Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/5da2c9a1c4990d19584fec805a87f2c9ec8cb9bb.roa
File: 5da2c9a1c4990d19584fec805a87f2c9ec8cb9bb.roa (raw, json)
Hash identifier: Lh3Q3aA0jJGNAUKCVzthxmpFn8fHkgHRRVn3K5I9AJw=
Subject key identifier: 28:21:5F:16:F5:09:9F:B4:F0:D8:15:C9:79:02:4E:28:50:E4:A4:1B
Certificate issuer: /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Certificate serial: 030AC0
Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/5da2c9a1c4990d19584fec805a87f2c9ec8cb9bb.roa
Signing time: Tue 01 Feb 2022 20:42:08 +0000
ROA not before: Tue 16 Nov 2021 03:00:00 +0000
ROA not after: Mon 15 Jan 2024 03:00:00 +0000
asID: 22822
IP address blocks: 2801:114::/44 maxlen: 48
2803:9310::/32 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 Jan 2024 07:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199360 (0x30ac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Validity
Not Before: Nov 16 03:00:00 2021 GMT
Not After : Jan 15 03:00:00 2024 GMT
Subject: CN=5da2c9a1c4990d19584fec805a87f2c9ec8cb9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:46:67:3a:e9:58:b1:05:6d:1f:07:c4:b3:
20:aa:48:0e:3c:9f:99:ff:f9:d4:3a:3e:01:4e:2b:
8f:cc:f6:8f:ff:a2:8a:3a:31:bb:56:d5:79:80:ae:
e7:5e:71:78:77:03:95:40:b7:bb:be:d9:32:ee:0e:
17:ec:ca:c4:58:6d:ec:85:ea:a8:64:e8:a6:ee:0e:
38:6b:73:6e:cd:1c:6b:a0:62:a6:85:62:35:e9:a8:
ea:d5:5f:48:13:13:43:ee:12:b0:82:f4:74:88:aa:
67:8e:bb:78:ff:19:dd:53:7f:7c:6b:27:f0:77:51:
1e:92:aa:29:6b:dd:ec:3f:ed:ca:6f:16:9d:00:1f:
9d:59:59:ff:c4:22:10:1b:a1:3f:04:4d:09:38:51:
20:52:27:b0:cc:32:df:e5:e1:c8:0a:66:d1:d6:76:
ad:78:8e:d0:50:a9:44:27:63:a3:0f:02:6c:ca:4c:
ec:ad:c1:1e:bc:c2:f6:a4:f9:6b:a7:4b:51:a4:ac:
68:f5:07:91:08:aa:43:f0:3a:a5:f2:30:8f:13:09:
c2:9c:28:e6:46:1c:9a:e1:c0:d1:e5:f7:e7:fa:cd:
74:33:5d:30:e2:9e:95:30:ff:ab:9a:df:94:be:0e:
97:d1:03:f1:2a:75:d3:d4:9b:a2:da:f0:77:6b:27:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:21:5F:16:F5:09:9F:B4:F0:D8:15:C9:79:02:4E:28:50:E4:A4:1B
X509v3 Authority Key Identifier:
keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/5da2c9a1c4990d19584fec805a87f2c9ec8cb9bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:114::/44
2803:9310::/32
Signature Algorithm: sha256WithRSAEncryption
66:ad:72:de:40:ec:2d:2d:b0:0c:5a:65:25:e8:a3:67:38:e1:
5a:18:cd:82:4f:7a:c6:a9:99:dd:02:f1:ee:83:ea:3b:ee:26:
95:bb:aa:44:63:a7:01:8f:0e:45:ec:ec:0c:2e:25:9a:90:13:
