Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/b1008a8a1d567e1d22c0adecbc0f96c4ebe758c3.roa
File: b1008a8a1d567e1d22c0adecbc0f96c4ebe758c3.roa (raw, json)
Hash identifier: 3e/6XKIv+nK1R3bV+0PHDrSHyVpOibtRQJdqGzQRvjk=
Subject key identifier: CD:A7:E9:01:E6:D8:8C:39:86:77:61:2E:A1:A9:A1:59:0E:D6:C6:CB
Certificate issuer: /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial: 235835
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/b1008a8a1d567e1d22c0adecbc0f96c4ebe758c3.roa
Signing time: Wed 23 Aug 2023 18:47:33 +0000
ROA not before: Tue 22 Aug 2023 18:47:26 +0000
ROA not after: Sat 23 Aug 2025 18:47:26 +0000
asID: 272858
IP address blocks: 190.54.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 14:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2316341 (0x235835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Validity
Not Before: Aug 22 18:47:26 2023 GMT
Not After : Aug 23 18:47:26 2025 GMT
Subject: CN=b1008a8a1d567e1d22c0adecbc0f96c4ebe758c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:34:49:0b:1a:6e:0a:d3:d0:28:41:aa:33:04:
e4:37:25:8a:f7:6c:36:2b:0d:df:3d:34:92:e0:b4:
bd:da:20:28:bc:a3:48:ed:3e:81:a2:ff:9b:ea:cb:
b3:c5:b5:00:e8:73:a1:bc:2d:c9:fc:76:45:57:29:
58:3b:26:c6:06:9a:a0:f3:cc:75:9e:84:c1:82:cd:
ad:4d:e9:f1:22:3d:41:ae:82:7b:4f:29:5e:30:eb:
e1:dc:88:28:3b:4a:07:2e:34:0a:cd:53:9b:15:c7:
df:73:c9:e6:dc:0f:43:a7:91:78:66:2c:54:12:1e:
31:34:4d:f1:d5:40:7e:d6:1a:c1:42:67:97:3b:12:
18:4b:54:cf:0a:35:b1:22:e5:77:69:c4:e2:e9:9f:
72:9c:d4:90:90:32:d0:b5:04:c7:22:5a:6b:7f:e1:
1c:62:85:a2:16:e3:14:6e:e3:8c:2c:69:3a:50:0d:
68:40:1d:2a:e3:5f:a0:07:b6:30:6c:64:c5:39:e5:
c7:75:bd:e0:20:93:05:fc:0e:19:9f:46:7a:e2:75:
31:2f:e5:d7:82:07:0c:df:5c:b7:29:b1:9d:4a:e0:
e9:97:fd:20:b3:c9:cd:dc:e3:a9:e4:65:4d:ca:17:
92:3f:9e:40:0b:cf:75:e0:b5:bc:bd:d1:01:57:f0:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A7:E9:01:E6:D8:8C:39:86:77:61:2E:A1:A9:A1:59:0E:D6:C6:CB
X509v3 Authority Key Identifier:
keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/b1008a8a1d567e1d22c0adecbc0f96c4ebe758c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.54.6.0/24
Signature Algorithm: sha256WithRSAEncryption
28:2b:77:36:cd:ad:d1:c2:52:4c:b1:42:ef:89:e7:b5:c1:1d:
c1:a1:35:2f:cd:45:17:d3:00:cf:65:0b:5b:5d:c2:64:dc:de:
41:90:f9:1b:24:df:6c:de:00:a4:de:51:28:63:c9:83:ef:f4:
35:10:2e:7b:cc:33:59:41:9f:f9:b1:46:44:c5:74:10:e4:b1:
78:ee:1b:77:58:8c:38:cc:43:b5:51:56:c0:bb:d1:78:76:9b:
b8:26:96:aa:90:b2:b1:0f:c0:0a:1f:55:69:e7:18:df:03:c7:
81:fe:6c:2e:da:fa:2e:1f:c3:66:f1:59:df:91:70:21:de:ac:
67:06:07:68:fc:95:75:91:e1:d2:12:7d:d8:43:5a:45:90:ff:
3d:7d:b0:90:fa:c7:55:f4:21:1c:c0:d4:6a:04:13:41:76:ef:
d7:4b:2d:72:9f:5d:06:59:17:7c:c1:d1:d6:37:1f:af:15:e0:
b9:fd:91:21:7f:30:d5:bf:d3:15:eb:74:c8:8c:d4:7b:35:51:
04:a5:81:5a:be:94:0d:a0:98:4d:ee:3f:a4:ae:d0:af:df:54:
4f:1c:15:23:e9:3f:d9:61:8e:6e:24:3a:8b:c4:7c:af:3a:3e:
c7:b0:51:d4:62:ca:73:8a:70:94:ba:06:e4:a0:64:50:86:6c:
75:6f:e0:6d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI1g1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFj
NzMwY2M0ZjExNDBlOWMzYTI0Mzc2OGQxMDUyYWUyYmYzNmQyNzkwHhcNMjMwODIy
MTg0NzI2WhcNMjUwODIzMTg0NzI2WjAzMTEwLwYDVQQDEyhiMTAwOGE4YTFkNTY3
ZTFkMjJjMGFkZWNiYzBmOTZjNGViZTc1OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgDRJCxpuCtPQKEGqMwTkNyWK92w2Kw3fPTSS4LS92iAovKNI
7T6Bov+b6suzxbUA6HOhvC3J/HZFVylYOybGBpqg88x1noTBgs2tTenxIj1BroJ7
TyleMOvh3IgoO0oHLjQKzVObFcffc8nm3A9Dp5F4ZixUEh4xNE3x1UB+1hrBQmeX
OxIYS1TPCjWxIuV3acTi6Z9ynNSQkDLQtQTHIlprf+EcYoWiFuMUbuOMLGk6UA1o
QB0q41+gB7YwbGTFOeXHdb3gIJMF/A4Zn0Z64nUxL+XXggcM31y3KbGdSuDpl/0g
s8nN3OOp5GVNyheSP55AC8914LW8vdEBV/B3QQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFM2n6QHm2Iw5hndhLqGpoVkO1sbLMB8GA1UdIwQYMBaAFD2jZzfaSs3l6WtL
qUcId2SKsyUZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWM3MzBj
YzRmMTE0MGU5YzNhMjQzNzY4ZDEwNTJhZTJiZjM2ZDI3OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTFjODFlZmYtYTZjZC00MzE5LWIzYzMtZGNhODNl
ODY2ZDI1L2IxMDA4YThhMWQ1NjdlMWQyMmMwYWRlY2JjMGY5NmM0ZWJlNzU4YzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MWM4MWVmZi1hNmNkLTQzMTktYjNjMy1kY2E4
M2U4NjZkMjUvMWM3MzBjYzRmMTE0MGU5YzNhMjQzNzY4ZDEwNTJhZTJiZjM2ZDI3
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL42BjANBgkqhkiG9w0BAQsFAAOCAQEAKCt3Ns2t0cJSTLFC
74nntcEdwaE1L81FF9MAz2ULW13CZNzeQZD5GyTfbN4ApN5RKGPJg+/0NRAue8wz
WUGf+bFGRMV0EOSxeO4bd1iMOMxDtVFWwLvReHabuCaWqpCysQ/ACh9VaecY3wPH
gf5sLtr6Lh/DZvFZ35FwId6sZwYHaPyVdZHh0hJ92ENaRZD/PX2wkPrHVfQhHMDU
agQTQXbv10stcp9dBlkXfMHR1jcfrxXguf2RIX8w1b/TFet0yIzUezVRBKWBWr6U
DaCYTe4/pK7Qr99UTxwVI+k/2WGObiQ6i8R8rzo+x7BR1GLKc4pwlLoG5KBkUIZs
dW/gbQ==
-----END CERTIFICATE-----
Generated at Mon Jan 29 19:44:54 2024 by rpki-client on console-ams.rpki-client.org