Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/faf51767a57d6bbe77de7b16b143f5229b798fd1.roa
File: faf51767a57d6bbe77de7b16b143f5229b798fd1.roa (raw, json)
Hash identifier: IaOT/2FaWiFCD27PySS/KFBmXVtMmO+RUEZxXKoddkg=
Subject key identifier: B0:EC:DD:B0:0E:73:25:B5:9F:57:4D:26:70:38:22:07:98:C0:A4:26
Certificate issuer: /CN=5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0
Certificate serial: 07FFC8
Authority key identifier: F5:C2:43:E9:59:3D:73:BE:76:93:9B:D0:3D:1F:C4:43:A4:85:A4:AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/faf51767a57d6bbe77de7b16b143f5229b798fd1.roa
Signing time: Wed 24 Mar 2021 22:51:51 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 265810
IP address blocks: 201.182.0.0/24 maxlen: 24
201.182.1.0/24 maxlen: 24
201.182.2.0/24 maxlen: 24
201.182.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524232 (0x7ffc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=faf51767a57d6bbe77de7b16b143f5229b798fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6f:d0:e5:ab:8e:4e:ee:56:43:5d:43:e2:75:
82:62:1a:d5:58:e5:88:61:37:73:f5:cf:4c:5b:8f:
00:cb:ff:b8:54:51:99:b2:97:9a:a1:02:9f:ea:ee:
72:6c:24:b4:75:f6:af:3f:db:b3:8c:0e:11:7d:9c:
8f:0f:1d:79:6c:ba:99:9b:69:b0:c5:6c:41:e6:00:
d7:ae:bd:22:6d:f1:f2:19:ef:90:39:78:98:61:53:
28:c8:47:ea:56:20:31:f4:59:0c:0a:a2:9e:b3:2f:
79:eb:89:76:26:28:67:4a:fc:a9:73:4e:f5:55:e1:
ac:b7:52:90:5e:a9:ed:a5:e0:33:e1:81:93:cb:e8:
70:79:cd:da:43:65:24:6a:f8:09:85:b0:8b:9b:d5:
4a:43:30:4f:16:cf:9e:fa:5e:76:c0:4b:4b:80:79:
e0:93:d2:26:63:47:a9:31:f7:1d:c6:28:48:cb:f0:
41:77:81:d6:00:b0:e8:fd:2d:1f:ac:44:4d:b7:8a:
5b:8b:a9:1a:fb:f4:63:51:59:b4:30:e6:46:fb:e2:
0e:b9:2b:9f:5d:1f:06:d7:4e:19:53:3b:e2:77:46:
d8:9c:6b:48:8e:c5:95:98:79:a6:76:d1:9c:d1:e5:
e1:1c:7e:c9:f3:4c:7e:83:1b:b6:17:f3:7f:ce:c4:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EC:DD:B0:0E:73:25:B5:9F:57:4D:26:70:38:22:07:98:C0:A4:26
X509v3 Authority Key Identifier:
keyid:F5:C2:43:E9:59:3D:73:BE:76:93:9B:D0:3D:1F:C4:43:A4:85:A4:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/faf51767a57d6bbe77de7b16b143f5229b798fd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.182.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:8d:c3:80:e0:bd:11:51:7b:bf:0f:5a:20:ae:a0:4f:2e:6f:
22:42:95:1f:e9:81:87:a3:e3:52:52:6f:92:ff:62:c5:15:94:
0e:c3:4c:42:09:ba:6a:b7:79:66:f8:c1:ea:f9:3f:3e:ab:fc:
