Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/01c402b982178fe60c9ebd979f0c9cb1c9fd3c5f.roa
File: 01c402b982178fe60c9ebd979f0c9cb1c9fd3c5f.roa (raw, json)
Hash identifier: chgnbObsNrKE6scVGJelPEutvGyAZ41ufm9beqJdQM8=
Subject key identifier: A6:CE:38:A5:F5:29:FB:14:62:25:7E:CC:E9:E7:8A:20:24:6F:74:D7
Certificate issuer: /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial: 1075FE
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/01c402b982178fe60c9ebd979f0c9cb1c9fd3c5f.roa
Signing time: Thu 27 Oct 2022 16:50:56 +0000
ROA not before: Sat 25 Dec 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 270026
IP address blocks: 161.22.36.0/24 maxlen: 24
161.22.33.0/24 maxlen: 24
161.22.34.0/24 maxlen: 24
161.22.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1078782 (0x1075fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Validity
Not Before: Dec 25 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=01c402b982178fe60c9ebd979f0c9cb1c9fd3c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:3a:bb:4e:3d:6b:c9:38:f6:58:c3:eb:2b:
f4:fc:4f:79:01:07:d0:73:ca:1a:3b:c2:2f:f3:92:
c0:68:c2:c8:0e:f1:15:42:42:2b:c8:80:ae:1d:64:
d0:f1:56:cd:f5:11:59:fc:84:58:97:82:08:3f:2e:
20:26:5e:07:b5:0c:d4:33:48:4b:63:48:37:93:b6:
72:ef:bb:84:e4:4c:0d:07:05:6c:ee:9e:96:69:b7:
a0:65:4c:06:04:ac:da:52:d3:44:c3:e1:13:b4:c7:
2f:a5:38:03:a5:d0:5f:3e:68:97:0e:ba:06:10:16:
8d:fc:89:d0:37:82:d3:6c:63:3e:2d:4a:d8:44:1f:
73:3a:05:a9:6b:5b:9d:e9:bf:a2:73:5b:37:4e:1d:
c3:99:33:16:a1:8d:c5:73:39:4e:6b:18:ac:10:1d:
e2:f5:91:da:00:d5:22:27:e1:6b:04:79:32:88:36:
3a:3b:db:85:a6:fe:2d:73:75:fa:2a:df:91:0f:5d:
a9:9c:27:83:17:cf:07:3d:8d:44:fd:d3:a3:5c:ff:
af:f2:af:18:e8:47:f6:22:f7:15:8f:e7:27:99:b3:
c8:d6:b5:7e:fd:b6:92:03:db:c3:c6:8b:75:cf:00:
c4:bf:07:95:4f:74:90:35:f8:a9:57:cd:ff:76:dc:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CE:38:A5:F5:29:FB:14:62:25:7E:CC:E9:E7:8A:20:24:6F:74:D7
X509v3 Authority Key Identifier:
keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/01c402b982178fe60c9ebd979f0c9cb1c9fd3c5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.33.0-161.22.36.255
Signature Algorithm: sha256WithRSAEncryption
7d:9c:02:f0:92:0d:2a:5a:ad:2a:17:8b:86:06:44:53:3b:87:
63:7d:9a:e5:dd:8e:42:e2:2a:f2:17:83:cd:62:39:67:9e:75:
4a:fb:d1:a0:8c:9f:f8:1c:7f:7a:85:be:59:08:01:cc:c2:42:
20:f7:c5:50:06:3e:c6:dd:e5:18:2e:7d:4d:42:7b:91:d3:68:
de:6a:12:88:e2:9c:82:3d:25:a8:d9:d3:1b:c2:f4:cc:49:80:
e3:10:69:b9:d6:04:35:87:6a:c5:a9:34:f8:ce:c5:42:32:f4:
cf:f4:c5:2d:2f:5f:7e:01:80:e9:db:8a:b1:ef:46:bb:cb:ed:
25:8c:21:e0:69:1f:42:7c:ed:44:e1:b0:55:57:ab:52:e6:4f:
d0:b7:cf:45:8c:4b:bb:e7:eb:f0:30:0a:2e:e3:34:99:78:37:
39:99:96:6b:fe:69:93:55:a6:b4:a7:35:bf:d6:eb:b8:fa:00:
e8:6d:c0:4e:06:7b:6d:e4:36:a9:34:70:85:83:05:3e:d2:f2:
5a:e3:c3:49:12:63:72:7e:44:72:ef:16:d8:a7:c0:59:f8:51:
36:ac:79:ec:38:f8:6b:41:d7:62:1b:a1:50:4b:74:f8:49:2d:
e8:90:ed:2e:f0:48:bf:3c:1c:ab:fb:80:31:b9:25:d7:7d:bd:
f8:93:f3:d3
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDEHX+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQw
ZjU5ZTRkMGY0ZGQ2NmQxZTgwY2I0ZmY3NmU2YWIyOTMxNzk1OTEwHhcNMjExMjI1
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygwMWM0MDJiOTgyMTc4
ZmU2MGM5ZWJkOTc5ZjBjOWNiMWM5ZmQzYzVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoZ86u049a8k49ljD6yv0/E95AQfQc8oaO8Iv85LAaMLIDvEV
QkIryICuHWTQ8VbN9RFZ/IRYl4IIPy4gJl4HtQzUM0hLY0g3k7Zy77uE5EwNBwVs
7p6WabegZUwGBKzaUtNEw+ETtMcvpTgDpdBfPmiXDroGEBaN/InQN4LTbGM+LUrY
RB9zOgWpa1ud6b+ic1s3Th3DmTMWoY3FczlOaxisEB3i9ZHaANUiJ+FrBHkyiDY6
O9uFpv4tc3X6Kt+RD12pnCeDF88HPY1E/dOjXP+v8q8Y6Ef2IvcVj+cnmbPI1rV+
/baSA9vDxot1zwDEvweVT3SQNfipV83/dtxoAwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFKbOOKX1KfsUYiV+zOnniiAkb3TXMB8GA1UdIwQYMBaAFELszKz4iWvIsP8q
dGlWz1aJC8gYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDBmNTll
NGQwZjRkZDY2ZDFlODBjYjRmZjc2ZTZhYjI5MzE3OTU5MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTA1YjY4NGMtZGQwMC00ODQxLTk5MjktMWFiNzUw
OTQ2NzliLzAxYzQwMmI5ODIxNzhmZTYwYzllYmQ5NzlmMGM5Y2IxYzlmZDNjNWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMDViNjg0Yy1kZDAwLTQ4NDEtOTkyOS0xYWI3
NTA5NDY3OWIvZDBmNTllNGQwZjRkZDY2ZDFlODBjYjRmZjc2ZTZhYjI5MzE3OTU5
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAoRYhAwQAoRYkMA0GCSqGSIb3DQEBCwUAA4IBAQB9nALw
kg0qWq0qF4uGBkRTO4djfZrl3Y5C4iryF4PNYjlnnnVK+9GgjJ/4HH96hb5ZCAHM
wkIg98VQBj7G3eUYLn1NQnuR02jeahKI4pyCPSWo2dMbwvTMSYDjEGm51gQ1h2rF
qTT4zsVCMvTP9MUtL19+AYDp24qx70a7y+0ljCHgaR9CfO1E4bBVV6tS5k/Qt89F
jEu75+vwMAou4zSZeDc5mZZr/mmTVaa0pzW/1uu4+gDobcBOBntt5DapNHCFgwU+
0vJa48NJEmNyfkRy7xbYp8BZ+FE2rHnsOPhrQddiG6FQS3T4SS3okO0u8Ei/PByr
+4AxuSXXfb34k/PT
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org