Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/79a89ea377979248169a60acc5a33ce628554fde.roa
File: 79a89ea377979248169a60acc5a33ce628554fde.roa (raw, json)
Hash identifier: sx07KisiVTCLMh+6+9d4p54/8HLBYHKRUw7Z7SjTOjY=
Subject key identifier: B4:88:E5:CE:5E:65:CC:15:98:A2:1A:89:28:5F:39:83:F9:D4:A5:46
Certificate issuer: /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial: 22E333
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/79a89ea377979248169a60acc5a33ce628554fde.roa
Signing time: Tue 20 Jun 2023 15:45:24 +0000
ROA not before: Mon 19 Jun 2023 15:45:21 +0000
ROA not after: Fri 20 Jun 2025 15:45:21 +0000
asID: 22724
IP address blocks: 190.15.139.0/24 maxlen: 24
190.15.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286387 (0x22e333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
Validity
Not Before: Jun 19 15:45:21 2023 GMT
Not After : Jun 20 15:45:21 2025 GMT
Subject: CN=79a89ea377979248169a60acc5a33ce628554fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:67:ad:72:78:35:40:95:ba:e6:c1:a7:f6:
e2:0a:4a:b5:db:e7:ef:6f:a0:2a:07:0f:bf:08:40:
8d:55:0b:ea:9a:f1:1b:db:61:96:d4:bb:be:52:be:
18:db:72:11:67:cd:d9:30:ed:fd:8e:ac:62:1a:95:
4b:b3:f1:92:43:39:1d:6f:ed:2e:0b:ac:86:32:2a:
3a:13:fc:b9:2a:dc:f4:1a:a1:a6:03:99:75:ad:f2:
bd:91:07:d5:90:03:a8:e4:e5:6f:2c:f9:65:12:42:
e4:87:a1:05:36:aa:4f:93:fb:7d:3c:9f:2f:f3:0d:
67:3e:26:49:b7:57:07:75:de:64:91:19:4f:5f:c4:
94:48:1b:ca:72:a3:d8:ab:e2:fb:08:ad:1b:a1:76:
2f:70:4e:60:a7:cc:a3:8b:e9:c9:48:56:f8:2b:91:
dc:56:4f:1d:77:a9:ff:ed:b0:36:0e:7a:fa:71:2f:
e4:57:57:c1:b3:94:82:cf:42:d2:b0:1c:09:b4:ae:
13:68:80:54:28:48:40:cf:62:57:9b:fd:42:8a:eb:
ea:d5:73:f4:8f:ce:1c:fd:03:20:64:62:46:d5:e2:
19:be:ee:93:45:c0:31:fe:92:3d:a6:99:e1:bf:e0:
3c:18:d1:52:6b:16:55:fe:38:b3:f8:58:d0:ab:0c:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:88:E5:CE:5E:65:CC:15:98:A2:1A:89:28:5F:39:83:F9:D4:A5:46
X509v3 Authority Key Identifier:
keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/79a89ea377979248169a60acc5a33ce628554fde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.15.139.0-190.15.140.255
Signature Algorithm: sha256WithRSAEncryption
01:43:bf:95:7c:18:97:22:4a:4f:a4:e1:a8:0c:8c:bd:5f:26:
e6:fb:10:d4:5c:2f:ea:8a:f4:a4:30:46:e2:1a:cc:32:17:64:
10:fa:cf:8c:93:8f:ac:b3:55:15:f1:a9:44:29:b2:db:4d:0b:
e0:98:34:60:65:e1:7c:b2:ef:27:a0:dc:84:33:e2:a4:be:48:
40:5c:aa:8e:a2:5c:20:91:73:6c:4a:9f:a8:8d:f7:05:35:f1:
c7:ba:33:b2:fc:93:e9:04:6f:e3:d7:c6:bb:73:80:29:f7:21:
2a:8d:7d:90:67:a7:94:ee:93:78:f8:6b:86:d5:99:2e:25:98:
76:02:60:19:44:5b:fa:5b:d5:47:a7:39:6b:43:41:6c:ad:1e:
9c:de:4e:cf:f2:59:46:33:87:43:6e:18:d4:ad:6f:21:20:74:
16:a5:80:1f:ef:6b:ab:fb:26:a0:9b:4e:81:96:81:d1:2c:96:
46:a8:73:70:01:49:94:a3:c3:ab:5d:1e:de:64:cb:95:36:87:
7b:60:e4:53:83:2e:1c:f0:0a:9e:cc:bd:5f:64:59:2c:99:52:
db:af:a6:77:24:1f:ee:e2:85:43:12:4a:7c:11:2d:a9:6f:86:
b5:65:5b:e5:4d:a7:55:47:17:a7:09:55:e8:29:57:f1:21:e9:
2e:83:6f:be
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDIuMzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
YWU2OWQyZjExMWM3OTQxNjVhMDFhODY1ZmUxODdiODgzMTIyN2QwHhcNMjMwNjE5
MTU0NTIxWhcNMjUwNjIwMTU0NTIxWjAzMTEwLwYDVQQDEyg3OWE4OWVhMzc3OTc5
MjQ4MTY5YTYwYWNjNWEzM2NlNjI4NTU0ZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuV9nrXJ4NUCVuubBp/biCkq12+fvb6AqBw+/CECNVQvqmvEb
22GW1Lu+Ur4Y23IRZ83ZMO39jqxiGpVLs/GSQzkdb+0uC6yGMio6E/y5Ktz0GqGm
A5l1rfK9kQfVkAOo5OVvLPllEkLkh6EFNqpPk/t9PJ8v8w1nPiZJt1cHdd5kkRlP
X8SUSBvKcqPYq+L7CK0boXYvcE5gp8yji+nJSFb4K5HcVk8dd6n/7bA2Dnr6cS/k
V1fBs5SCz0LSsBwJtK4TaIBUKEhAz2JXm/1Ciuvq1XP0j84c/QMgZGJG1eIZvu6T
RcAx/pI9ppnhv+A8GNFSaxZV/jiz+FjQqww3aQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFLSI5c5eZcwVmKIaiShfOYP51KVGMB8GA1UdIwQYMBaAFIIUXtq2WB5z5L1U
YAk+zsl2C8SfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVhZTY5
ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGM3OTRiZDAtN2Q5NC00NDVmLTgyMzMtMTIwMGM5
YzZmMmVjLzc5YTg5ZWEzNzc5NzkyNDgxNjlhNjBhY2M1YTMzY2U2Mjg1NTRmZGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84Yzc5NGJkMC03ZDk0LTQ0NWYtODIzMy0xMjAw
YzljNmYyZWMvMDVhZTY5ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAvg+LAwQAvg+MMA0GCSqGSIb3DQEBCwUAA4IBAQABQ7+V
fBiXIkpPpOGoDIy9Xybm+xDUXC/qivSkMEbiGswyF2QQ+s+Mk4+ss1UV8alEKbLb
TQvgmDRgZeF8su8noNyEM+KkvkhAXKqOolwgkXNsSp+ojfcFNfHHujOy/JPpBG/j
18a7c4Ap9yEqjX2QZ6eU7pN4+GuG1ZkuJZh2AmAZRFv6W9VHpzlrQ0FsrR6c3k7P
8llGM4dDbhjUrW8hIHQWpYAf72ur+yagm06BloHRLJZGqHNwAUmUo8OrXR7eZMuV
Nod7YORTgy4c8AqezL1fZFksmVLbr6Z3JB/u4oVDEkp8ES2pb4a1ZVvlTadVRxen
CVXoKVfxIekug2++
-----END CERTIFICATE-----
Generated at Fri Jan 5 00:22:29 2024 by rpki-client on console-ams.rpki-client.org