Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/8af55b158371f5bad1ee974d54f43315edbf240b.roa
File: 8af55b158371f5bad1ee974d54f43315edbf240b.roa (raw, json)
Hash identifier: kDCRmT5K/W4xk2m7qu6yXqe9DsdBV2O/9CnP0uArazw=
Subject key identifier: 18:96:33:6B:95:E6:2E:ED:4E:51:67:8C:50:B6:9C:CD:74:12:00:02
Certificate issuer: /CN=703bede159efdf3fd85e6b49bded6c79dc525307
Certificate serial: 0DAA0E
Authority key identifier: 79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/8af55b158371f5bad1ee974d54f43315edbf240b.roa
Signing time: Wed 24 Mar 2021 14:47:31 +0000
ROA not before: Wed 24 Mar 2021 14:47:30 +0000
ROA not after: Tue 24 Mar 2026 14:47:30 +0000
asID: 27807
IP address blocks: 150.185.0.0/16 maxlen: 16
150.186.0.0/15 maxlen: 16
150.188.0.0/15 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895502 (0xdaa0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703bede159efdf3fd85e6b49bded6c79dc525307
Validity
Not Before: Mar 24 14:47:30 2021 GMT
Not After : Mar 24 14:47:30 2026 GMT
Subject: CN=8af55b158371f5bad1ee974d54f43315edbf240b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:f8:83:ca:9c:b6:ae:a7:57:34:14:af:a3:
4f:c6:1b:28:b2:e4:73:20:71:50:e7:1a:88:6a:03:
28:03:d4:61:66:d4:9b:57:62:29:84:20:53:53:97:
75:da:c0:05:ee:6d:1e:bb:d5:b9:fc:56:31:85:12:
39:de:07:8e:fe:bc:06:ef:a6:dd:c4:69:50:ab:65:
d3:03:03:f8:c2:1a:26:92:f8:c1:b8:ab:c9:f2:f4:
83:d3:ba:15:ac:1e:99:7f:7e:47:ea:6d:01:e7:9a:
58:86:4a:29:1a:ae:fb:e8:ba:71:6b:d6:b7:cc:8b:
ee:b6:dd:14:2c:ad:a5:23:ca:aa:fd:33:3a:91:90:
72:2d:5a:26:cd:2e:8f:d7:e8:bf:81:9c:70:eb:d6:
06:45:cf:d7:3e:06:07:c8:a2:f3:bb:41:c4:60:78:
0e:c5:c5:81:02:1a:56:36:cf:a7:be:87:33:71:88:
9a:40:e5:41:71:a4:8e:d9:4e:6e:cb:e0:2c:d5:af:
13:05:36:e4:64:46:7f:33:17:70:94:36:84:0c:54:
46:8f:6a:b3:cf:89:2e:1d:91:da:b2:d6:95:41:b5:
1b:fc:5d:fc:d0:57:19:ef:e8:a0:66:05:0b:bb:b4:
82:25:e9:34:29:ee:6d:e6:18:ee:fe:11:85:d6:76:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:96:33:6B:95:E6:2E:ED:4E:51:67:8C:50:B6:9C:CD:74:12:00:02
X509v3 Authority Key Identifier:
keyid:79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/8af55b158371f5bad1ee974d54f43315edbf240b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/703bede159efdf3fd85e6b49bded6c79dc525307.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.185.0.0-150.189.255.255
Signature Algorithm: sha256WithRSAEncryption
3c:7d:63:9e:50:57:16:e2:48:9c:fb:25:59:f9:fe:86:8e:e3:
dc:fc:0c:a1:7a:50:3a:a0:66:f6:9f:5b:1c:09:55:d7:9c:9e:
