Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/79e6fbff1e66ec998de85c558dec7d251388347a.roa
File: 79e6fbff1e66ec998de85c558dec7d251388347a.roa (raw, json)
Hash identifier: D2lT/YRWtp+5XIJVSpGhynqLW7Lf8LQ26wVb0aCVUjg=
Subject key identifier: F5:43:16:15:99:28:5A:4A:4D:9E:9D:F7:CA:5F:83:79:B4:08:5F:56
Certificate issuer: /CN=1b429c72865e191f13438ce54026b95b47e06113
Certificate serial: 0828B5
Authority key identifier: 62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/79e6fbff1e66ec998de85c558dec7d251388347a.roa
Signing time: Tue 05 Sep 2023 21:17:57 +0000
ROA not before: Mon 04 Sep 2023 21:17:56 +0000
ROA not after: Fri 05 Sep 2025 21:17:56 +0000
asID: 7155
IP address blocks: 189.201.228.0/24 maxlen: 24
189.201.230.0/24 maxlen: 24
189.201.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 534709 (0x828b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b429c72865e191f13438ce54026b95b47e06113
Validity
Not Before: Sep 4 21:17:56 2023 GMT
Not After : Sep 5 21:17:56 2025 GMT
Subject: CN=79e6fbff1e66ec998de85c558dec7d251388347a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:7a:f3:dc:9b:a5:b3:b4:e4:64:c2:f4:dd:
9c:37:2d:23:ce:7b:7b:e7:b6:6a:c1:07:b3:96:b6:
8c:a7:f2:6e:ab:03:45:86:d6:d4:aa:18:59:81:58:
6d:c3:dc:1b:18:2b:3e:dd:dc:d1:3c:8c:d1:f3:60:
57:60:9b:c4:5e:ad:09:75:db:0e:f0:a1:db:94:21:
61:7f:41:13:2c:37:b3:4f:d8:52:64:45:70:23:0b:
dd:21:eb:3a:7f:4d:4e:bc:1c:01:b6:6d:54:f7:68:
b1:1d:cc:cc:76:1b:a0:fe:9a:66:54:a8:53:c9:f8:
fd:73:6e:d5:e3:41:07:39:6f:86:d3:59:c3:d4:5d:
1a:82:52:23:ef:05:71:48:b0:6e:0b:65:26:e3:f8:
94:ef:27:f4:9b:ca:ac:d2:4a:74:fa:1d:64:83:3c:
87:fb:60:3e:a3:15:6f:7e:42:7d:78:cd:16:b9:29:
dc:c1:25:d4:56:3e:b8:13:22:5e:bd:fc:2f:2b:92:
c4:bd:9a:d2:1e:36:62:ba:58:59:00:89:d8:6a:2a:
95:37:1d:51:70:14:d7:a9:80:6e:68:74:75:03:80:
e9:5b:d7:63:6d:80:8b:9c:36:76:fc:b5:37:56:0a:
d6:0f:52:88:40:a0:a7:ce:cd:64:39:16:8c:32:1f:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:43:16:15:99:28:5A:4A:4D:9E:9D:F7:CA:5F:83:79:B4:08:5F:56
X509v3 Authority Key Identifier:
keyid:62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/79e6fbff1e66ec998de85c558dec7d251388347a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/1b429c72865e191f13438ce54026b95b47e06113.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.226.0/24
189.201.228.0/24
189.201.230.0/24
Signature Algorithm: sha256WithRSAEncryption
75:57:e1:aa:92:d5:ef:16:ab:35:30:a0:43:fe:46:ad:ff:4f:
2d:e3:21:a1:2b:aa:61:8b:72:ce:13:d1:2d:8f:8a:e0:0e:20:
