Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8137807c-9877-479b-8660-329dc17fdf80/e1d57482fad553907daf64a168cd2da59fe4bdd0.roa
File: e1d57482fad553907daf64a168cd2da59fe4bdd0.roa (raw, json)
Hash identifier: aYS7XCAy0lDJ4xAXPvs2kQALRiDMyz338DouuZxifwI=
Subject key identifier: 8A:4B:C0:24:AF:F0:23:EC:77:16:FC:70:B9:EA:10:F1:1E:CA:97:AB
Certificate issuer: /CN=9cc6a73aafa68160f0cf809b15e30275ae5fa69e
Certificate serial: 0B1B9F
Authority key identifier: 66:86:FC:01:CD:8A:EE:8E:34:9C:2E:DF:68:90:85:FB:02:1F:5B:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cc6a73aafa68160f0cf809b15e30275ae5fa69e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8137807c-9877-479b-8660-329dc17fdf80/e1d57482fad553907daf64a168cd2da59fe4bdd0.roa
Signing time: Wed 24 Mar 2021 14:35:27 +0000
ROA not before: Wed 24 Mar 2021 14:35:27 +0000
ROA not after: Tue 24 Mar 2026 14:35:27 +0000
asID: 14080
IP address blocks: 2801:112::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 05 Mar 2024 16:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727967 (0xb1b9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc6a73aafa68160f0cf809b15e30275ae5fa69e
Validity
Not Before: Mar 24 14:35:27 2021 GMT
Not After : Mar 24 14:35:27 2026 GMT
Subject: CN=e1d57482fad553907daf64a168cd2da59fe4bdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:32:a7:af:7a:f8:b4:22:01:60:f3:df:2f:d6:
50:d0:2f:e8:7f:c9:16:a7:ac:17:5a:e4:11:c3:10:
ba:af:c1:91:bb:be:84:47:8e:1b:4e:50:20:a1:43:
f5:ae:dd:c5:a6:af:2a:a0:3a:c7:e3:bb:f3:4a:ec:
2a:0f:30:af:29:7b:6a:ef:38:3c:21:e1:6c:6d:fd:
e3:17:8c:c4:f4:21:64:93:82:eb:74:e5:cf:de:38:
19:11:f1:dc:ce:34:0c:0e:2b:b1:02:b8:2e:e6:7b:
23:a5:69:6c:48:1f:5e:7e:22:1e:9b:51:ca:64:48:
81:54:84:33:01:90:bb:2c:06:e0:8f:1a:f8:b0:89:
50:44:b1:0d:41:bf:7f:d2:7d:99:02:f3:6d:10:f3:
21:51:1e:ce:54:2a:27:43:74:e4:4d:8a:ce:a0:90:
4f:87:cb:4d:aa:38:a1:4d:4e:6a:75:80:8c:6c:d9:
b3:aa:39:8d:5d:43:b1:1b:e8:c5:ed:e6:54:d3:5a:
61:30:a9:06:b8:a2:0c:9b:3c:2e:5e:92:6a:1c:33:
f7:86:e2:4a:ce:d6:91:d9:92:6a:1c:72:d1:77:c2:
9a:ed:00:ac:86:02:64:1c:43:84:da:f7:58:ae:b5:
2e:61:d5:54:3c:15:53:d5:b1:df:33:ca:34:35:8c:
2a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4B:C0:24:AF:F0:23:EC:77:16:FC:70:B9:EA:10:F1:1E:CA:97:AB
X509v3 Authority Key Identifier:
keyid:66:86:FC:01:CD:8A:EE:8E:34:9C:2E:DF:68:90:85:FB:02:1F:5B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cc6a73aafa68160f0cf809b15e30275ae5fa69e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8137807c-9877-479b-8660-329dc17fdf80/e1d57482fad553907daf64a168cd2da59fe4bdd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8137807c-9877-479b-8660-329dc17fdf80/9cc6a73aafa68160f0cf809b15e30275ae5fa69e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:112::/40
