Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd295502-f344-44f2-9e00-bbbf2f1e50d9/7885543b92051c02579884a7d45bce0b29f5c486.roa
File: 7885543b92051c02579884a7d45bce0b29f5c486.roa (raw, json)
Hash identifier: x2gm/mZT08I4U422U7IvliM4DqjVTuDUu26FFnEYfs4=
Subject key identifier: DB:1B:12:E8:20:B6:BF:2D:3E:0B:E1:10:0D:6B:7D:06:EB:11:76:1B
Certificate issuer: /CN=184d3b86d27c4f19e6eba3cae294a8f07eec2a0c
Certificate serial: 0378
Authority key identifier: 84:96:20:9C:D7:47:06:AF:C2:79:A2:8D:98:41:D2:8D:9A:E4:A3:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/184d3b86d27c4f19e6eba3cae294a8f07eec2a0c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bd295502-f344-44f2-9e00-bbbf2f1e50d9/7885543b92051c02579884a7d45bce0b29f5c486.roa
Signing time: Fri 11 Mar 2022 20:05:09 +0000
ROA not before: Fri 11 Mar 2022 03:00:00 +0000
ROA not after: Mon 11 Mar 2024 03:00:00 +0000
asID: 61519
IP address blocks: 168.121.32.0/22 maxlen: 24
2803:3540::/32 maxlen: 48
Validation: Failed, certificate revoked on Sun 10 Mar 2024 08:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888 (0x378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184d3b86d27c4f19e6eba3cae294a8f07eec2a0c
Validity
Not Before: Mar 11 03:00:00 2022 GMT
Not After : Mar 11 03:00:00 2024 GMT
Subject: CN=7885543b92051c02579884a7d45bce0b29f5c486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:a0:54:3f:c2:10:e3:7f:31:4e:bd:05:0f:
89:49:90:d8:a6:de:0f:47:06:98:4b:37:2f:d8:bf:
92:55:c2:0c:14:15:3f:02:7f:d2:37:82:f5:e8:b1:
4b:5c:a0:90:2c:9a:45:87:d6:97:4b:34:33:80:07:
f9:83:2f:18:46:5e:d2:5b:4b:02:fd:ee:51:c1:25:
57:91:e0:bb:04:9b:f1:a0:1f:fb:44:3b:ee:52:e8:
96:be:d1:bf:c2:2c:b8:05:48:a2:93:27:b2:54:b4:
c6:03:2b:36:e0:3e:9c:b1:20:a9:28:f2:cb:fc:7b:
ec:91:bd:c6:f8:54:a8:3e:fb:65:ad:2e:ad:f4:e8:
60:86:97:e0:9a:46:37:4b:e3:38:55:96:95:47:f8:
65:4a:a4:78:82:16:74:46:69:49:75:c0:e2:39:2c:
10:36:19:0c:da:75:e2:d3:cb:95:c8:a0:4d:2c:63:
20:59:43:c8:50:0b:8c:88:93:16:e0:59:7c:b9:4b:
84:15:54:a5:1e:ee:c2:4f:55:e5:1c:9a:aa:04:49:
eb:38:76:12:ad:17:92:44:33:81:f4:7d:bb:6d:09:
7c:b2:63:be:2d:93:18:86:d0:47:72:bf:eb:cb:1e:
2b:06:a9:e2:4b:54:76:af:40:71:8d:8c:ff:ec:64:
58:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1B:12:E8:20:B6:BF:2D:3E:0B:E1:10:0D:6B:7D:06:EB:11:76:1B
X509v3 Authority Key Identifier:
keyid:84:96:20:9C:D7:47:06:AF:C2:79:A2:8D:98:41:D2:8D:9A:E4:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/184d3b86d27c4f19e6eba3cae294a8f07eec2a0c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd295502-f344-44f2-9e00-bbbf2f1e50d9/7885543b92051c02579884a7d45bce0b29f5c486.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bd295502-f344-44f2-9e00-bbbf2f1e50d9/184d3b86d27c4f19e6eba3cae294a8f07eec2a0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.32.0/22