c7:0c:d2:5a:1d:23:97:2c:d1:ab:87:d0:84:e7:ff:e9:88:a2:
fc:60:0b:e9:26:0f:90:af:69:e4:b4:3f:6b:8f:72:bf:d7:48:
cd:79:65:3b:2d:5c:fc:d4:14:ff:a4:73:87:0f:a5:12:c1:f3:
9b:2c:cf:5b:8f:3b:e3:7f:f9:9e:8f:3f:15:c2:1f:9e:99:43:
4b:ae:68:12:4c:fc:56:cf:8b:de:34:a6:2a:95:0f:0c:4f:46:
d6:5d:42:e1:3a:4e:67:8d:48:ae:0a:97:46:d3:81:bd:35:7f:
18:ca:3f:b2:df:03:77:dc:47:0f:8a:5b:2a:d9:1e:30:fa:f1:
57:7e:62:26:cc:d7:c6:91:0e:a1:b4:9e:95:6c:96:5b:8d:a8:
6d:6d:fb:1e:a3:5c:14:39:a3:7d:2d:71:76:35:73:9c:98:b8:
08:ca:f1:84:ef:36:44:36:10:68:1a:19:93:ab:1c:fb:b2:ec:
2a:b6:e6:de:4a:4f:e3:77:e9:7c:03:ea:44:25:29:18:e8:e7:
e2:93:16:71
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIDAwrAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
NGFhZjlkNzBjMjE2NTUxYjFiNjE5YmM0Yzg1NzNjM2IzZTFiNTIwHhcNMjExMTE2
MDMwMDAwWhcNMjQwMTE1MDMwMDAwWjAzMTEwLwYDVQQDEyg1ZGEyYzlhMWM0OTkw
ZDE5NTg0ZmVjODA1YTg3ZjJjOWVjOGNiOWJiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwlNGZzrpWLEFbR8HxLMgqkgOPJ+Z//nUOj4BTiuPzPaP/6KK
OjG7VtV5gK7nXnF4dwOVQLe7vtky7g4X7MrEWG3sheqoZOim7g44a3NuzRxroGKm
hWI16ajq1V9IExND7hKwgvR0iKpnjrt4/xndU398ayfwd1Eekqopa93sP+3Kbxad
AB+dWVn/xCIQG6E/BE0JOFEgUiewzDLf5eHICmbR1nateI7QUKlEJ2OjDwJsykzs
rcEevML2pPlrp0tRpKxo9QeRCKpD8Dql8jCPEwnCnCjmRhya4cDR5ffn+s10M10w
4p6VMP+rmt+Uvg6X0QPxKnXT1Jui2vB3ayfkewIDAQABo4ICZTCCAmEwHQYDVR0O
BBYEFCghXxb1CZ+08NgVyXkCTihQ5KQbMB8GA1UdIwQYMBaAFISm8Fb2MnQz/0/c
UNnzstjFz/6bMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDY0YWFm
OWQ3MGMyMTY1NTFiMWI2MTliYzRjODU3M2MzYjNlMWI1Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2VhZmY4OWEtODU3YS00ODcwLTgxMmMtN2E1NzRk
ZTE2YjI2LzVkYTJjOWExYzQ5OTBkMTk1ODRmZWM4MDVhODdmMmM5ZWM4Y2I5YmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZWFmZjg5YS04NTdhLTQ4NzAtODEyYy03YTU3
NGRlMTZiMjYvNDY0YWFmOWQ3MGMyMTY1NTFiMWI2MTliYzRjODU3M2MzYjNlMWI1
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjApBggrBgEFBQcBBwEB/wQa
MBgwFgQCAAIwEAMHBCgBARQAAAMFACgDkxAwDQYJKoZIhvcNAQELBQADggEBAGat
ct5A7C0tsAxaZSXoo2c44VoYzYJPesapmd0C8e6D6jvuJpW7qkRjpwGPDkXs7Awu
JZqQE8cM0lodI5cs0auH0ITn/+mIovxgC+kmD5CvaeS0P2uPcr/XSM15ZTstXPzU
FP+kc4cPpRLB85ssz1uPO+N/+Z6PPxXCH56ZQ0uuaBJM/FbPi940piqVDwxPRtZd
QuE6TmeNSK4Kl0bTgb01fxjKP7LfA3fcRw+KWyrZHjD68Vd+YibM18aRDqG0npVs
lluNqG1t+x6jXBQ5o30tcXY1c5yYuAjK8YTvNkQ2EGgaGZOrHPuy7Cq25t5KT+N3
6XwD6kQlKRjo5+KTFnE=
-----END CERTIFICATE-----
Generated at Sun Jan 14 08:18:56 2024 by rpki-client on console-fra.rpki-client.org