Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/e98de5cd4ec9dca3ac1ab640710f91cf810c4032.roa
File: e98de5cd4ec9dca3ac1ab640710f91cf810c4032.roa (raw, json)
Hash identifier: GU6WEHW8bip6EaewRVvy77We2b2EC0DVKTDdoCV4c+U=
Subject key identifier: 94:3B:33:3A:36:48:64:1D:66:AD:05:6B:86:2E:C9:EE:85:A5:B6:B7
Certificate issuer: /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial: 1866E7
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/e98de5cd4ec9dca3ac1ab640710f91cf810c4032.roa
Signing time: Wed 10 Aug 2022 23:05:32 +0000
ROA not before: Wed 10 Aug 2022 23:04:53 +0000
ROA not after: Sat 10 Aug 2024 23:04:53 +0000
asID: 271842
IP address blocks: 201.218.133.0/24 maxlen: 24
201.218.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1599207 (0x1866e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Validity
Not Before: Aug 10 23:04:53 2022 GMT
Not After : Aug 10 23:04:53 2024 GMT
Subject: CN=e98de5cd4ec9dca3ac1ab640710f91cf810c4032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:b0:52:90:2b:33:4c:fa:75:bd:3f:4c:53:
4e:25:f3:4d:46:23:78:23:9c:9d:04:3e:15:6f:63:
ce:3e:36:9f:fd:12:08:8e:32:15:b3:20:e9:bc:25:
c2:f7:d4:07:3c:f5:55:46:6d:37:20:a2:74:e9:f7:
9e:31:7e:79:e9:63:2c:67:ef:12:14:80:98:8a:84:
ac:05:cb:9b:09:15:07:bc:ca:1f:cd:12:e0:1e:b1:
76:36:ae:2a:13:ca:2c:13:c3:c3:b8:28:2f:ce:98:
63:f3:d1:47:8a:8c:70:44:31:ba:64:6c:9f:af:85:
0c:f5:58:da:05:05:39:27:c9:7a:8b:4a:f5:f7:bf:
26:6d:0f:0d:7a:73:0f:a9:a1:ee:9c:54:4c:41:1d:
c4:ff:4b:97:7a:3e:ef:d2:86:47:f3:6f:3d:80:b2:
c7:3d:1e:65:9e:53:5f:7c:b6:56:a0:61:83:21:bb:
25:62:41:38:47:97:f8:84:d3:52:3c:90:12:67:71:
45:f3:bb:0a:e0:06:1a:30:14:53:bf:7a:e3:c0:6b:
69:3d:78:a4:6d:0f:51:44:05:aa:0f:f4:f7:af:be:
d9:a4:49:dc:2b:be:fe:7f:01:c6:b8:32:05:93:6e:
5e:11:f0:93:08:4e:b4:d7:bc:d2:ed:15:61:7e:a2:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3B:33:3A:36:48:64:1D:66:AD:05:6B:86:2E:C9:EE:85:A5:B6:B7
X509v3 Authority Key Identifier:
keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/e98de5cd4ec9dca3ac1ab640710f91cf810c4032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.133.0/24
201.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ff:b5:27:05:03:96:5c:b5:81:47:1b:94:cd:55:6b:d1:c1:
23:5f:aa:95:c5:c6:a8:39:8c:3e:d4:14:f6:15:10:97:4b:49:
bf:0a:c3:4d:67:61:c6:94:ff:97:cb:05:65:ce:b7:94:ad:38:
