Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/1c9c7b202eeafa5a186aa2a88a56bf5666461e56.roa
File: 1c9c7b202eeafa5a186aa2a88a56bf5666461e56.roa (raw, json)
Hash identifier: tDXeaawIM4nipVjiG2dvjySeE6WFx+1GcdYvAcgubK8=
Subject key identifier: 05:FA:C2:70:C4:6C:E7:06:D1:B3:8E:65:E8:8B:8E:A3:58:23:89:CB
Certificate issuer: /CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Certificate serial: 15918F
Authority key identifier: 84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/1c9c7b202eeafa5a186aa2a88a56bf5666461e56.roa
Signing time: Wed 05 Apr 2023 21:55:00 +0000
ROA not before: Tue 04 Apr 2023 21:54:11 +0000
ROA not after: Sat 05 Apr 2025 21:54:11 +0000
asID: 265639
IP address blocks: 170.246.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1413519 (0x15918f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Validity
Not Before: Apr 4 21:54:11 2023 GMT
Not After : Apr 5 21:54:11 2025 GMT
Subject: CN=1c9c7b202eeafa5a186aa2a88a56bf5666461e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:24:0d:43:87:57:39:19:35:c0:e4:26:17:c7:
cf:9e:fe:57:f1:2d:e7:aa:66:80:64:16:ce:1a:dc:
e0:3a:8e:0b:0c:9a:05:15:83:34:62:70:44:ef:23:
15:e4:0a:b5:8c:76:66:03:70:4a:5e:f8:da:f0:ef:
6a:d1:97:40:af:b5:59:dd:95:a8:e1:6e:72:37:be:
9b:55:29:ab:f8:78:51:16:c8:ed:51:8e:c7:d6:87:
c5:3c:97:7b:1c:c0:cd:9a:9a:a8:56:d5:30:36:12:
6c:91:5b:d6:ac:42:bb:50:2d:ba:36:7c:af:9e:0e:
89:ab:1b:cf:c7:0b:8f:5f:8d:6f:bd:cb:f8:07:6f:
e9:62:d1:ff:af:87:23:68:e4:ff:b2:4e:2f:fd:8d:
c9:70:fd:1f:68:07:90:3d:bd:80:b3:34:9b:8d:72:
41:14:eb:69:59:e0:26:aa:3b:52:0f:2d:79:68:eb:
87:09:4f:95:1a:b6:c2:57:63:75:a4:23:ef:63:a6:
ba:67:35:94:7c:39:d7:b4:12:82:f5:f9:9c:68:f5:
dc:e9:04:47:2d:b5:6b:a1:7f:b5:80:71:bc:5c:a8:
6d:10:d0:08:5e:54:6c:76:d1:62:18:0b:8b:50:b1:
75:f3:67:bd:df:c1:55:4a:ae:d2:b7:33:5e:e9:8f:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FA:C2:70:C4:6C:E7:06:D1:B3:8E:65:E8:8B:8E:A3:58:23:89:CB
X509v3 Authority Key Identifier:
keyid:84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/1c9c7b202eeafa5a186aa2a88a56bf5666461e56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/501f1f0f3a2acdfd121143683d0a9cfc1657da67.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.91.0/24
Signature Algorithm: sha256WithRSAEncryption
73:78:ea:30:65:f9:ed:b1:e5:03:2e:68:bf:6c:44:02:c0:8b:
1f:c2:47:e9:15:de:ab:f3:aa:cc:06:99:8a:5c:22:2d:de:19:
