.roa
File: d207bbfebd7c5d60f4f7f01fbfdb4924f4e6b4d2.roa (raw, json)
Hash identifier: PRbBqD0ugloR4rPb8IRQttjSPR224OhSiw2lq9KQVHk=
Subject key identifier: DD:20:D5:15:EE:EA:A0:44:41:B6:3D:C4:AB:16:41:8C:BA:E6:60:6F
Certificate issuer: /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial: 0DAC08
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/d207bbfebd7c5d60f4f7f01fbfdb4924f4e6b4d2.roa
Signing time: Wed 24 Mar 2021 14:37:08 +0000
ROA not before: Wed 24 Mar 2021 14:37:05 +0000
ROA not after: Tue 24 Mar 2026 14:37:05 +0000
asID: 52423
IP address blocks: 190.112.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896008 (0xdac08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Validity
Not Before: Mar 24 14:37:05 2021 GMT
Not After : Mar 24 14:37:05 2026 GMT
Subject: CN=d207bbfebd7c5d60f4f7f01fbfdb4924f4e6b4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:19:d7:0e:57:34:52:66:39:b2:6d:e1:49:
21:8e:73:54:ab:5e:03:e2:32:c7:f1:88:ff:c9:6f:
fc:2e:14:8b:06:a0:ee:fe:ee:49:65:fd:31:d8:98:
c0:28:1e:90:a9:71:70:b1:5d:8f:4e:aa:bd:53:36:
83:11:32:d6:24:7e:cc:63:9a:4f:41:a6:76:a3:ac:
c0:bd:b7:89:c1:bf:0c:12:c8:42:95:99:05:c8:9a:
9a:e1:86:45:f5:a6:73:16:09:71:fb:ca:fd:86:b5:
01:db:e8:c6:de:d3:26:79:bb:56:b7:fa:91:92:f4:
13:b1:20:cf:79:7e:9b:77:1d:7e:72:ad:d3:20:97:
ec:b9:71:e4:6d:68:bb:a3:70:10:dc:6d:0a:cd:c5:
1d:54:c6:7e:3b:80:bb:cd:4b:dd:b6:2d:3c:21:8e:
76:36:b2:ab:7c:45:da:6a:33:73:e7:68:05:b0:62:
c9:6e:f5:17:59:3f:12:0f:ed:fb:dc:ec:ce:00:0a:
d6:3e:67:87:da:c8:02:09:5d:8d:ae:02:38:78:d3:
95:2f:44:e2:c3:e2:02:b9:62:48:c4:d6:f7:53:da:
5f:05:bf:c7:43:60:4f:cc:d3:27:65:e1:6e:8d:fa:
78:b9:e2:60:43:e2:c6:ee:af:d4:a8:b6:38:37:30:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:D5:15:EE:EA:A0:44:41:B6:3D:C4:AB:16:41:8C:BA:E6:60:6F
X509v3 Authority Key Identifier:
keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/d207bbfebd7c5d60f4f7f01fbfdb4924f4e6b4d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.220.0/24
Signature Algorithm: sha256WithRSAEncryption
18:60:f0:3b:20:8a:25:5b:f4:8a:4c:5c:02:60:39:d4:1c:a4:
fe:b2:7c:ae:2e:f4:cd:b2:b8:22:9b:da:08:de:d6:c6:53:df:
07:b5:4a:23:10:fa:5e:41:54:23:8d:99:5a:e8:78:78:da:7b:
8c:eb:ff:c3:d0:69:d4:6c:00:92:57:26:4a:00:67:ee:c8:48:
da:1b:dd:03:62:61:9f:59:12:10:34:1e:4e:cc:92:8c:23:cd:
