Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/1ec4528bf79fc21095f93effd89f20ec5a77d41f.roa
File: 1ec4528bf79fc21095f93effd89f20ec5a77d41f.roa (raw, json)
Hash identifier: EbOjCAkZvsOjYZ5VgoDRZXP9XlbyjrU5zvDCitM/jDc=
Subject key identifier: 25:2E:6B:D0:C2:74:A4:C5:5B:3B:2E:E0:91:C3:41:A5:C8:C1:7E:EF
Certificate issuer: /CN=d8c0648bb06f57e94b76f4d84acc2529c3bd76aa
Certificate serial: 0627
Authority key identifier: 12:32:C4:C4:C1:72:11:35:41:89:0F:65:7F:3B:DA:CC:02:0F:8B:47
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/1ec4528bf79fc21095f93effd89f20ec5a77d41f.roa
Signing time: Tue 02 Nov 2021 16:46:45 +0000
ROA not before: Tue 02 Nov 2021 03:00:00 +0000
ROA not after: Thu 02 Nov 2023 03:00:00 +0000
asID: 266738
IP address blocks: 45.229.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1575 (0x627)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c0648bb06f57e94b76f4d84acc2529c3bd76aa
Validity
Not Before: Nov 2 03:00:00 2021 GMT
Not After : Nov 2 03:00:00 2023 GMT
Subject: CN=1ec4528bf79fc21095f93effd89f20ec5a77d41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:2a:ef:1d:85:4b:01:25:61:24:02:4b:29:
63:fc:ed:83:10:db:02:8c:51:68:00:63:67:98:e4:
18:30:9d:cc:58:05:39:2f:5e:44:9b:5b:64:9e:39:
c7:bb:e8:45:49:2f:bb:d3:8e:8a:f1:bb:8f:6b:ec:
15:e0:e6:09:4c:a7:41:6c:49:38:0c:7d:61:00:39:
0b:c9:1a:5e:99:97:b0:d7:04:48:83:73:29:29:88:
81:d4:8e:1c:c4:4c:d9:30:e2:a5:e6:39:77:2f:79:
5c:23:e2:aa:43:00:25:9b:75:f9:f8:fb:17:92:4c:
e6:1d:39:a5:7b:25:70:af:7f:12:0d:e3:1c:b2:b4:
ac:04:24:4f:2a:cd:8e:a6:41:0e:ef:59:0c:de:a0:
ae:00:2e:01:c9:b1:1a:5a:75:fb:6a:de:84:af:01:
f9:e0:f7:da:f7:41:be:1f:f0:b9:08:bd:22:8d:f0:
3e:4e:61:6e:f1:06:48:75:a3:bf:a5:38:ad:36:40:
60:3b:9f:b5:d2:4c:5c:6a:1f:ea:ea:bd:19:3c:7a:
14:48:af:8d:79:0b:5e:a7:88:67:19:62:5f:ac:1f:
a9:2a:69:03:36:43:52:62:1a:3d:55:e0:a2:d0:14:
42:30:6e:58:00:42:99:d6:3f:1e:6c:31:ce:8c:7a:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2E:6B:D0:C2:74:A4:C5:5B:3B:2E:E0:91:C3:41:A5:C8:C1:7E:EF
X509v3 Authority Key Identifier:
keyid:12:32:C4:C4:C1:72:11:35:41:89:0F:65:7F:3B:DA:CC:02:0F:8B:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/1ec4528bf79fc21095f93effd89f20ec5a77d41f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b6d42fc0-a9e9-4ce8-94b2-b4daee8d835f/d8c0648bb06f57e94b76f4d84acc2529c3bd76aa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.151.0/24
Signature Algorithm: sha256WithRSAEncryption
21:30:9e:ae:eb:6a:16:73:eb:9c:c5:96:2c:38:41:4f:64:ed:
