Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f503186b374368e0153aea86e2ee4e1a533b9835.roa
File: f503186b374368e0153aea86e2ee4e1a533b9835.roa (raw, json)
Hash identifier: yH+F7PMD/LrZjIPkTy02I/fSbWY5vexuA+Eu2T4H3Xg=
Subject key identifier: 32:DD:77:60:D6:B0:4D:25:93:54:DC:0F:5B:42:E9:70:BF:D8:C4:62
Certificate issuer: /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial: 0E7E54
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f503186b374368e0153aea86e2ee4e1a533b9835.roa
Signing time: Wed 24 Mar 2021 14:29:29 +0000
ROA not before: Wed 24 Mar 2021 14:29:26 +0000
ROA not after: Tue 24 Mar 2026 14:29:26 +0000
asID: 52323
IP address blocks: 181.16.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949844 (0xe7e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Validity
Not Before: Mar 24 14:29:26 2021 GMT
Not After : Mar 24 14:29:26 2026 GMT
Subject: CN=f503186b374368e0153aea86e2ee4e1a533b9835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:44:1b:d3:ba:67:42:aa:10:12:d3:46:a8:
88:ef:24:69:9c:40:90:31:ee:23:18:7d:d2:3e:11:
70:1c:32:53:3a:7a:85:77:9a:43:7b:1a:63:55:7a:
07:41:96:03:01:ec:6d:39:78:ae:b9:bf:63:71:eb:
ec:79:72:b3:14:d9:30:30:34:cd:cc:ba:c6:85:fd:
03:89:a8:85:75:b6:ec:db:7b:05:3c:f8:33:43:9f:
fc:fc:74:dd:92:1e:03:25:ed:cb:4f:19:a4:d1:b7:
53:7e:5b:3d:36:a5:18:41:e8:f4:dd:bf:f4:43:e2:
52:fb:7b:e6:4c:40:2f:5a:c7:9c:35:bb:60:dd:5d:
4e:3b:79:a2:b2:c7:4c:72:47:9d:88:20:26:39:8e:
79:40:bf:72:7b:e7:d1:90:a9:f4:8a:d6:a8:71:2c:
1c:6b:77:29:9c:3d:47:e8:a9:8c:a9:b6:87:4c:21:
87:2f:05:40:a4:d7:fc:8b:f6:67:bb:92:39:31:88:
a1:ad:d9:19:96:08:3f:7e:56:c9:af:12:3d:1e:f4:
04:c5:4d:83:d0:1c:9c:9a:29:67:70:a3:05:15:cd:
b2:6f:9b:a4:90:26:7f:98:cf:fb:c8:48:4f:ac:b3:
0f:ad:9b:84:da:5a:e9:4d:f8:b1:c0:31:09:53:e3:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DD:77:60:D6:B0:4D:25:93:54:DC:0F:5B:42:E9:70:BF:D8:C4:62
X509v3 Authority Key Identifier:
keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f503186b374368e0153aea86e2ee4e1a533b9835.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.16.192.0/24
Signature Algorithm: sha256WithRSAEncryption
64:69:c2:15:22:c8:b0:72:03:f2:67:8c:d5:56:ab:40:12:a8:
39:bd:21:fc:da:36:8d:1e:10:44:f9:16:9d:c7:ba:c2:54:f2:
02:70:1d:6a:07:96:79:11:76:40:97:67:6c:ac:e9:e1:83:6b:
2e:d8:d8:38:56:24:16:6b:54:26:76:af:f3:a4:4e:f8:22:54:
72:78:de:c6:6b:0a:dd:60:07:20:71:c6:a3:96:25:57:75:e8:
7c:43:47:9e:71:78:dd:ff:a6:4c:2c:50:ad:0b:50:cd:a3:b8:
a7:1d:b7:38:5e:02:62:c1:75:9d:3f:28:12:87:d8:0c:09:07:
56:98:d2:5d:0d:cd:9e:67:0f:7d:d0:34:52:96:b3:33:fc:5c:
0d:77:57:29:77:41:a7:04:f5:48:6e:ba:37:2b:7d:cc:04:6c:
a6:96:64:5e:ba:13:5b:3b:93:90:97:6c:9d:98:73:07:53:0a:
93:b7:42:fc:06:41:36:7c:d0:09:96:75:d4:f4:16:01:98:5b:
0a:b3:1a:1d:56:89:8f:d5:a3:d8:19:70:a5:e0:b6:44:d1:a9:
fd:7f:24:ff:15:9e:12:bb:5a:4f:2c:b8:99:0e:3b:f4:cb:09:
d9:30:4c:31:2a:fb:f2:6e:91:8e:77:34:78:d1:37:ce:96:c9:
3f:f7:a4:89
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDn5UMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjEwMzI0
MTQyOTI2WhcNMjYwMzI0MTQyOTI2WjAzMTEwLwYDVQQDEyhmNTAzMTg2YjM3NDM2
OGUwMTUzYWVhODZlMmVlNGUxYTUzM2I5ODM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoSBEG9O6Z0KqEBLTRqiI7yRpnECQMe4jGH3SPhFwHDJTOnqF
d5pDexpjVXoHQZYDAextOXiuub9jcevseXKzFNkwMDTNzLrGhf0DiaiFdbbs23sF
PPgzQ5/8/HTdkh4DJe3LTxmk0bdTfls9NqUYQej03b/0Q+JS+3vmTEAvWsecNbtg
3V1OO3missdMckediCAmOY55QL9ye+fRkKn0itaocSwca3cpnD1H6KmMqbaHTCGH
LwVApNf8i/Znu5I5MYihrdkZlgg/flbJrxI9HvQExU2D0BycmilncKMFFc2yb5uk
kCZ/mM/7yEhPrLMPrZuE2lrpTfixwDEJU+MmIQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDLdd2DWsE0lk1TcD1tC6XC/2MRiMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3L2Y1MDMxODZiMzc0MzY4ZTAxNTNhZWE4NmUyZWU0ZTFhNTMzYjk4MzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQwDANBgkqhkiG9w0BAQsFAAOCAQEAZGnCFSLIsHID8meM
1VarQBKoOb0h/No2jR4QRPkWnce6wlTyAnAdageWeRF2QJdnbKzp4YNrLtjYOFYk
FmtUJnav86RO+CJUcnjexmsK3WAHIHHGo5YlV3XofENHnnF43f+mTCxQrQtQzaO4
px23OF4CYsF1nT8oEofYDAkHVpjSXQ3NnmcPfdA0UpazM/xcDXdXKXdBpwT1SG66
Nyt9zARsppZkXroTWzuTkJdsnZhzB1MKk7dC/AZBNnzQCZZ11PQWAZhbCrMaHVaJ
j9Wj2BlwpeC2RNGp/X8k/xWeErtaTyy4mQ479MsJ2TBMMSr78m6Rjnc0eNE3zpbJ
P/ekiQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org