Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/fb0db6363bfec282201801f5081d482bc70ac32e.roa
File: fb0db6363bfec282201801f5081d482bc70ac32e.roa (raw, json)
Hash identifier: h/lLlFAPuLJWx5dsOFwxNaI2XOM63XKl92ho74vbedM=
Subject key identifier: 1C:5E:42:AF:72:42:BB:D4:BA:70:43:55:5C:8F:F1:35:60:99:08:BB
Certificate issuer: /CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Certificate serial: 10A97E
Authority key identifier: B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/fb0db6363bfec282201801f5081d482bc70ac32e.roa
Signing time: Sat 31 Jul 2021 06:55:44 +0000
ROA not before: Sat 31 Jul 2021 03:00:00 +0000
ROA not after: Fri 31 Jul 2026 03:00:00 +0000
asID: 21575
IP address blocks: 148.102.112.0/22 maxlen: 24
148.102.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1091966 (0x10a97e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Validity
Not Before: Jul 31 03:00:00 2021 GMT
Not After : Jul 31 03:00:00 2026 GMT
Subject: CN=fb0db6363bfec282201801f5081d482bc70ac32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:b2:62:f8:b0:ad:95:b6:5d:58:4f:78:bc:
8b:c7:83:eb:3c:c5:30:0c:6a:8e:3c:13:6b:b6:cb:
e9:57:d4:6b:7e:c8:75:1a:8b:9c:7f:b1:4a:55:58:
4f:5f:aa:8b:45:6b:2c:d3:5a:d7:e1:71:4e:3d:3b:
0b:0c:de:06:cb:6a:64:8f:03:6e:2d:31:93:fe:01:
fc:c3:2b:08:8e:61:b8:52:06:cd:95:61:5d:f9:15:
84:78:da:87:22:cd:14:75:48:dc:6e:33:c5:f6:47:
be:7c:d2:cd:da:b6:05:27:60:0e:87:f5:f6:3e:ab:
ca:10:98:9a:98:03:74:c9:45:aa:25:6a:a3:0e:1b:
f6:25:2b:5c:e9:43:f0:21:60:85:91:6f:44:cd:c4:
19:1e:c6:e0:68:4b:82:ab:c9:5e:3e:87:f1:6d:18:
85:2f:93:1c:0e:a1:96:97:d9:8c:ed:10:07:8b:36:
51:ae:d5:ae:03:c6:40:1c:b7:b3:50:99:e4:f3:fe:
8e:1c:9e:2d:6f:af:1c:08:a5:23:b2:27:36:eb:cb:
37:a4:f9:fc:76:b9:cc:dc:34:8b:bb:49:da:e1:76:
6d:40:59:2c:84:6b:87:53:49:b3:91:e2:83:8d:30:
d7:52:f4:56:2c:65:8c:ad:04:6a:bd:51:64:09:dd:
ea:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5E:42:AF:72:42:BB:D4:BA:70:43:55:5C:8F:F1:35:60:99:08:BB
X509v3 Authority Key Identifier:
keyid:B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/fb0db6363bfec282201801f5081d482bc70ac32e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.112.0-148.102.116.255
Signature Algorithm: sha256WithRSAEncryption
29:62:83:f3:5d:78:ae:57:90:22:bb:36:f4:f1:d0:54:78:ef:
85:3d:52:af:97:c0:b5:34:eb:8e:9a:32:52:cb:3b:6e:18:1b:
62:43:4c:00:93:7e:aa:b2:90:ad:c9:7d:8f:c4:7e:1e:b6:09:
