Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/89f645f095f3d10c94a330e91a7e8ff886772735.roa
File: 89f645f095f3d10c94a330e91a7e8ff886772735.roa (raw, json)
Hash identifier: TQMDyzCBpxQFCvBvR9AoJIynQo6SusSvcikG4l2LplY=
Subject key identifier: A8:C1:C8:75:EC:24:A4:32:9D:97:24:0C:B8:BD:D1:3B:1F:C2:4C:AA
Certificate issuer: /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial: 2785F6
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/89f645f095f3d10c94a330e91a7e8ff886772735.roa
Signing time: Fri 29 Dec 2023 02:47:03 +0000
ROA not before: Fri 29 Dec 2023 02:47:03 +0000
ROA not after: Mon 29 Dec 2025 02:47:03 +0000
asID: 20473
IP address blocks: 190.15.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2590198 (0x2785f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
Validity
Not Before: Dec 29 02:47:03 2023 GMT
Not After : Dec 29 02:47:03 2025 GMT
Subject: CN=89f645f095f3d10c94a330e91a7e8ff886772735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:4e:b8:d8:db:98:15:45:ca:c3:15:88:3d:
57:cf:a7:95:5c:38:4b:b3:d5:22:dd:39:7d:b1:5e:
74:8e:11:d6:e1:62:69:db:0a:e7:ca:2a:9d:f5:1e:
39:9e:a1:8c:03:2d:bf:26:74:56:22:b5:e1:1d:41:
46:14:a9:fc:02:94:0a:f4:e1:38:c9:a3:eb:d3:02:
a1:06:5b:b0:36:84:dd:20:38:ef:87:29:b6:2b:71:
a7:e8:51:3e:f8:c7:6d:79:82:ae:14:bb:1f:88:e3:
a2:b7:03:a8:17:7a:03:af:88:37:38:5f:c4:59:5f:
dd:23:c5:bc:78:29:43:cf:57:c7:25:56:9e:0b:57:
d6:24:4c:e1:68:f9:87:61:58:f4:57:f0:e1:63:47:
ea:a0:4b:7f:36:f0:6f:b4:5c:20:02:ac:ee:a7:98:
04:a4:4f:fa:40:55:a5:f2:4d:8f:2a:0a:ef:a0:08:
d0:6a:0b:25:5b:fa:30:7c:0e:ab:b2:48:5c:93:c0:
98:86:1c:0a:13:ab:66:04:ab:d1:dd:1e:1f:cc:69:
57:5a:ac:06:b6:9e:c2:48:8a:2a:62:dd:5d:10:f9:
ae:54:bc:4c:ef:3c:d9:7b:3e:9f:f0:01:7a:0d:73:
d9:90:5c:ad:fb:93:b5:d7:fd:d0:0f:2c:e5:46:9e:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C1:C8:75:EC:24:A4:32:9D:97:24:0C:B8:BD:D1:3B:1F:C2:4C:AA
X509v3 Authority Key Identifier:
keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/89f645f095f3d10c94a330e91a7e8ff886772735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.15.135.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:cd:a5:ac:ff:71:ea:74:94:1b:02:30:06:c0:3b:87:a2:e5:
56:5f:91:16:c9:e4:87:d0:c0:6c:45:c6:72:9f:ff:4a:cb:84:
0d:a3:3c:8f:ed:b6:5e:fa:e6:a5:57:a2:ef:55:f6:5c:12:d0:
ee:65:48:35:b9:c2:46:d5:f0:9a:43:8c:8f:90:8b:1c:ff:3d:
42:9a:9e:71:b7:71:5f:ca:2c:72:83:bc:7e:d6:17:8a:a7:8c:
75:50:a6:5b:57:96:eb:2f:3c:92:64:9d:ae:d9:d5:06:66:28:
cc:96:a4:88:e9:63:b0:18:03:bb:89:1e:a0:1a:10:9e:3c:17:
62:b5:9d:f0:44:91:c9:e4:f5:44:b5:16:4c:f7:2f:3e:4e:a3:
c2:ea:a4:2c:33:0b:29:b7:d9:df:27:0a:81:e4:b6:58:cc:c6:
4c:dc:94:f2:b2:ff:47:ef:f5:43:4d:2b:52:b4:df:ec:92:5a:
82:78:d5:b9:12:7b:e7:8d:93:aa:10:5b:1c:d0:31:65:01:86:
dd:be:e2:96:23:2b:bb:72:c2:d9:7f:60:2c:11:ea:12:99:9d:
e8:14:cb:2d:fd:de:3d:55:41:6f:1c:96:12:9e:fb:9b:4f:27:
6b:f3:18:3c:38:5a:b7:68:e0:d0:a7:3f:e8:b1:56:a2:80:77:
f8:a0:2d:b9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ4X2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
YWU2OWQyZjExMWM3OTQxNjVhMDFhODY1ZmUxODdiODgzMTIyN2QwHhcNMjMxMjI5
MDI0NzAzWhcNMjUxMjI5MDI0NzAzWjAzMTEwLwYDVQQDEyg4OWY2NDVmMDk1ZjNk
MTBjOTRhMzMwZTkxYTdlOGZmODg2NzcyNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv4hOuNjbmBVFysMViD1Xz6eVXDhLs9Ui3Tl9sV50jhHW4WJp
2wrnyiqd9R45nqGMAy2/JnRWIrXhHUFGFKn8ApQK9OE4yaPr0wKhBluwNoTdIDjv
hym2K3Gn6FE++MdteYKuFLsfiOOitwOoF3oDr4g3OF/EWV/dI8W8eClDz1fHJVae
C1fWJEzhaPmHYVj0V/DhY0fqoEt/NvBvtFwgAqzup5gEpE/6QFWl8k2PKgrvoAjQ
agslW/owfA6rskhck8CYhhwKE6tmBKvR3R4fzGlXWqwGtp7CSIoqYt1dEPmuVLxM
7zzZez6f8AF6DXPZkFyt+5O11/3QDyzlRp7ZwwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKjByHXsJKQynZckDLi90TsfwkyqMB8GA1UdIwQYMBaAFIIUXtq2WB5z5L1U
YAk+zsl2C8SfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVhZTY5
ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGM3OTRiZDAtN2Q5NC00NDVmLTgyMzMtMTIwMGM5
YzZmMmVjLzg5ZjY0NWYwOTVmM2QxMGM5NGEzMzBlOTFhN2U4ZmY4ODY3NzI3MzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84Yzc5NGJkMC03ZDk0LTQ0NWYtODIzMy0xMjAw
YzljNmYyZWMvMDVhZTY5ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL4PhzANBgkqhkiG9w0BAQsFAAOCAQEATM2lrP9x6nSUGwIw
BsA7h6LlVl+RFsnkh9DAbEXGcp//SsuEDaM8j+22XvrmpVei71X2XBLQ7mVINbnC
RtXwmkOMj5CLHP89QpqecbdxX8oscoO8ftYXiqeMdVCmW1eW6y88kmSdrtnVBmYo
zJakiOljsBgDu4keoBoQnjwXYrWd8ESRyeT1RLUWTPcvPk6jwuqkLDMLKbfZ3ycK
geS2WMzGTNyU8rL/R+/1Q00rUrTf7JJagnjVuRJ7542TqhBbHNAxZQGG3b7iliMr
u3LC2X9gLBHqEpmd6BTLLf3ePVVBbxyWEp77m08na/MYPDhat2jg0Kc/6LFWooB3
+KAtuQ==
-----END CERTIFICATE-----
Generated at Sat Dec 30 18:14:30 2023 by rpki-client on console-fra.rpki-client.org