ee:0c:da:10:74:08:f4:b8:6d:01:d9:12:5f:62:94:8d:8a:2e:
7c:02:af:d2:8d:1a:87:e1:02:5c:bd:1a:74:9f:b4:e5:e9:bb:
75:05:bd:ea:a5:ef:9e:d6:c3:98:82:b2:45:29:b2:7f:24:de:
10:9d:c6:da:9a:74:3a:9e:f6:19:97:92:d1:2b:53:e9:2d:fc:
df:43:30:61:6e:f3:2b:90:bf:f0:d5:1f:49:5a:b5:60:d5:c6:
96:26:16:b5:2e:f7:c4:f8:65:32:10:63:d8:a4:03:f2:79:f0:
e3:cb:d4:27:81:f4:01:b3:bd:32:90:8e:b3:c2:94:84:9a:78:
a4:30:3d:16:a3:c9:a3:74:eb:85:ce:d0:7c:c3:73:d9:ce:2c:
e0:04:46:81:fe:f2:da:88:d1:86:45:8b:df:b8:16:a0:b9:7e:
e3:00:90:a0:a3:8a:5b:c6:55:10:23:a7:a9:29:6a:fb:6a:25:
a3:80:fd:4f:4f:cf:20:41:e5:af:22:67:6d:11:9e:c1:4a:62:
8d:64:3f:92:60:fc:a1:b2:c2:e0:4a:b6:a7:39:78:ac:2d:26:
9d:76:6a:ce:66:11:29:0d:ce:52:7f:b2:6f:7c:c6:15:ad:25:
2d:82:34:ad
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBicwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZDhj
MDY0OGJiMDZmNTdlOTRiNzZmNGQ4NGFjYzI1MjljM2JkNzZhYTAeFw0yMTExMDIw
MzAwMDBaFw0yMzExMDIwMzAwMDBaMDMxMTAvBgNVBAMTKDFlYzQ1MjhiZjc5ZmMy
MTA5NWY5M2VmZmQ4OWYyMGVjNWE3N2Q0MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCl4yrvHYVLASVhJAJLKWP87YMQ2wKMUWgAY2eY5BgwncxYBTkv
XkSbW2SeOce76EVJL7vTjorxu49r7BXg5glMp0FsSTgMfWEAOQvJGl6Zl7DXBEiD
cykpiIHUjhzETNkw4qXmOXcveVwj4qpDACWbdfn4+xeSTOYdOaV7JXCvfxIN4xyy
tKwEJE8qzY6mQQ7vWQzeoK4ALgHJsRpadftq3oSvAfng99r3Qb4f8LkIvSKN8D5O
YW7xBkh1o7+lOK02QGA7n7XSTFxqH+rqvRk8ehRIr415C16niGcZYl+sH6kqaQM2
Q1JiGj1V4KLQFEIwblgAQpnWPx5sMc6Meq0dAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUJS5r0MJ0pMVbOy7gkcNBpcjBfu8wHwYDVR0jBBgwFoAUEjLExMFyETVBiQ9l
fzvazAIPi0cwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9kOGMwNjQ4
YmIwNmY1N2U5NGI3NmY0ZDg0YWNjMjUyOWMzYmQ3NmFhLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9iNmQ0MmZjMC1hOWU5LTRjZTgtOTRiMi1iNGRhZWU4
ZDgzNWYvMWVjNDUyOGJmNzlmYzIxMDk1ZjkzZWZmZDg5ZjIwZWM1YTc3ZDQxZi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2I2ZDQyZmMwLWE5ZTktNGNlOC05NGIyLWI0ZGFl
ZThkODM1Zi9kOGMwNjQ4YmIwNmY1N2U5NGI3NmY0ZDg0YWNjMjUyOWMzYmQ3NmFh
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQALeWXMA0GCSqGSIb3DQEBCwUAA4IBAQAhMJ6u62oWc+ucxZYs
OEFPZO3uDNoQdAj0uG0B2RJfYpSNii58Aq/SjRqH4QJcvRp0n7Tl6bt1Bb3qpe+e
1sOYgrJFKbJ/JN4QncbamnQ6nvYZl5LRK1PpLfzfQzBhbvMrkL/w1R9JWrVg1caW
Jha1LvfE+GUyEGPYpAPyefDjy9QngfQBs70ykI6zwpSEmnikMD0Wo8mjdOuFztB8
w3PZzizgBEaB/vLaiNGGRYvfuBaguX7jAJCgo4pbxlUQI6epKWr7aiWjgP1PT88g
QeWvImdtEZ7BSmKNZD+SYPyhssLgSranOXisLSaddmrOZhEpDc5Sf7JvfMYVrSUt
gjSt
-----END CERTIFICATE-----
Generated at Wed Nov 1 08:12:24 2023 by rpki-client on console-ams.rpki-client.org