IPv6:
2803:3540::/32
Signature Algorithm: sha256WithRSAEncryption
6b:50:96:df:57:1e:34:92:ed:56:87:b5:d2:d4:ec:aa:ac:67:
7b:e1:e0:54:c1:48:63:c9:db:0c:a8:b1:2a:67:12:78:f8:bc:
92:8d:ad:fa:d3:a9:d4:8a:c0:c1:9f:04:72:d1:4e:4c:19:9f:
5c:50:21:b3:fe:6f:82:18:c6:aa:f0:38:46:98:02:f6:d9:0a:
ef:d9:03:63:62:73:be:db:ee:b7:cb:ca:e4:32:f1:7e:4d:a6:
30:c3:bb:8a:75:ad:62:5a:01:a8:5a:e4:f2:3e:e7:42:16:23:
0f:69:5f:6f:ff:dd:73:48:f2:53:b8:d5:bb:fb:e6:5c:e1:4d:
30:48:98:80:51:79:de:26:bd:92:c7:d8:23:4e:ab:e1:95:2f:
1c:71:19:8a:25:cb:05:a4:52:21:aa:1f:39:73:07:f8:06:10:
22:94:f8:de:0b:02:98:59:41:17:90:c4:67:c3:2d:6f:33:88:
e3:03:15:67:5d:66:31:3b:64:dc:17:fb:af:04:85:aa:76:68:
36:73:d4:42:83:00:fd:d1:20:3f:05:a2:93:ac:59:91:a1:8b:
16:b7:4c:1f:3e:db:8c:bc:7e:01:37:a6:f0:60:63:d6:52:22:
08:4f:ac:ad:a0:c6:c4:31:47:ab:da:0c:bd:ac:ff:36:7f:47:
91:da:bf:63
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTg0
ZDNiODZkMjdjNGYxOWU2ZWJhM2NhZTI5NGE4ZjA3ZWVjMmEwYzAeFw0yMjAzMTEw
MzAwMDBaFw0yNDAzMTEwMzAwMDBaMDMxMTAvBgNVBAMTKDc4ODU1NDNiOTIwNTFj
MDI1Nzk4ODRhN2Q0NWJjZTBiMjlmNWM0ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCI7aBUP8IQ438xTr0FD4lJkNim3g9HBphLNy/Yv5JVwgwUFT8C
f9I3gvXosUtcoJAsmkWH1pdLNDOAB/mDLxhGXtJbSwL97lHBJVeR4LsEm/GgH/tE
O+5S6Ja+0b/CLLgFSKKTJ7JUtMYDKzbgPpyxIKko8sv8e+yRvcb4VKg++2WtLq30
6GCGl+CaRjdL4zhVlpVH+GVKpHiCFnRGaUl1wOI5LBA2GQzadeLTy5XIoE0sYyBZ
Q8hQC4yIkxbgWXy5S4QVVKUe7sJPVeUcmqoESes4dhKtF5JEM4H0fbttCXyyY74t
kxiG0Edyv+vLHisGqeJLVHavQHGNjP/sZFh7AgMBAAGjggJqMIICZjAdBgNVHQ4E
FgQU2xsS6CC2vy0+C+EQDWt9BusRdhswHwYDVR0jBBgwFoAUhJYgnNdHBq/CeaKN
mEHSjZrko2swDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8xODRkM2I4
NmQyN2M0ZjE5ZTZlYmEzY2FlMjk0YThmMDdlZWMyYTBjLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9iZDI5NTUwMi1mMzQ0LTQ0ZjItOWUwMC1iYmJmMmYx
ZTUwZDkvNzg4NTU0M2I5MjA1MWMwMjU3OTg4NGE3ZDQ1YmNlMGIyOWY1YzQ4Ni5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2JkMjk1NTAyLWYzNDQtNDRmMi05ZTAwLWJiYmYy
ZjFlNTBkOS8xODRkM2I4NmQyN2M0ZjE5ZTZlYmEzY2FlMjk0YThmMDdlZWMyYTBj
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8w
HTAMBAIAATAGAwQCqHkgMA0EAgACMAcDBQAoAzVAMA0GCSqGSIb3DQEBCwUAA4IB
AQBrUJbfVx40ku1Wh7XS1OyqrGd74eBUwUhjydsMqLEqZxJ4+LySja3606nUisDB
nwRy0U5MGZ9cUCGz/m+CGMaq8DhGmAL22Qrv2QNjYnO+2+63y8rkMvF+TaYww7uK
da1iWgGoWuTyPudCFiMPaV9v/91zSPJTuNW7++Zc4U0wSJiAUXneJr2Sx9gjTqvh
lS8ccRmKJcsFpFIhqh85cwf4BhAilPjeCwKYWUEXkMRnwy1vM4jjAxVnXWYxO2Tc
F/uvBIWqdmg2c9RCgwD90SA/BaKTrFmRoYsWt0wfPtuMvH4BN6bwYGPWUiIIT6yt
oMbEMUer2gy9rP82f0eR2r9j
-----END CERTIFICATE-----
Generated at Sun Mar 10 09:49:35 2024 by rpki-client on console-fra.rpki-client.org