Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/91520188ca3cb6c049894fdf028a8a58afc3722f.roa
File: 91520188ca3cb6c049894fdf028a8a58afc3722f.roa (raw, json)
Hash identifier: OdoBbAgjiAsaT/zx6DRQOD0dK6dfqvDjcAjl1K3jK8s=
Subject key identifier: 58:1F:01:7E:8E:FF:E6:38:96:B1:B0:78:9A:34:B0:EF:E4:34:9A:62
Certificate issuer: /CN=f58e9ace5695e188fe50f2a761d818e79976c086
Certificate serial: 199D70
Authority key identifier: 3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/91520188ca3cb6c049894fdf028a8a58afc3722f.roa
Signing time: Wed 31 May 2023 20:47:09 +0000
ROA not before: Tue 30 May 2023 20:47:09 +0000
ROA not after: Sat 31 May 2025 20:47:09 +0000
asID: 264758
IP address blocks: 45.228.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 07 Feb 2024 17:37:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1678704 (0x199d70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e9ace5695e188fe50f2a761d818e79976c086
Validity
Not Before: May 30 20:47:09 2023 GMT
Not After : May 31 20:47:09 2025 GMT
Subject: CN=91520188ca3cb6c049894fdf028a8a58afc3722f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:93:7c:8b:1d:74:a0:58:4d:d1:39:46:11:
16:dd:06:ec:dd:d1:ec:8f:df:c3:c1:28:2e:e4:03:
14:9a:b3:cf:e7:10:3e:a9:11:95:52:22:53:49:2d:
25:b5:3f:50:8f:17:38:c9:02:51:50:56:95:48:47:
e8:4d:70:d8:99:6d:5a:5b:e1:94:75:c1:4d:90:e4:
a7:3b:8b:c7:6b:42:f5:a3:47:c3:1a:a9:65:27:92:
46:58:4e:75:be:7e:f3:2e:5c:c5:41:db:90:ff:43:
b6:0c:6a:2c:48:88:90:f2:32:a9:3f:5f:d1:f2:dc:
09:12:d6:fe:23:be:5c:d3:4e:66:b0:a3:84:35:f7:
95:b1:71:25:81:15:d0:d0:ae:02:7f:11:1a:26:fc:
90:15:5b:4d:41:8d:21:66:1c:8a:94:eb:42:cd:14:
9d:80:32:09:a7:02:0a:71:df:52:24:af:fd:c2:0d:
4c:3b:f0:2f:97:10:73:66:67:93:cb:65:ce:e9:7d:
e3:3f:6c:75:40:ea:a2:0b:f3:cc:be:08:ee:49:92:
2c:6e:71:70:fa:da:74:e7:58:65:7f:2d:ad:ca:e3:
fe:2c:fa:27:7c:ad:bd:8f:ac:b0:01:ea:dd:89:0c:
b3:e5:b4:05:8d:b2:90:da:90:70:9e:9c:e7:f1:7e:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1F:01:7E:8E:FF:E6:38:96:B1:B0:78:9A:34:B0:EF:E4:34:9A:62
X509v3 Authority Key Identifier:
keyid:3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/91520188ca3cb6c049894fdf028a8a58afc3722f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/f58e9ace5695e188fe50f2a761d818e79976c086.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:e0:a4:8f:87:2a:66:54:04:55:f7:e7:1b:94:5f:56:31:c8:
0f:56:92:4f:1d:dc:7c:89:fe:bf:aa:5d:fb:0d:8c:ab:4a:06:
