Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/b1f08059026419c0dc7db7799a8c452c89e3a0e2.roa
File: b1f08059026419c0dc7db7799a8c452c89e3a0e2.roa (raw, json)
Hash identifier: HTPqy29fro2WXhfIH81O/2Clp2cFL1oX7Hhdc8Z4CJo=
Subject key identifier: D4:DF:5B:F3:4B:E5:E5:78:88:C4:E6:2F:27:58:B2:63:CA:81:51:5A
Certificate issuer: /CN=1b429c72865e191f13438ce54026b95b47e06113
Certificate serial: 3FC0
Authority key identifier: 62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/b1f08059026419c0dc7db7799a8c452c89e3a0e2.roa
Signing time: Sat 15 Oct 2022 16:56:57 +0000
ROA not before: Sun 09 Oct 2022 14:19:50 +0000
ROA not after: Fri 11 Oct 2024 14:19:50 +0000
asID: 28415
IP address blocks: 189.201.224.0/24 maxlen: 24
189.201.225.0/24 maxlen: 24
189.201.227.0/24 maxlen: 24
189.201.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16320 (0x3fc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b429c72865e191f13438ce54026b95b47e06113
Validity
Not Before: Oct 9 14:19:50 2022 GMT
Not After : Oct 11 14:19:50 2024 GMT
Subject: CN=b1f08059026419c0dc7db7799a8c452c89e3a0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:e4:3f:23:9a:9c:81:9d:00:be:75:f1:84:
ee:c1:5a:a2:82:82:1e:2a:af:02:49:ab:b0:f0:fd:
dc:0e:c9:ed:b1:1a:e6:b5:8d:7d:93:c9:2d:ea:35:
a2:10:72:61:76:75:a8:95:c8:9e:3a:f9:5e:32:fd:
13:91:a0:db:85:15:a9:bd:31:ff:aa:e6:73:c8:62:
2c:34:1a:7e:e8:3d:0c:18:b4:fb:cd:bb:ba:ec:68:
06:77:ea:02:a3:1f:da:04:0e:38:1c:a2:34:45:2d:
5b:a1:96:4b:5d:f1:2b:bc:d7:02:c4:76:63:9e:cf:
a1:e9:a1:51:44:de:57:3d:9f:97:bb:c8:7b:37:c9:
27:1f:e1:eb:dd:11:0a:04:6c:bc:8c:20:bb:6e:e1:
64:77:55:4a:2c:89:b3:12:8c:71:f2:1e:40:dc:66:
2d:f2:e2:ed:80:b2:41:30:68:70:e7:bd:6c:e9:a6:
c2:a7:ed:51:5e:92:4b:97:cf:ae:28:33:e6:67:f9:
c7:2f:9c:dd:dd:c9:a5:1e:88:1f:24:ff:29:b1:12:
e3:90:f4:ac:79:95:96:7c:51:1a:10:39:34:50:41:
c2:9d:75:d2:b1:13:e6:cd:23:08:f3:64:33:8c:92:
ae:ab:ee:51:32:fd:2b:93:6d:e5:be:f8:a8:a3:34:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DF:5B:F3:4B:E5:E5:78:88:C4:E6:2F:27:58:B2:63:CA:81:51:5A
X509v3 Authority Key Identifier:
keyid:62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/b1f08059026419c0dc7db7799a8c452c89e3a0e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/1b429c72865e191f13438ce54026b95b47e06113.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.224.0/23
189.201.227.0/24
189.201.231.0/24
Signature Algorithm: sha256WithRSAEncryption
13:66:37:aa:7b:96:49:c3:42:a3:42:f2:41:9b:0b:25:ed:9b:
00:3f:2a:5f:32:ab:38:14:11:d7:f7:65:4b:8e:c1:aa:06:bb:
78:b3:cd:85:e2:6f:36:04:41:9e:44:b2:4d:5e:19:91:3a:9e:
80:8f:95:33:35:21:8c:ff:9e:c2:a5:51:cc:96:b9:ca:f5:81:
01:d7:74:d1:14:e5:56:cb:d6:29:21:77:d0:5c:ae:47:93:f2:
dd:09:4c:22:a3:f2:40:76:a3:9f:b8:1c:cf:a1:61:aa:66:e2:
1f:6e:c0:f2:10:31:39:a3:16:2c:74:fc:33:4e:be:79:e2:bd:
fd:01:3d:eb:cc:5f:51:0d:30:d9:bf:c7:96:ba:8a:07:de:cd:
a7:77:62:f6:4d:08:0c:a3:83:77:99:9f:4e:ab:d9:d6:39:20:
28:53:5d:ea:fa:89:6c:a7:62:11:82:df:52:25:2d:ce:84:e9:
d3:2d:af:ec:b4:a1:1a:81:12:c1:24:42:22:28:1b:23:b5:03:
c7:43:1a:08:58:14:a9:1e:97:37:dd:7c:0e:8a:56:d0:ac:4a:
75:25:5c:69:ac:1f:2d:3b:02:d1:1f:6d:fe:eb:c8:c5:11:11:
72:ae:a4:b0:7c:2b:e3:60:0e:10:ca:59:03:42:b0:3e:59:bc:
2a:6d:bd:7c
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICP8AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMWI0
MjljNzI4NjVlMTkxZjEzNDM4Y2U1NDAyNmI5NWI0N2UwNjExMzAeFw0yMjEwMDkx
NDE5NTBaFw0yNDEwMTExNDE5NTBaMDMxMTAvBgNVBAMTKGIxZjA4MDU5MDI2NDE5
YzBkYzdkYjc3OTlhOGM0NTJjODllM2EwZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwIeQ/I5qcgZ0AvnXxhO7BWqKCgh4qrwJJq7Dw/dwOye2xGua1
jX2TyS3qNaIQcmF2daiVyJ46+V4y/RORoNuFFam9Mf+q5nPIYiw0Gn7oPQwYtPvN
u7rsaAZ36gKjH9oEDjgcojRFLVuhlktd8Su81wLEdmOez6HpoVFE3lc9n5e7yHs3
yScf4evdEQoEbLyMILtu4WR3VUosibMSjHHyHkDcZi3y4u2AskEwaHDnvWzppsKn
7VFekkuXz64oM+Zn+ccvnN3dyaUeiB8k/ymxEuOQ9Kx5lZZ8URoQOTRQQcKdddKx
E+bNIwjzZDOMkq6r7lEy/SuTbeW++KijNChpAgMBAAGjggJnMIICYzAdBgNVHQ4E
FgQU1N9b80vl5XiIxOYvJ1iyY8qBUVowHwYDVR0jBBgwFoAUYlibz5e4FJp81Gx9
mmRnJxtZ74IwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8xYjQyOWM3
Mjg2NWUxOTFmMTM0MzhjZTU0MDI2Yjk1YjQ3ZTA2MTEzLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85YTgyZWUzZC1jNzU2LTRhNWMtYTM2Ny05M2UyMDVl
MzM2NDkvYjFmMDgwNTkwMjY0MTljMGRjN2RiNzc5OWE4YzQ1MmM4OWUzYTBlMi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzlhODJlZTNkLWM3NTYtNGE1Yy1hMzY3LTkzZTIw
NWUzMzY0OS8xYjQyOWM3Mjg2NWUxOTFmMTM0MzhjZTU0MDI2Yjk1YjQ3ZTA2MTEz
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBww
GjAYBAIAATASAwQBvcngAwQAvcnjAwQAvcnnMA0GCSqGSIb3DQEBCwUAA4IBAQAT
Zjeqe5ZJw0KjQvJBmwsl7ZsAPypfMqs4FBHX92VLjsGqBrt4s82F4m82BEGeRLJN
XhmROp6Aj5UzNSGM/57CpVHMlrnK9YEB13TRFOVWy9YpIXfQXK5Hk/LdCUwio/JA
dqOfuBzPoWGqZuIfbsDyEDE5oxYsdPwzTr554r39AT3rzF9RDTDZv8eWuooH3s2n
d2L2TQgMo4N3mZ9Oq9nWOSAoU13q+olsp2IRgt9SJS3OhOnTLa/stKEagRLBJEIi
KBsjtQPHQxoIWBSpHpc33XwOilbQrEp1JVxprB8tOwLRH23+68jFERFyrqSwfCvj
YA4QylkDQrA+Wbwqbb18
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org