af:db:15:18:c8:78:da:e6:fd:7d:77:b1:67:60:62:e3:3f:5a:
22:00:8e:81:9a:23:31:df:6c:9f:5f:98:3b:dc:9f:d8:f7:6c:
c7:08:a6:67:cd:bc:de:63:05:bb:e6:fe:a5:6a:bc:12:71:10:
5c:60:9a:e9:87:7f:e4:17:5f:f7:45:36:73:3b:ed:66:a3:45:
50:2b:26:e4:c9:4e:1b:1b:d7:53:08:66:1f:92:f4:5b:35:ed:
8b:33:d7:e2:a1:40:8b:af:db:f1:3f:08:94:df:44:45:8e:a4:
9b:4f:b2:e6:72:2a:85:f5:91:79:47:81:fe:e1:40:83:78:f0:
be:d3:b2:bd:36:19:de:74:15:ad:7b:61:4b:80:c7:b5:40:c0:
88:39:75:d1:f4:d2:02:a7:02:46:ad:9b:a8:a3:6e:af:a3:1b:
d2:10:16:9f:2e:04:10:5d:fb:66:0c:de:5f:b6:d3:a4:37:72:
b4:57:51:5d:e2:72:51:8e:25:cb:9f:a4:92:30:28:15:3e:87:
f1:97:4e:3f
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDEKl+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFk
ZjlhMTQxOTEwODllYWVmYzAxNTI2ZTE3MWEyZmM2M2I4Y2MwNDQwHhcNMjEwNzMx
MDMwMDAwWhcNMjYwNzMxMDMwMDAwWjAzMTEwLwYDVQQDEyhmYjBkYjYzNjNiZmVj
MjgyMjAxODAxZjUwODFkNDgyYmM3MGFjMzJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAySqyYviwrZW2XVhPeLyLx4PrPMUwDGqOPBNrtsvpV9Rrfsh1
Goucf7FKVVhPX6qLRWss01rX4XFOPTsLDN4Gy2pkjwNuLTGT/gH8wysIjmG4UgbN
lWFd+RWEeNqHIs0UdUjcbjPF9ke+fNLN2rYFJ2AOh/X2PqvKEJiamAN0yUWqJWqj
Dhv2JStc6UPwIWCFkW9EzcQZHsbgaEuCq8lePofxbRiFL5McDqGWl9mM7RAHizZR
rtWuA8ZAHLezUJnk8/6OHJ4tb68cCKUjsic268s3pPn8drnM3DSLu0na4XZtQFks
hGuHU0mzkeKDjTDXUvRWLGWMrQRqvVFkCd3qAwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFBxeQq9yQrvUunBDVVyP8TVgmQi7MB8GA1UdIwQYMBaAFLCPim3HAEvcqV2a
XuGTREzkcdF1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWRmOWEx
NDE5MTA4OWVhZWZjMDE1MjZlMTcxYTJmYzYzYjhjYzA0NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmNmZWYxZjYtN2NjNi00OTViLTlkNzEtYmU1N2Ew
Y2Q3OWI4L2ZiMGRiNjM2M2JmZWMyODIyMDE4MDFmNTA4MWQ0ODJiYzcwYWMzMmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iY2ZlZjFmNi03Y2M2LTQ5NWItOWQ3MS1iZTU3
YTBjZDc5YjgvMWRmOWExNDE5MTA4OWVhZWZjMDE1MjZlMTcxYTJmYzYzYjhjYzA0
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQElGZwAwQAlGZ0MA0GCSqGSIb3DQEBCwUAA4IBAQApYoPz
XXiuV5Aiuzb08dBUeO+FPVKvl8C1NOuOmjJSyztuGBtiQ0wAk36qspCtyX2PxH4e
tgmv2xUYyHja5v19d7FnYGLjP1oiAI6BmiMx32yfX5g73J/Y92zHCKZnzbzeYwW7
5v6larwScRBcYJrph3/kF1/3RTZzO+1mo0VQKybkyU4bG9dTCGYfkvRbNe2LM9fi
oUCLr9vxPwiU30RFjqSbT7LmciqF9ZF5R4H+4UCDePC+07K9NhnedBWte2FLgMe1
QMCIOXXR9NICpwJGrZuoo26voxvSEBafLgQQXftmDN5fttOkN3K0V1Fd4nJRjiXL
n6SSMCgVPofxl04/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:52 2023 by rpki-client on console-ams.rpki-client.org