8b:9d:a4:32:65:30:87:b0:6b:c4:48:cc:8f:38:47:ab:10:61:
f7:60:4b:e2:12:5b:e6:68:49:83:22:f9:8f:5a:dd:7b:47:fa:
fe:25:3f:ff:0a:29:a2:92:ff:f8:de:26:d0:1b:17:88:50:f7:
90:74:93:dd:3f:d2:6f:a2:53:99:a3:dc:f2:17:17:eb:ba:19:
87:17:75:b3:6b:63:94:91:e9:3b:ba:f5:c7:53:7b:06:cd:98:
ca:99:34:2d:c5:cc:57:45:3a:2c:e2:50:ea:4d:46:17:80:8a:
b0:16:9c:3a:53:e2:1e:8e:5f:91:f5:ba:2d:3c:ca:fb:79:0f:
ba:dd:6c:94:d5:b3:b5:e5:e5:58:12:e1:f8:ea:54:24:30:0f:
b2:a5:d4:94:23:1a:83:3b:e6:3c:b9:a4:dc:9a:1b:5d:52:b8:
a1:22:30:48:6d:a9:bc:a6:4d:23:1a:c8:2e:4d:9a:cd:07:ea:
1b:fe:63:88:62:32:73:13:49:cc:78:d5:7c:96:7c:dc:68:ea:
99:dc:bc:7d:e2:a2:e0:23:00:20:cd:46:d9:98:3b:21:88:45:
97:a4:c9:59
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFZGPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUw
MWYxZjBmM2EyYWNkZmQxMjExNDM2ODNkMGE5Y2ZjMTY1N2RhNjcwHhcNMjMwNDA0
MjE1NDExWhcNMjUwNDA1MjE1NDExWjAzMTEwLwYDVQQDEygxYzljN2IyMDJlZWFm
YTVhMTg2YWEyYTg4YTU2YmY1NjY2NDYxZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnyQNQ4dXORk1wOQmF8fPnv5X8S3nqmaAZBbOGtzgOo4LDJoF
FYM0YnBE7yMV5Aq1jHZmA3BKXvja8O9q0ZdAr7VZ3ZWo4W5yN76bVSmr+HhRFsjt
UY7H1ofFPJd7HMDNmpqoVtUwNhJskVvWrEK7UC26Nnyvng6JqxvPxwuPX41vvcv4
B2/pYtH/r4cjaOT/sk4v/Y3JcP0faAeQPb2AszSbjXJBFOtpWeAmqjtSDy15aOuH
CU+VGrbCV2N1pCPvY6a6ZzWUfDnXtBKC9fmcaPXc6QRHLbVroX+1gHG8XKhtENAI
XlRsdtFiGAuLULF182e938FVSq7StzNe6Y80AQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAX6wnDEbOcG0bOOZeiLjqNYI4nLMB8GA1UdIwQYMBaAFIS97Fj5htw9xVHc
zP20tc5Ov6edMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTAxZjFm
MGYzYTJhY2RmZDEyMTE0MzY4M2QwYTljZmMxNjU3ZGE2Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODZkOGYxYzMtYTcyNy00MDY1LTkxZDMtMzUwYmMz
ZGI1YmE0LzFjOWM3YjIwMmVlYWZhNWExODZhYTJhODhhNTZiZjU2NjY0NjFlNTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NmQ4ZjFjMy1hNzI3LTQwNjUtOTFkMy0zNTBi
YzNkYjViYTQvNTAxZjFmMGYzYTJhY2RmZDEyMTE0MzY4M2QwYTljZmMxNjU3ZGE2
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKr2WzANBgkqhkiG9w0BAQsFAAOCAQEAc3jqMGX57bHlAy5o
v2xEAsCLH8JH6RXeq/OqzAaZilwiLd4Zi52kMmUwh7BrxEjMjzhHqxBh92BL4hJb
5mhJgyL5j1rde0f6/iU//wopopL/+N4m0BsXiFD3kHST3T/Sb6JTmaPc8hcX67oZ
hxd1s2tjlJHpO7r1x1N7Bs2Yypk0LcXMV0U6LOJQ6k1GF4CKsBacOlPiHo5fkfW6
LTzK+3kPut1slNWzteXlWBLh+OpUJDAPsqXUlCMagzvmPLmk3JobXVK4oSIwSG2p
vKZNIxrILk2azQfqG/5jiGIycxNJzHjVfJZ83Gjqmdy8feKi4CMAIM1G2Zg7IYhF
l6TJWQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-fra.rpki-client.org