Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/3994b1831583d827a9d850705bf567a5192d9fc6.roa
File: 3994b1831583d827a9d850705bf567a5192d9fc6.roa (raw, json)
Hash identifier: yS7ReZRQehb8mhKZKbLVjAj5HrTa5wqi7PHHVmuEwuQ=
Subject key identifier: B1:2F:78:DD:9C:BD:40:6B:A9:D8:90:4C:9A:48:89:EF:0C:2E:43:93
Certificate issuer: /CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Certificate serial: 14D5B7
Authority key identifier: E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/3994b1831583d827a9d850705bf567a5192d9fc6.roa
Signing time: Thu 15 Dec 2022 02:55:24 +0000
ROA not before: Wed 14 Dec 2022 02:55:15 +0000
ROA not after: Sun 15 Dec 2024 02:55:15 +0000
asID: 52398
IP address blocks: 168.121.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1365431 (0x14d5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3a4acea64b174081cdabbb007d6cd03d2a7357
Validity
Not Before: Dec 14 02:55:15 2022 GMT
Not After : Dec 15 02:55:15 2024 GMT
Subject: CN=3994b1831583d827a9d850705bf567a5192d9fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:22:d5:e2:2b:43:2d:5e:be:56:63:7a:6b:
cc:b6:68:bf:87:22:33:12:c7:f3:11:94:dd:1d:6a:
6c:6d:fd:aa:54:0a:dd:45:09:a0:04:c7:9b:09:c2:
b2:a3:f0:01:cf:a9:4f:64:4c:0d:ad:19:50:09:70:
51:7b:91:98:41:9f:67:ca:aa:b3:7d:3c:66:0a:a8:
29:12:89:ce:75:3a:a7:0a:9f:75:96:8c:5c:f7:99:
5c:23:2b:df:5f:27:33:4b:cb:cb:61:35:11:4d:5a:
ff:4d:85:71:c5:21:c0:20:a1:33:23:35:d4:cc:b3:
d3:8b:40:20:e8:e7:64:c2:32:be:70:e7:b3:47:2e:
37:cb:1d:21:54:b6:be:76:6a:5a:28:c5:c6:0d:d0:
20:af:55:4b:a0:e0:4d:9c:60:a5:0e:4c:7e:1d:01:
61:a9:cb:5d:ec:56:bd:06:50:61:d2:e2:3b:c0:bb:
80:83:72:35:e1:f2:54:e3:67:f5:c6:18:64:d2:61:
49:cc:c7:33:7d:0e:cb:b7:42:8c:f8:e8:75:c7:65:
d0:1c:f1:2b:e8:a7:8d:28:7f:5a:f7:cd:75:e4:55:
ec:47:73:f6:06:1b:86:f0:2e:f3:fb:ce:5f:3a:3e:
7b:9c:3b:42:b0:72:b8:e8:ba:0a:73:6f:dc:95:c6:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2F:78:DD:9C:BD:40:6B:A9:D8:90:4C:9A:48:89:EF:0C:2E:43:93
X509v3 Authority Key Identifier:
keyid:E8:1A:EB:82:B0:71:50:0D:66:FD:34:9A:BA:13:AF:C0:FF:01:84:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab3a4acea64b174081cdabbb007d6cd03d2a7357.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/3994b1831583d827a9d850705bf567a5192d9fc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8df3e94f-b3cc-4e64-8e59-7e85322291d2/ab3a4acea64b174081cdabbb007d6cd03d2a7357.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.86.0/24
Signature Algorithm: sha256WithRSAEncryption
65:36:78:93:87:37:a3:cd:15:6e:cb:63:74:5c:6d:cf:41:52:
0e:93:3d:6e:41:66:5f:2a:60:04:72:9d:91:e0:bc:a0:76:2f:
a9:2a:1f:ea:2e:ca:2f:c1:9f:dc:4f:cf:cf:d3:b5:2b:6e:8b:
94:98:21:c9:28:ee:cb:e5:03:21:69:9e:4d:9f:70:4d:d8:cc:
eb:df:a3:6f:d2:6e:56:f8:71:97:b9:08:6f:b8:18:2f:7b:35:
5f:af:f8:4d:e2:5b:0b:9a:47:fe:5e:28:03:7b:a9:b1:ed:d7:
ab:84:a6:66:24:da:a9:90:a8:ac:cc:8c:55:d1:30:43:44:ec:
93:59:7b:30:ef:a0:31:72:c8:9f:e7:e8:4c:14:b6:8f:69:4f:
7d:cc:56:36:ac:2d:16:19:49:f2:90:30:6f:0b:62:1b:6c:f7:
66:5b:57:e7:07:23:2d:77:8d:84:17:dc:64:23:6f:ac:f3:5c:
bd:b1:6a:c7:21:fb:5e:69:bc:ac:d8:28:74:f2:a1:30:c7:66:
88:8b:ed:f9:41:7d:90:07:49:df:53:59:4c:4e:d6:4c:56:e5:
b9:16:05:db:83:2b:7a:c7:d8:48:bc:23:d4:ad:f7:25:ee:f5:
34:e8:d9:b4:49:20:c8:75:3d:a4:db:67:75:2b:59:d0:99:be:
6f:8a:eb:e7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFNW3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
M2E0YWNlYTY0YjE3NDA4MWNkYWJiYjAwN2Q2Y2QwM2QyYTczNTcwHhcNMjIxMjE0
MDI1NTE1WhcNMjQxMjE1MDI1NTE1WjAzMTEwLwYDVQQDEygzOTk0YjE4MzE1ODNk
ODI3YTlkODUwNzA1YmY1NjdhNTE5MmQ5ZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArowi1eIrQy1evlZjemvMtmi/hyIzEsfzEZTdHWpsbf2qVArd
RQmgBMebCcKyo/ABz6lPZEwNrRlQCXBRe5GYQZ9nyqqzfTxmCqgpEonOdTqnCp91
loxc95lcIyvfXyczS8vLYTURTVr/TYVxxSHAIKEzIzXUzLPTi0Ag6OdkwjK+cOez
Ry43yx0hVLa+dmpaKMXGDdAgr1VLoOBNnGClDkx+HQFhqctd7Fa9BlBh0uI7wLuA
g3I14fJU42f1xhhk0mFJzMczfQ7Lt0KM+Oh1x2XQHPEr6KeNKH9a98115FXsR3P2
BhuG8C7z+85fOj57nDtCsHK46LoKc2/clcZHBwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLEveN2cvUBrqdiQTJpIie8MLkOTMB8GA1UdIwQYMBaAFOga64KwcVANZv00
mroTr8D/AYQUMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWIzYTRh
Y2VhNjRiMTc0MDgxY2RhYmJiMDA3ZDZjZDAzZDJhNzM1Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGRmM2U5NGYtYjNjYy00ZTY0LThlNTktN2U4NTMy
MjI5MWQyLzM5OTRiMTgzMTU4M2Q4MjdhOWQ4NTA3MDViZjU2N2E1MTkyZDlmYzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZGYzZTk0Zi1iM2NjLTRlNjQtOGU1OS03ZTg1
MzIyMjkxZDIvYWIzYTRhY2VhNjRiMTc0MDgxY2RhYmJiMDA3ZDZjZDAzZDJhNzM1
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKh5VjANBgkqhkiG9w0BAQsFAAOCAQEAZTZ4k4c3o80Vbstj
dFxtz0FSDpM9bkFmXypgBHKdkeC8oHYvqSof6i7KL8Gf3E/Pz9O1K26LlJghySju
y+UDIWmeTZ9wTdjM69+jb9JuVvhxl7kIb7gYL3s1X6/4TeJbC5pH/l4oA3upse3X
q4SmZiTaqZCorMyMVdEwQ0Tsk1l7MO+gMXLIn+foTBS2j2lPfcxWNqwtFhlJ8pAw
bwtiG2z3ZltX5wcjLXeNhBfcZCNvrPNcvbFqxyH7Xmm8rNgodPKhMMdmiIvt+UF9
kAdJ31NZTE7WTFbluRYF24MresfYSLwj1K33Je71NOjZtEkgyHU9pNtndStZ0Jm+
b4rr5w==
-----END CERTIFICATE-----
Generated at Mon Aug 7 13:25:39 2023 by rpki-client on console-ams.rpki-client.org