58:99:c3:81:58:b7:dd:50:3c:72:eb:68:5a:fe:84:52:97:b1:
83:62:d3:30:1f:c7:ce:f6:57:c5:fd:46:26:f6:7b:4b:2f:0f:
ec:0a:c1:94:1b:5f:58:fa:5a:e0:c5:58:5a:db:2b:b2:09:1f:
8a:e4:01:39:96:4f:b0:c7:b0:6e:40:a0:9d:74:38:78:e7:c5:
dd:6d:52:e8:9c:78:9a:fa:3d:7f:b8:db:89:d0:67:6b:08:72:
3a:51:4c:6b:58:f8:dc:2a:0e:41:3e:5e:6b:92:4c:88:e8:c8:
ac:22:1f:53:90:c4:11:1f:5b:c6:1a:18:49:03:e3:e4:b3:f6:
8c:0c:53:7a:80:64:b1:7b:f2:0c:30:6f:f9:bd:71:f3:a3:5f:
84:3b:39:68:f3:3d:f0:d0:47:9a:8a:34:17:86:39:51:8e:8c:
02:96:b2:0f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDawIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
YTBmZjZlNjdiZDEzOTQ1YmJiMmM1NTlkNTIxNzZmNTgwMWY4ODMwHhcNMjEwMzI0
MTQzNzA1WhcNMjYwMzI0MTQzNzA1WjAzMTEwLwYDVQQDEyhkMjA3YmJmZWJkN2M1
ZDYwZjRmN2YwMWZiZmRiNDkyNGY0ZTZiNGQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAne8Z1w5XNFJmObJt4UkhjnNUq14D4jLH8Yj/yW/8LhSLBqDu
/u5JZf0x2JjAKB6QqXFwsV2PTqq9UzaDETLWJH7MY5pPQaZ2o6zAvbeJwb8MEshC
lZkFyJqa4YZF9aZzFglx+8r9hrUB2+jG3tMmebtWt/qRkvQTsSDPeX6bdx1+cq3T
IJfsuXHkbWi7o3AQ3G0KzcUdVMZ+O4C7zUvdti08IY52NrKrfEXaajNz52gFsGLJ
bvUXWT8SD+373OzOAArWPmeH2sgCCV2NrgI4eNOVL0Tiw+ICuWJIxNb3U9pfBb/H
Q2BPzNMnZeFujfp4ueJgQ+LG7q/UqLY4NzDozwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFN0g1RXu6qBEQbY9xKsWQYy65mBvMB8GA1UdIwQYMBaAFNSvsG+BwMJ5Bok5
NeKQRr2CIBiUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDlhMGZm
NmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzFhNzA2YWItZDNjZS00YmFjLThiNTEtMjY5NjM5
NDc1OTBlL2QyMDdiYmZlYmQ3YzVkNjBmNGY3ZjAxZmJmZGI0OTI0ZjRlNmI0ZDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MWE3MDZhYi1kM2NlLTRiYWMtOGI1MS0yNjk2
Mzk0NzU5MGUvMDlhMGZmNmU2N2JkMTM5NDViYmIyYzU1OWQ1MjE3NmY1ODAxZjg4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5w3DANBgkqhkiG9w0BAQsFAAOCAQEAGGDwOyCKJVv0ikxc
AmA51Byk/rJ8ri70zbK4IpvaCN7WxlPfB7VKIxD6XkFUI42ZWuh4eNp7jOv/w9Bp
1GwAklcmSgBn7shI2hvdA2Jhn1kSEDQeTsySjCPNWJnDgVi33VA8cutoWv6EUpex
g2LTMB/HzvZXxf1GJvZ7Sy8P7ArBlBtfWPpa4MVYWtsrsgkfiuQBOZZPsMewbkCg
nXQ4eOfF3W1S6Jx4mvo9f7jbidBnawhyOlFMa1j43CoOQT5ea5JMiOjIrCIfU5DE
ER9bxhoYSQPj5LP2jAxTeoBksXvyDDBv+b1x86NfhDs5aPM98NBHmoo0F4Y5UY6M
ApayDw==
-----END CERTIFICATE-----
Generated at Wed Aug 2 20:22:13 2023 by rpki-client on console-ams.rpki-client.org