ea:e5:5d:7b:f4:32:16:9c:08:86:0c:8b:90:b6:96:f1:96:a2:
56:22:6c:75:a4:cd:dd:ea:05:cf:59:81:d9:dc:c7:14:f0:bb:
5d:2a:00:6f:80:ad:a1:e5:47:df:25:1b:39:ea:ca:ae:18:3b:
07:e7:2b:bd:ea:d1:b7:49:c4:63:4b:23:2d:2e:81:61:3e:0c:
a0:b0:55:54:de:70:e3:21:cc:ed:de:12:b7:fe:95:6d:52:ac:
c1:49:d1:b8:36:de:b7:9b:73:a0:6e:b0:f1:aa:6a:ad:bf:12:
4a:d5:37:5c:47:95:08:33:eb:e4:1d:f2:06:a2:41:94:dd:08:
43:7a:6e:51:55:87:41:cd:5d:56:02:9a:06:de:de:ee:67:68:
8a:53:23:60:86:de:e7:7e:35:c7:a0:e9:d9:7f:41:70:9b:dc:
a3:ec:78:03:da:e0:8c:3d:d7:b1:12:b1:65:4a:f0:74:dc:57:
b6:6c:86:35:93:f6:9e:3a:13:93:64:7c:b4:3e:df:fe:6c:99:
b6:ce:bf:87:b5:d6:46:6f:ae:a0:4b:90:98:b4:8b:14:23:f9:
e7:cf:26:76
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDDaoOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
M2JlZGUxNTllZmRmM2ZkODVlNmI0OWJkZWQ2Yzc5ZGM1MjUzMDcwHhcNMjEwMzI0
MTQ0NzMwWhcNMjYwMzI0MTQ0NzMwWjAzMTEwLwYDVQQDEyg4YWY1NWIxNTgzNzFm
NWJhZDFlZTk3NGQ1NGY0MzMxNWVkYmYyNDBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArWP4g8qctq6nVzQUr6NPxhsosuRzIHFQ5xqIagMoA9RhZtSb
V2IphCBTU5d12sAF7m0eu9W5/FYxhRI53geO/rwG76bdxGlQq2XTAwP4whomkvjB
uKvJ8vSD07oVrB6Zf35H6m0B55pYhkopGq776Lpxa9a3zIvutt0ULK2lI8qq/TM6
kZByLVomzS6P1+i/gZxw69YGRc/XPgYHyKLzu0HEYHgOxcWBAhpWNs+nvoczcYia
QOVBcaSO2U5uy+As1a8TBTbkZEZ/MxdwlDaEDFRGj2qzz4kuHZHastaVQbUb/F38
0FcZ7+igZgULu7SCJek0Ke5t5hju/hGF1nYchwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFBiWM2uV5i7tTlFnjFC2nM10EgACMB8GA1UdIwQYMBaAFHmsn71HO0C8BtDw
US5CTe1rKogpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzAzYmVk
ZTE1OWVmZGYzZmQ4NWU2YjQ5YmRlZDZjNzlkYzUyNTMwNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWI2YmMxNTAtZGVmYi00MTlhLWFhYTEtYTVhMzU5
NTQyYTg1LzhhZjU1YjE1ODM3MWY1YmFkMWVlOTc0ZDU0ZjQzMzE1ZWRiZjI0MGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YjZiYzE1MC1kZWZiLTQxOWEtYWFhMS1hNWEz
NTk1NDJhODUvNzAzYmVkZTE1OWVmZGYzZmQ4NWU2YjQ5YmRlZDZjNzlkYzUyNTMw
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDDAKAwMAlrkDAwGWvDANBgkqhkiG9w0BAQsFAAOCAQEAPH1jnlBX
FuJInPslWfn+ho7j3PwMoXpQOqBm9p9bHAlV15ye6uVde/QyFpwIhgyLkLaW8Zai
ViJsdaTN3eoFz1mB2dzHFPC7XSoAb4CtoeVH3yUbOerKrhg7B+crverRt0nEY0sj
LS6BYT4MoLBVVN5w4yHM7d4St/6VbVKswUnRuDbet5tzoG6w8apqrb8SStU3XEeV
CDPr5B3yBqJBlN0IQ3puUVWHQc1dVgKaBt7e7mdoilMjYIbe5341x6Dp2X9BcJvc
o+x4A9rgjD3XsRKxZUrwdNxXtmyGNZP2njoTk2R8tD7f/myZts6/h7XWRm+uoEuQ
mLSLFCP5588mdg==
-----END CERTIFICATE-----
Generated at Mon Sep 25 16:21:50 2023 by rpki-client on console-ams.rpki-client.org