32:2d:e2:5c:98:18:4d:4e:24:3d:e9:06:6e:0c:0b:a2:26:eb:
9e:d1:c8:05:4e:a8:b8:ac:d1:3f:ae:cf:cd:89:6d:6e:b9:00:
dd:9d:d6:28:62:bd:37:f1:3c:63:4d:3f:bf:c2:3e:92:0c:39:
ab:96:14:b1:bb:4b:e8:4b:72:cc:d8:6d:b9:99:75:3e:48:ec:
72:0d:a9:f9:0d:74:76:c4:d4:d3:84:e8:64:9d:15:55:76:34:
b8:99:97:6a:3a:04:e2:68:57:3b:8a:89:67:94:e0:df:30:3d:
ae:9d:8d:3b:23:b1:ad:63:61:8b:a5:c4:f8:d1:30:42:21:e6:
a5:89:a3:48:c7:87:f7:5d:1a:9a:70:d2:e1:a7:23:e1:03:54:
00:61:83:a7:35:de:b2:16:51:4c:9a:b6:d0:77:4e:87:4f:de:
7f:a5:1a:25:15:63:51:db:a1:af:61:94:e5:42:8f:1b:b2:d5:
24:bf:44:4e:41:51:86:f7:a2:78:a3:d3:6b:d2:e6:06:ab:d2:
1f:af:a6:71
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDB//IMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
YzdiOGExZjIyZTY0ZTBjOTNmOTIzMTI4ZWM5OTkzYThlZmY4ZDAwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyhmYWY1MTc2N2E1N2Q2
YmJlNzdkZTdiMTZiMTQzZjUyMjliNzk4ZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkG/Q5auOTu5WQ11D4nWCYhrVWOWIYTdz9c9MW48Ay/+4VFGZ
speaoQKf6u5ybCS0dfavP9uzjA4RfZyPDx15bLqZm2mwxWxB5gDXrr0ibfHyGe+Q
OXiYYVMoyEfqViAx9FkMCqKesy9564l2JihnSvypc071VeGst1KQXqntpeAz4YGT
y+hwec3aQ2UkavgJhbCLm9VKQzBPFs+e+l52wEtLgHngk9ImY0epMfcdxihIy/BB
d4HWALDo/S0frERNt4pbi6ka+/RjUVm0MOZG++IOuSufXR8G104ZUzvid0bYnGtI
jsWVmHmmdtGc0eXhHH7J80x+gxu2F/N/zsTmSQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLDs3bAOcyW1n1dNJnA4IgeYwKQmMB8GA1UdIwQYMBaAFPXCQ+lZPXO+dpOb
0D0fxEOkhaSsMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWRjN2I4
YTFmMjJlNjRlMGM5M2Y5MjMxMjhlYzk5OTNhOGVmZjhkMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjNhZmY5N2UtOTc1OS00MjIwLThlMmEtM2ZhYzJm
MjBiM2ZjL2ZhZjUxNzY3YTU3ZDZiYmU3N2RlN2IxNmIxNDNmNTIyOWI3OThmZDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iM2FmZjk3ZS05NzU5LTQyMjAtOGUyYS0zZmFj
MmYyMGIzZmMvNWRjN2I4YTFmMjJlNjRlMGM5M2Y5MjMxMjhlYzk5OTNhOGVmZjhk
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsm2ADANBgkqhkiG9w0BAQsFAAOCAQEAX43DgOC9EVF7vw9a
IK6gTy5vIkKVH+mBh6PjUlJvkv9ixRWUDsNMQgm6ard5ZvjB6vk/Pqv8Mi3iXJgY
TU4kPekGbgwLoibrntHIBU6ouKzRP67PzYltbrkA3Z3WKGK9N/E8Y00/v8I+kgw5
q5YUsbtL6EtyzNhtuZl1Pkjscg2p+Q10dsTU04ToZJ0VVXY0uJmXajoE4mhXO4qJ
Z5Tg3zA9rp2NOyOxrWNhi6XE+NEwQiHmpYmjSMeH910amnDS4acj4QNUAGGDpzXe
shZRTJq20HdOh0/ef6UaJRVjUduhr2GU5UKPG7LVJL9ETkFRhveieKPTa9LmBqvS
H6+mcQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org