Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/d1903fd8a857d30418f4e9dcd2166ce4b8862b7d.roa
File: d1903fd8a857d30418f4e9dcd2166ce4b8862b7d.roa (raw, json)
Hash identifier: VT0PjmXuJdxz4R+OXrJkfAROoC607kvHWnfsvl6LyTk=
Subject key identifier: 80:FF:C5:A1:E5:84:D9:75:FE:59:01:A4:8D:BC:FA:C5:E3:19:60:B2
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 1AC36E
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/d1903fd8a857d30418f4e9dcd2166ce4b8862b7d.roa
Signing time: Thu 25 Aug 2022 14:25:05 +0000
ROA not before: Tue 11 May 2021 03:00:00 +0000
ROA not after: Thu 11 May 2023 03:00:00 +0000
asID: 262589
IP address blocks: 179.1.5.0/24 maxlen: 24
179.1.11.0/24 maxlen: 24
179.1.13.0/24 maxlen: 24
179.1.91.0/24 maxlen: 24
179.1.89.0/24 maxlen: 24
179.1.70.0/24 maxlen: 24
179.1.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1753966 (0x1ac36e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: May 11 03:00:00 2021 GMT
Not After : May 11 03:00:00 2023 GMT
Subject: CN=d1903fd8a857d30418f4e9dcd2166ce4b8862b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e3:8f:1c:f2:0c:2e:1d:cb:64:35:a1:b4:b3:
a5:7a:61:9c:df:42:59:65:8c:65:d5:30:2b:80:fc:
49:df:85:ab:df:99:2b:c5:65:f8:13:45:85:66:a7:
f4:19:2c:a2:7c:fa:58:6c:9a:e8:04:c2:c6:bf:72:
76:ce:da:c2:da:d2:2e:b7:83:22:0c:68:ba:2b:86:
ea:21:84:f3:56:0c:2b:f3:4a:ac:f7:68:37:e3:e0:
52:f0:ab:32:30:00:33:0b:f6:fa:80:ec:5f:42:47:
31:b5:4b:cb:a9:c1:ad:96:bc:1d:29:d5:b9:59:2b:
23:d6:e9:c4:ad:cc:d3:5f:43:d1:b7:eb:ce:ad:8a:
64:5d:59:1d:df:4c:08:cd:b1:c1:43:5c:4c:3a:1f:
3f:79:6f:1d:fb:43:4e:fb:90:d1:50:24:86:04:6f:
3e:58:28:6f:0e:72:e5:cd:4c:c5:48:e0:e7:c7:cd:
f0:66:cc:30:ff:a4:cb:be:67:27:50:ea:0e:8e:26:
56:42:a8:7e:b9:46:f1:e5:3c:c2:45:e5:4e:7c:49:
80:70:b7:67:ae:6d:8c:99:9d:5b:ce:08:0d:8b:1d:
9a:a5:42:5b:47:94:bf:5e:40:98:06:e2:9c:bd:1f:
07:79:a7:cb:3a:dc:78:d4:68:aa:43:37:66:56:36:
f7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FF:C5:A1:E5:84:D9:75:FE:59:01:A4:8D:BC:FA:C5:E3:19:60:B2
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/d1903fd8a857d30418f4e9dcd2166ce4b8862b7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.1.5.0/24
179.1.11.0/24
179.1.13.0/24
179.1.70.0/24
179.1.89.0/24
179.1.91.0/24
179.1.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:aa:98:45:5f:44:40:a3:ae:dd:a6:91:46:17:8c:a4:8b:a4:
1a:91:5c:fd:89:74:6f:41:87:6b:04:31:18:a1:28:8d:81:d5:
ae:b0:9e:99:4b:96:7b:31:2e:c3:76:a4:d7:65:c5:67:01:5e:
cf:d2:f0:ca:33:1d:03:af:b8:e7:e6:df:e1:32:55:37:87:7f:
bb:e3:ae:d0:81:81:8c:b5:14:ba:24:75:77:b9:28:70:42:87:
f5:f9:0a:39:0d:ea:4f:de:84:b9:05:04:90:5e:62:89:95:2b:
57:93:bb:85:19:ff:f3:ac:e9:70:56:6a:fa:5a:17:ff:d3:54:
73:e0:e1:32:ae:66:75:ab:6e:17:ba:e0:52:71:2c:f7:96:5a:
34:3c:23:aa:c5:40:25:09:12:89:81:24:f7:47:72:0f:d6:cf:
87:78:44:22:48:87:9a:69:7c:5d:ec:31:d2:e9:56:9a:66:e3:
95:3f:27:d8:ce:35:54:b6:ee:dc:53:08:2b:50:b0:f4:16:17:
2b:60:6b:4d:71:44:df:bc:85:5b:38:4e:15:6f:85:31:25:77:
79:91:6a:03:c0:98:89:85:ec:bc:f1:94:b8:65:7c:4a:39:e7:
80:b7:ef:15:05:ab:97:1a:79:7b:23:a1:bd:0d:25:7a:af:96:
4f:36:0e:12
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIDGsNuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwNTEx
MDMwMDAwWhcNMjMwNTExMDMwMDAwWjAzMTEwLwYDVQQDEyhkMTkwM2ZkOGE4NTdk
MzA0MThmNGU5ZGNkMjE2NmNlNGI4ODYyYjdkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhOOPHPIMLh3LZDWhtLOlemGc30JZZYxl1TArgPxJ34Wr35kr
xWX4E0WFZqf0GSyifPpYbJroBMLGv3J2ztrC2tIut4MiDGi6K4bqIYTzVgwr80qs
92g34+BS8KsyMAAzC/b6gOxfQkcxtUvLqcGtlrwdKdW5WSsj1unErczTX0PRt+vO
rYpkXVkd30wIzbHBQ1xMOh8/eW8d+0NO+5DRUCSGBG8+WChvDnLlzUzFSODnx83w
Zsww/6TLvmcnUOoOjiZWQqh+uUbx5TzCReVOfEmAcLdnrm2MmZ1bzggNix2apUJb
R5S/XkCYBuKcvR8HeafLOtx41GiqQzdmVjb3wwIDAQABo4ICfzCCAnswHQYDVR0O
BBYEFID/xaHlhNl1/lkBpI28+sXjGWCyMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5L2QxOTAzZmQ4YTg1N2QzMDQxOGY0ZTlkY2QyMTY2Y2U0Yjg4NjJiN2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBDBggrBgEFBQcBBwEB/wQ0
MDIwMAQCAAEwKgMEALMBBQMEALMBCwMEALMBDQMEALMBRgMEALMBWQMEALMBWwME
ALMBhDANBgkqhkiG9w0BAQsFAAOCAQEAGqqYRV9EQKOu3aaRRheMpIukGpFc/Yl0
b0GHawQxGKEojYHVrrCemUuWezEuw3ak12XFZwFez9LwyjMdA6+45+bf4TJVN4d/
u+Ou0IGBjLUUuiR1d7kocEKH9fkKOQ3qT96EuQUEkF5iiZUrV5O7hRn/86zpcFZq
+loX/9NUc+DhMq5mdatuF7rgUnEs95ZaNDwjqsVAJQkSiYEk90dyD9bPh3hEIkiH
mml8Xewx0ulWmmbjlT8n2M41VLbu3FMIK1Cw9BYXK2BrTXFE37yFWzhOFW+FMSV3
eZFqA8CYiYXsvPGUuGV8SjnngLfvFQWrlxp5eyOhvQ0leq+WTzYOEg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org