1f:d5:4b:cd:ac:46:a5:27:80:0c:b2:2c:dc:6f:1a:6c:00:f6:
22:68:e0:6d:df:21:23:ab:bd:c6:41:cf:fe:ee:d2:0f:ad:38:
ce:91:11:58:17:f6:5c:04:dd:f3:b6:14:52:c0:2b:49:13:f0:
7b:8c:32:12:91:5d:d8:d2:8b:99:6c:13:68:b2:bd:66:51:55:
99:5c:9c:8f:00:c8:0d:32:f8:51:83:7b:13:4c:05:17:48:a5:
4d:82:81:2f:a0:a9:7b:62:6d:ee:5f:24:29:56:f2:5b:d9:79:
8d:f7:2d:ac:7c:a9:c3:b6:1b:40:63:ae:31:df:8c:e2:69:c6:
cd:d5:82:8b:91:91:93:09:17:de:4c:ea:0a:8f:c7:37:39:dc:
f6:a3:66:4b:93:0a:a3:f7:7a:65:f0:b9:21:12:26:d6:60:39:
f1:5f:44:c5:aa:da:c6:2e:c0:f0:e4:31:2e:7e:1a:90:8b:28:
2e:6f:75:23:c2:d9:d5:4e:c2:53:ed:43:4e:ba:41:68:da:98:
d2:9a:c5:d5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDGGbnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
MzI2MjNiMzNlMDRmYWRjMWFmODBmY2NmNmQxMmFhYmJjZmJmYTUwHhcNMjIwODEw
MjMwNDUzWhcNMjQwODEwMjMwNDUzWjAzMTEwLwYDVQQDEyhlOThkZTVjZDRlYzlk
Y2EzYWMxYWI2NDA3MTBmOTFjZjgxMGM0MDMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnEuwUpArM0z6db0/TFNOJfNNRiN4I5ydBD4Vb2POPjaf/RII
jjIVsyDpvCXC99QHPPVVRm03IKJ06feeMX556WMsZ+8SFICYioSsBcubCRUHvMof
zRLgHrF2Nq4qE8osE8PDuCgvzphj89FHioxwRDG6ZGyfr4UM9VjaBQU5J8l6i0r1
978mbQ8NenMPqaHunFRMQR3E/0uXej7v0oZH8289gLLHPR5lnlNffLZWoGGDIbsl
YkE4R5f4hNNSPJASZ3FF87sK4AYaMBRTv3rjwGtpPXikbQ9RRAWqD/T3r77ZpEnc
K77+fwHGuDIFk25eEfCTCE6017zS7RVhfqI7dQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFJQ7Mzo2SGQdZq0Fa4Yuye6Fpba3MB8GA1UdIwQYMBaAFH49PYRaISZ7nH72
VKhTBe2GfukbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQzMjYy
M2IzM2UwNGZhZGMxYWY4MGZjY2Y2ZDEyYWFiYmNmYmZhNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTc3ZDNkMzUtYmJlYy00Y2FkLWEwYzUtMDYwN2Ey
OWUxZjBmL2U5OGRlNWNkNGVjOWRjYTNhYzFhYjY0MDcxMGY5MWNmODEwYzQwMzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NzdkM2QzNS1iYmVjLTRjYWQtYTBjNS0wNjA3
YTI5ZTFmMGYvNWQzMjYyM2IzM2UwNGZhZGMxYWY4MGZjY2Y2ZDEyYWFiYmNmYmZh
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAMnahQMEAMnaizANBgkqhkiG9w0BAQsFAAOCAQEAj/+1JwUD
lly1gUcblM1Va9HBI1+qlcXGqDmMPtQU9hUQl0tJvwrDTWdhxpT/l8sFZc63lK04
H9VLzaxGpSeADLIs3G8abAD2Imjgbd8hI6u9xkHP/u7SD604zpERWBf2XATd87YU
UsArSRPwe4wyEpFd2NKLmWwTaLK9ZlFVmVycjwDIDTL4UYN7E0wFF0ilTYKBL6Cp
e2Jt7l8kKVbyW9l5jfctrHypw7YbQGOuMd+M4mnGzdWCi5GRkwkX3kzqCo/HNznc
9qNmS5MKo/d6ZfC5IRIm1mA58V9Exaraxi7A8OQxLn4akIsoLm91I8LZ1U7CU+1D
TrpBaNqY0prF1Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org