f2:99:2e:9a:e3:73:69:d4:99:48:91:c0:45:dc:64:20:85:86:
ad:07:10:bd:c1:72:27:03:d3:6f:43:8c:1d:da:f1:78:2f:35:
09:cf:e3:6d:43:db:6c:a7:8e:ac:25:d3:fa:53:7e:9c:f2:eb:
cf:8b:90:f2:f2:8a:50:27:95:e1:18:f3:06:80:b3:36:d8:d8:
86:7a:33:ae:3b:2c:2c:37:cf:a1:c9:ae:6c:36:27:52:fe:50:
25:e5:05:8b:69:f0:07:10:39:25:01:11:13:ec:3d:fc:2a:4f:
44:0d:d1:ee:8e:d3:50:82:61:5c:4c:fb:58:3d:59:de:ed:6c:
87:3f:c6:bb:6a:f8:7e:83:bf:82:83:37:f1:57:75:c2:c3:bc:
29:98:c2:ea:56:37:49:35:98:73:04:ba:e2:ae:a9:2a:f5:ba:
f5:c2:0f:e6:95:16:0c:2a:ed:1b:16:a8:c7:da:07:b7:ed:ef:
58:17:b7:15:d5:10:7b:33:2a:f9:8c:c2:34:12:8c:24:60:66:
8f:16:de:a4:6d:f1:43:61:54:6d:22:8c:d1:1b:33:0f:0b:df:
54:98:6c:e1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGZ1wMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
OGU5YWNlNTY5NWUxODhmZTUwZjJhNzYxZDgxOGU3OTk3NmMwODYwHhcNMjMwNTMw
MjA0NzA5WhcNMjUwNTMxMjA0NzA5WjAzMTEwLwYDVQQDEyg5MTUyMDE4OGNhM2Ni
NmMwNDk4OTRmZGYwMjhhOGE1OGFmYzM3MjJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmZ2TfIsddKBYTdE5RhEW3Qbs3dHsj9/DwSgu5AMUmrPP5xA+
qRGVUiJTSS0ltT9Qjxc4yQJRUFaVSEfoTXDYmW1aW+GUdcFNkOSnO4vHa0L1o0fD
GqllJ5JGWE51vn7zLlzFQduQ/0O2DGosSIiQ8jKpP1/R8twJEtb+I75c005msKOE
NfeVsXElgRXQ0K4CfxEaJvyQFVtNQY0hZhyKlOtCzRSdgDIJpwIKcd9SJK/9wg1M
O/AvlxBzZmeTy2XO6X3jP2x1QOqiC/PMvgjuSZIsbnFw+tp051hlfy2tyuP+LPon
fK29j6ywAerdiQyz5bQFjbKQ2pBwnpzn8X7KrwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFgfAX6O/+Y4lrGweJo0sO/kNJpiMB8GA1UdIwQYMBaAFDtEtP/zKg3RBIAs
K7MWuJWL4U7PMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjU4ZTlh
Y2U1Njk1ZTE4OGZlNTBmMmE3NjFkODE4ZTc5OTc2YzA4Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODVmYzI2NTctOWRkNS00ZTE4LWEwNDMtYzFlZDk2
NzMwYmY4LzkxNTIwMTg4Y2EzY2I2YzA0OTg5NGZkZjAyOGE4YTU4YWZjMzcyMmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NWZjMjY1Ny05ZGQ1LTRlMTgtYTA0My1jMWVk
OTY3MzBiZjgvZjU4ZTlhY2U1Njk1ZTE4OGZlNTBmMmE3NjFkODE4ZTc5OTc2YzA4
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3k3DANBgkqhkiG9w0BAQsFAAOCAQEAbuCkj4cqZlQEVffn
G5RfVjHID1aSTx3cfIn+v6pd+w2Mq0oG8pkumuNzadSZSJHARdxkIIWGrQcQvcFy
JwPTb0OMHdrxeC81Cc/jbUPbbKeOrCXT+lN+nPLrz4uQ8vKKUCeV4RjzBoCzNtjY
hnozrjssLDfPocmubDYnUv5QJeUFi2nwBxA5JQERE+w9/CpPRA3R7o7TUIJhXEz7
WD1Z3u1shz/Gu2r4foO/goM38Vd1wsO8KZjC6lY3STWYcwS64q6pKvW69cIP5pUW
DCrtGxaox9oHt+3vWBe3FdUQezMq+YzCNBKMJGBmjxbepG3xQ2FUbSKM0RszDwvf
VJhs4Q==
-----END CERTIFICATE-----
Generated at Wed Feb 7 20:26:34 2024 by rpki-client on console-fra.rpki-client.org