Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/196726917e797d06221f33ce11773ca09a4ebd44.roa
File: 196726917e797d06221f33ce11773ca09a4ebd44.roa (raw, json)
Hash identifier: H05tXp0oCKjRv3xazWclJ0pRtey5boT7ZkvW0rr2vIo=
Subject key identifier: 05:8B:D9:F8:D3:EC:2D:F3:CD:2D:D0:6D:E7:4D:2B:BA:21:43:7A:5A
Certificate issuer: /CN=ebff371d4ac1a6161db3e53f836c346c32163491
Certificate serial: 0642
Authority key identifier: 76:EC:53:B1:F2:E8:7D:6B:B3:F7:BB:E4:04:3E:71:EF:30:48:FE:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebff371d4ac1a6161db3e53f836c346c32163491.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/196726917e797d06221f33ce11773ca09a4ebd44.roa
Signing time: Tue 20 Apr 2021 14:44:01 +0000
ROA not before: Tue 20 Apr 2021 03:00:00 +0000
ROA not after: Thu 20 Apr 2023 03:00:00 +0000
asID: 61509
IP address blocks: 143.255.136.0/22 maxlen: 22
170.83.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1602 (0x642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebff371d4ac1a6161db3e53f836c346c32163491
Validity
Not Before: Apr 20 03:00:00 2021 GMT
Not After : Apr 20 03:00:00 2023 GMT
Subject: CN=196726917e797d06221f33ce11773ca09a4ebd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:82:d4:a5:ea:90:38:df:47:34:e0:ef:dc:
ec:8a:53:f4:3e:41:5e:3f:6e:25:93:71:a7:a5:af:
a2:b4:05:2a:55:a9:d9:fe:7e:bf:3a:1e:3d:50:ac:
bb:d2:56:81:47:25:71:7a:3f:74:5f:e6:91:8f:db:
d4:d0:98:1b:b6:f8:b4:a3:12:d3:9f:96:19:29:f6:
d8:17:e0:38:0d:8e:0c:a7:14:94:a2:51:e2:be:5e:
df:58:bb:57:0e:ef:cc:15:03:72:a7:64:ce:15:fd:
4d:a3:35:0d:a0:a7:eb:0e:2b:61:d9:9e:f0:fb:92:
de:c6:a5:be:cc:32:7f:c9:fb:28:64:fa:c1:48:0d:
aa:63:73:df:55:84:eb:1a:ad:59:32:0a:b1:fb:fc:
a8:72:e6:12:20:0f:d3:86:06:de:b1:ef:09:d1:7a:
67:76:8f:90:d7:99:68:62:6c:30:7b:8f:8c:60:cb:
56:43:62:92:ad:a9:32:6e:eb:ef:cb:67:b0:b1:5f:
05:5c:ab:7a:24:5d:4f:23:f1:6b:8c:f4:60:a5:fa:
10:1c:83:02:06:9b:7b:6a:08:6c:aa:0f:79:5b:e2:
bc:f3:c2:86:24:4e:e1:fa:1e:7b:a0:e4:64:c8:bf:
e9:81:6b:2f:ce:d8:83:c9:07:4b:87:1c:b4:2c:02:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8B:D9:F8:D3:EC:2D:F3:CD:2D:D0:6D:E7:4D:2B:BA:21:43:7A:5A
X509v3 Authority Key Identifier:
keyid:76:EC:53:B1:F2:E8:7D:6B:B3:F7:BB:E4:04:3E:71:EF:30:48:FE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebff371d4ac1a6161db3e53f836c346c32163491.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/196726917e797d06221f33ce11773ca09a4ebd44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/ebff371d4ac1a6161db3e53f836c346c32163491.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.136.0/22
