Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/5c4f33ce850a768076ceba7bccbb5ea45443afeb.roa
File: 5c4f33ce850a768076ceba7bccbb5ea45443afeb.roa (raw, json)
Hash identifier: sqBrrckyA3stPHKitdQLjjKDz3sQKFzsxFGp0o9O4ek=
Subject key identifier: EC:D7:2B:31:26:EC:D9:48:71:9D:4C:55:7B:F7:5E:5D:C3:6F:FA:BA
Certificate issuer: /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial: 0A0589
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/5c4f33ce850a768076ceba7bccbb5ea45443afeb.roa
Signing time: Wed 24 Mar 2021 14:43:17 +0000
ROA not before: Wed 24 Mar 2021 14:43:16 +0000
ROA not after: Tue 24 Mar 2026 14:43:16 +0000
asID: 18734
IP address blocks: 200.33.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656777 (0xa0589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Validity
Not Before: Mar 24 14:43:16 2021 GMT
Not After : Mar 24 14:43:16 2026 GMT
Subject: CN=5c4f33ce850a768076ceba7bccbb5ea45443afeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:f3:4e:d2:97:37:16:b9:33:5a:d9:11:fb:
a0:fc:7f:0e:40:1b:2d:8c:77:3c:6a:ed:fe:e3:b0:
f9:d3:99:cd:64:57:ac:ed:b7:3e:b3:88:79:fd:f3:
af:86:18:74:6c:a3:8d:7c:3f:71:8e:64:15:b2:1a:
00:7e:73:2b:58:71:49:c8:13:19:4b:83:c9:b9:1b:
2c:dd:5e:56:74:50:0a:79:c4:6e:a1:fb:05:3a:f6:
de:17:dc:5b:9d:09:38:c6:8c:e8:2b:0c:b4:10:6e:
b8:c0:d9:e9:70:c2:5e:60:7f:19:44:76:b1:80:2d:
95:8b:b0:3f:cb:f9:06:ca:9a:c5:68:50:d8:ea:5d:
d8:63:83:7e:85:5e:f7:e3:7d:ca:6a:52:45:b9:1a:
5d:22:a2:13:53:44:1c:a7:29:a6:16:ab:f8:28:bb:
b3:6c:e7:ed:7a:b4:dc:20:c7:d9:f2:55:39:72:94:
46:5e:33:fb:80:39:35:98:bd:02:09:7b:6c:d3:58:
61:ef:e1:c8:13:be:67:0c:1f:b8:68:58:62:23:53:
62:f5:d5:9b:83:8d:ec:4f:dd:fc:a4:2b:10:a7:75:
5e:fa:f0:e4:96:7e:d7:ed:65:4a:2c:00:8c:6f:a6:
98:74:0d:c4:74:08:5a:3b:22:f6:1e:d4:73:57:a7:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D7:2B:31:26:EC:D9:48:71:9D:4C:55:7B:F7:5E:5D:C3:6F:FA:BA
X509v3 Authority Key Identifier:
keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/5c4f33ce850a768076ceba7bccbb5ea45443afeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.84.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f5:2f:a6:3a:ef:d7:a6:b5:08:88:87:33:45:96:b4:d3:dc:
dc:e8:72:49:b0:fd:5e:da:9e:1c:31:1a:1b:f6:b9:46:c9:d0:
32:b1:a4:47:ee:a5:c4:9d:62:f4:b9:ab:15:5f:a1:5f:9f:0d:
df:c7:e2:a6:ba:1f:b0:62:2c:fa:ec:0f:2f:39:e4:4f:d5:a3:
93:49:8c:1a:92:28:0f:d4:b5:a4:25:d9:18:05:d6:1d:90:c1:
8f:43:9d:47:5a:d6:8f:bd:f6:ef:71:d8:d1:b9:24:75:39:d9:
85:ac:a8:39:54:87:c3:48:c7:5d:75:06:a7:24:94:c4:9e:48:
36:47:a1:ba:be:cc:77:ae:e5:07:ef:e1:46:66:7b:e3:5a:f2:
06:57:f2:73:65:3e:9c:d8:96:0c:52:72:40:ac:80:64:f8:1b:
7e:e9:a0:4f:35:0c:7e:13:34:d1:1e:83:a9:8d:6b:86:38:93:
67:3f:17:14:40:70:ea:9f:74:82:89:d9:f0:60:10:f2:e0:36:
26:22:90:0e:9e:84:c6:60:23:63:06:57:2b:5c:a8:06:bd:6c:
e3:6a:ea:07:6f:66:46:2a:8d:99:bc:2d:68:12:b8:9d:8b:67:
9d:34:7b:f4:b0:19:cb:a4:fa:c7:9d:d5:42:01:8f:31:cc:02:
5a:fd:c9:ef
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCgWJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk3
ODNhYzliYWQyYjdiOTIyZjY0OGM5MGU4ODFiZjQ0OTc4MDY5YWQwHhcNMjEwMzI0
MTQ0MzE2WhcNMjYwMzI0MTQ0MzE2WjAzMTEwLwYDVQQDEyg1YzRmMzNjZTg1MGE3
NjgwNzZjZWJhN2JjY2JiNWVhNDU0NDNhZmViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkUbzTtKXNxa5M1rZEfug/H8OQBstjHc8au3+47D505nNZFes
7bc+s4h5/fOvhhh0bKONfD9xjmQVshoAfnMrWHFJyBMZS4PJuRss3V5WdFAKecRu
ofsFOvbeF9xbnQk4xozoKwy0EG64wNnpcMJeYH8ZRHaxgC2Vi7A/y/kGyprFaFDY
6l3YY4N+hV73433KalJFuRpdIqITU0QcpymmFqv4KLuzbOfterTcIMfZ8lU5cpRG
XjP7gDk1mL0CCXts01hh7+HIE75nDB+4aFhiI1Ni9dWbg43sT938pCsQp3Ve+vDk
ln7X7WVKLACMb6aYdA3EdAhaOyL2HtRzV6d7IQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOzXKzEm7NlIcZ1MVXv3Xl3Db/q6MB8GA1UdIwQYMBaAFMqL6Qa6lrLFhJ+G
RkANLQxgDZdgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTc4M2Fj
OWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTBjNGI0YTAtNjQxNy00YTdjLTg3NTgtOWU2ZjRi
MGU5Njc5LzVjNGYzM2NlODUwYTc2ODA3NmNlYmE3YmNjYmI1ZWE0NTQ0M2FmZWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMGM0YjRhMC02NDE3LTRhN2MtODc1OC05ZTZm
NGIwZTk2NzkvOTc4M2FjOWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMghVDANBgkqhkiG9w0BAQsFAAOCAQEAXPUvpjrv16a1CIiH
M0WWtNPc3OhySbD9XtqeHDEaG/a5RsnQMrGkR+6lxJ1i9LmrFV+hX58N38fiprof
sGIs+uwPLznkT9Wjk0mMGpIoD9S1pCXZGAXWHZDBj0OdR1rWj73273HY0bkkdTnZ
hayoOVSHw0jHXXUGpySUxJ5INkehur7Md67lB+/hRmZ741ryBlfyc2U+nNiWDFJy
QKyAZPgbfumgTzUMfhM00R6DqY1rhjiTZz8XFEBw6p90gonZ8GAQ8uA2JiKQDp6E
xmAjYwZXK1yoBr1s42rqB29mRiqNmbwtaBK4nYtnnTR79LAZy6T6x53VQgGPMcwC
Wv3J7w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org