Signature Algorithm: sha256WithRSAEncryption
5e:46:0b:95:74:d0:14:bd:14:fe:3e:90:d8:9c:21:53:00:b9:
5e:d3:75:b0:11:88:51:25:f6:28:c9:64:72:7b:e0:ee:27:22:
cd:7c:f4:ba:3f:e5:be:e1:46:aa:43:20:3d:6d:22:df:14:06:
9a:ee:81:03:70:b1:12:a2:b6:0d:be:7c:01:86:79:16:62:6d:
e9:c6:60:9e:f8:d8:36:5e:80:52:e4:a0:d6:59:42:3a:c5:b7:
9d:ed:68:82:24:5c:5a:1d:1e:78:1c:b3:b7:53:7f:2d:d6:ff:
34:d0:25:e2:00:9e:aa:51:1d:aa:8c:af:c7:36:3d:8b:0c:67:
1e:3e:2b:72:b4:9e:f7:17:92:30:d3:c4:92:4c:72:5c:00:77:
17:a4:eb:0a:e5:ee:f6:2d:5a:6d:ba:ad:6a:a4:66:4a:fd:1c:
21:db:5f:aa:10:f5:67:d7:72:a8:06:32:01:aa:ad:e8:c4:f6:
7f:d0:47:f9:6a:35:ee:f1:b2:bf:6e:5c:44:a2:0e:2e:59:f1:
fa:e9:8e:15:8c:8a:61:14:a6:f8:34:44:10:67:eb:c2:c5:dc:
13:29:94:58:ef:fd:85:90:f8:41:f0:20:b7:ba:37:56:fc:d8:
d0:c2:95:a7:79:d0:f4:30:bb:f5:a3:47:2a:25:a8:33:54:b8:
25:c5:29:29
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDCxufMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlj
YzZhNzNhYWZhNjgxNjBmMGNmODA5YjE1ZTMwMjc1YWU1ZmE2OWUwHhcNMjEwMzI0
MTQzNTI3WhcNMjYwMzI0MTQzNTI3WjAzMTEwLwYDVQQDEyhlMWQ1NzQ4MmZhZDU1
MzkwN2RhZjY0YTE2OGNkMmRhNTlmZTRiZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA8DKnr3r4tCIBYPPfL9ZQ0C/of8kWp6wXWuQRwxC6r8GRu76E
R44bTlAgoUP1rt3Fpq8qoDrH47vzSuwqDzCvKXtq7zg8IeFsbf3jF4zE9CFkk4Lr
dOXP3jgZEfHczjQMDiuxArgu5nsjpWlsSB9efiIem1HKZEiBVIQzAZC7LAbgjxr4
sIlQRLENQb9/0n2ZAvNtEPMhUR7OVConQ3TkTYrOoJBPh8tNqjihTU5qdYCMbNmz
qjmNXUOxG+jF7eZU01phMKkGuKIMmzwuXpJqHDP3huJKztaR2ZJqHHLRd8Ka7QCs
hgJkHEOE2vdYrrUuYdVUPBVT1bHfM8o0NYwq5wIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFIpLwCSv8CPsdxb8cLnqEPEeyperMB8GA1UdIwQYMBaAFGaG/AHNiu6ONJwu
32iQhfsCH1u1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWNjNmE3
M2FhZmE2ODE2MGYwY2Y4MDliMTVlMzAyNzVhZTVmYTY5ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODEzNzgwN2MtOTg3Ny00NzliLTg2NjAtMzI5ZGMx
N2ZkZjgwL2UxZDU3NDgyZmFkNTUzOTA3ZGFmNjRhMTY4Y2QyZGE1OWZlNGJkZDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MTM3ODA3Yy05ODc3LTQ3OWItODY2MC0zMjlk
YzE3ZmRmODAvOWNjNmE3M2FhZmE2ODE2MGYwY2Y4MDliMTVlMzAyNzVhZTVmYTY5
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGACgBARIAMA0GCSqGSIb3DQEBCwUAA4IBAQBeRguVdNAUvRT+
PpDYnCFTALle03WwEYhRJfYoyWRye+DuJyLNfPS6P+W+4UaqQyA9bSLfFAaa7oED
cLESorYNvnwBhnkWYm3pxmCe+Ng2XoBS5KDWWUI6xbed7WiCJFxaHR54HLO3U38t
1v800CXiAJ6qUR2qjK/HNj2LDGcePitytJ73F5Iw08SSTHJcAHcXpOsK5e72LVpt
uq1qpGZK/Rwh21+qEPVn13KoBjIBqq3oxPZ/0Ef5ajXu8bK/blxEog4uWfH66Y4V
jIphFKb4NEQQZ+vCxdwTKZRY7/2FkPhB8CC3ujdW/NjQwpWnedD0MLv1o0cqJagz
VLglxSkp
-----END CERTIFICATE-----
Generated at Tue Mar 5 20:12:25 2024 by rpki-client on console-fra.rpki-client.org