170.83.32.0/22
Signature Algorithm: sha256WithRSAEncryption
50:b7:65:e7:18:d4:f6:b1:98:62:02:4e:9f:ba:c6:63:12:7e:
3b:87:f8:a2:9f:6d:4e:c0:05:17:cd:97:8e:bb:23:e3:aa:2c:
28:aa:9b:8f:48:2d:bc:eb:d3:dd:16:8e:85:b2:ac:fd:07:dd:
1c:44:3a:3d:c0:1b:e1:a5:b1:0a:88:d8:f2:e2:8d:dd:57:66:
33:d7:00:69:c9:d4:f4:22:ab:4f:67:65:dc:46:f3:ad:14:22:
30:ea:8c:29:76:e2:d1:07:4d:b5:c8:a5:e1:8e:05:04:05:71:
97:30:49:12:6a:dd:e1:08:dd:7e:6a:d6:e0:35:44:d3:0f:75:
99:17:b6:74:89:37:86:39:e0:1c:66:ac:f7:ef:4f:95:7e:20:
8c:ba:f5:4d:d7:24:ff:9a:4b:20:51:32:ce:cd:43:a4:b8:29:
49:37:21:30:4b:0f:e9:8e:07:49:53:4d:2f:b6:16:07:af:aa:
1c:08:c6:2c:ba:47:0a:ed:cd:6f:94:fe:4e:09:1c:61:80:c4:
eb:4b:4d:2d:1a:e8:1b:00:97:fd:b9:78:c9:9b:bd:7e:cb:9b:
b7:12:9c:40:de:13:96:0c:9c:b3:21:9f:61:6b:29:dd:e0:dc:
0f:ed:da:1c:57:b6:35:a3:45:6e:6f:1f:e5:54:6b:d6:ec:b3:
da:a8:ef:44
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZWJm
ZjM3MWQ0YWMxYTYxNjFkYjNlNTNmODM2YzM0NmMzMjE2MzQ5MTAeFw0yMTA0MjAw
MzAwMDBaFw0yMzA0MjAwMzAwMDBaMDMxMTAvBgNVBAMTKDE5NjcyNjkxN2U3OTdk
MDYyMjFmMzNjZTExNzczY2EwOWE0ZWJkNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzzILUpeqQON9HNODv3OyKU/Q+QV4/biWTcaelr6K0BSpVqdn+
fr86Hj1QrLvSVoFHJXF6P3Rf5pGP29TQmBu2+LSjEtOflhkp9tgX4DgNjgynFJSi
UeK+Xt9Yu1cO78wVA3KnZM4V/U2jNQ2gp+sOK2HZnvD7kt7Gpb7MMn/J+yhk+sFI
Dapjc99VhOsarVkyCrH7/Khy5hIgD9OGBt6x7wnRemd2j5DXmWhibDB7j4xgy1ZD
YpKtqTJu6+/LZ7CxXwVcq3okXU8j8WuM9GCl+hAcgwIGm3tqCGyqD3lb4rzzwoYk
TuH6Hnug5GTIv+mBay/O2IPJB0uHHLQsAv6TAgMBAAGjggJhMIICXTAdBgNVHQ4E
FgQUBYvZ+NPsLfPNLdBt500ruiFDelowHwYDVR0jBBgwFoAUduxTsfLofWuz97vk
BD5x7zBI/lwwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9lYmZmMzcx
ZDRhYzFhNjE2MWRiM2U1M2Y4MzZjMzQ2YzMyMTYzNDkxLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85Njg4MWM5NS1mYzFjLTRkZWUtODJkYi1kZmI1OWE3
MjA5YjkvMTk2NzI2OTE3ZTc5N2QwNjIyMWYzM2NlMTE3NzNjYTA5YTRlYmQ0NC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzk2ODgxYzk1LWZjMWMtNGRlZS04MmRiLWRmYjU5
YTcyMDliOS9lYmZmMzcxZDRhYzFhNjE2MWRiM2U1M2Y4MzZjMzQ2YzMyMTYzNDkx
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYw
FDASBAIAATAMAwQCj/+IAwQCqlMgMA0GCSqGSIb3DQEBCwUAA4IBAQBQt2XnGNT2
sZhiAk6fusZjEn47h/iin21OwAUXzZeOuyPjqiwoqpuPSC2869PdFo6Fsqz9B90c
RDo9wBvhpbEKiNjy4o3dV2Yz1wBpydT0IqtPZ2XcRvOtFCIw6owpduLRB021yKXh
jgUEBXGXMEkSat3hCN1+atbgNUTTD3WZF7Z0iTeGOeAcZqz370+VfiCMuvVN1yT/
mksgUTLOzUOkuClJNyEwSw/pjgdJU00vthYHr6ocCMYsukcK7c1vlP5OCRxhgMTr
S00tGugbAJf9uXjJm71+y5u3EpxA3hOWDJyzIZ9haynd4NwP7docV7Y1o0Vubx/l
VGvW7LPaqO9E
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org