8f:06:be:bb:d2:e1:a9:3a:e8:3f:41:12:c1:54:59:8f:09:eb:
e0:4a:d7:19:a5:45:23:50:28:d5:56:db:65:20:c1:6f:bd:ec:
04:17:3c:dd:79:ce:ce:3b:27:a7:67:9d:87:a0:a2:ed:70:43:
c7:3a:3c:22:97:9c:44:18:8e:f7:d1:76:30:55:72:5b:c0:23:
dc:88:a0:ad:32:e7:52:61:ba:b7:af:a2:f1:04:aa:f0:47:f7:
be:e0:51:4d:e6:93:b8:5f:79:10:6c:99:6a:0d:38:97:36:fc:
23:c4:a7:15:fc:66:4e:23:aa:1d:f3:df:75:bc:7c:f9:f3:87:
b2:58:17:0d:37:9e:8d:a7:28:01:aa:5d:53:f0:b1:9e:95:84:
9f:2c:8a:b4:68:6f:e0:24:5e:3e:ea:22:c2:5c:4c:83:7c:53:
82:76:bd:09:b9:51:51:8e:ff:42:66:00:9a:da:4b:6b:9a:a5:
03:88:7e:d0:56:b7:38:99:f7:6f:29:0a:7c:af:98:0a:cf:71:
18:63:69:8f:8c:81:63:cd:9e:db:31:b1:12:9a:ad:9f:bd:c5:
6c:c9:53:2e
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDCCi1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFi
NDI5YzcyODY1ZTE5MWYxMzQzOGNlNTQwMjZiOTViNDdlMDYxMTMwHhcNMjMwOTA0
MjExNzU2WhcNMjUwOTA1MjExNzU2WjAzMTEwLwYDVQQDEyg3OWU2ZmJmZjFlNjZl
Yzk5OGRlODVjNTU4ZGVjN2QyNTEzODgzNDdhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyL1689ybpbO05GTC9N2cNy0jznt757ZqwQezlraMp/JuqwNF
htbUqhhZgVhtw9wbGCs+3dzRPIzR82BXYJvEXq0JddsO8KHblCFhf0ETLDezT9hS
ZEVwIwvdIes6f01OvBwBtm1U92ixHczMdhug/ppmVKhTyfj9c27V40EHOW+G01nD
1F0aglIj7wVxSLBuC2Um4/iU7yf0m8qs0kp0+h1kgzyH+2A+oxVvfkJ9eM0WuSnc
wSXUVj64EyJevfwvK5LEvZrSHjZiulhZAInYaiqVNx1RcBTXqYBuaHR1A4DpW9dj
bYCLnDZ2/LU3VgrWD1KIQKCnzs1kORaMMh+E1QIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFPVDFhWZKFpKTZ6d98pfg3m0CF9WMB8GA1UdIwQYMBaAFGJYm8+XuBSafNRs
fZpkZycbWe+CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWI0Mjlj
NzI4NjVlMTkxZjEzNDM4Y2U1NDAyNmI5NWI0N2UwNjExMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWE4MmVlM2QtYzc1Ni00YTVjLWEzNjctOTNlMjA1
ZTMzNjQ5Lzc5ZTZmYmZmMWU2NmVjOTk4ZGU4NWM1NThkZWM3ZDI1MTM4ODM0N2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YTgyZWUzZC1jNzU2LTRhNWMtYTM2Ny05M2Uy
MDVlMzM2NDkvMWI0MjljNzI4NjVlMTkxZjEzNDM4Y2U1NDAyNmI5NWI0N2UwNjEx
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAL3J4gMEAL3J5AMEAL3J5jANBgkqhkiG9w0BAQsFAAOCAQEA
dVfhqpLV7xarNTCgQ/5Grf9PLeMhoSuqYYtyzhPRLY+K4A4gjwa+u9LhqTroP0ES
wVRZjwnr4ErXGaVFI1Ao1VbbZSDBb73sBBc83XnOzjsnp2edh6Ci7XBDxzo8Ipec
RBiO99F2MFVyW8Aj3IigrTLnUmG6t6+i8QSq8Ef3vuBRTeaTuF95EGyZag04lzb8
I8SnFfxmTiOqHfPfdbx8+fOHslgXDTeejacoAapdU/CxnpWEnyyKtGhv4CRePuoi
wlxMg3xTgna9CblRUY7/QmYAmtpLa5qlA4h+0Fa3OJn3bykKfK+YCs9xGGNpj4yB
Y82e2zGxEpqtn73FbMlTLg==
-----END CERTIFICATE-----
Generated at Tue Sep 5 23:01:51 2023 by rpki-client on console-fra.rpki-client.org