Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/1a6e578d15e6e4f786869b99ae9b0b7cb1032848.roa
File: 1a6e578d15e6e4f786869b99ae9b0b7cb1032848.roa (raw, json)
Hash identifier: a5gduebeyFpxufccFZ2VjWvMCXHK6hU7SerwvfVLl/s=
Subject key identifier: E0:2C:2C:64:AE:85:85:84:D0:B5:A8:4E:08:A6:E2:B3:0D:26:44:F0
Certificate issuer: /CN=4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7
Certificate serial: 195728
Authority key identifier: 49:0B:5B:D4:3B:34:52:BD:5F:D7:81:15:34:A4:B1:9B:31:DB:18:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/1a6e578d15e6e4f786869b99ae9b0b7cb1032848.roa
Signing time: Sat 04 Nov 2023 07:30:03 +0000
ROA not before: Sat 04 Nov 2023 07:30:03 +0000
ROA not after: Mon 03 Nov 2025 07:30:03 +0000
asID: 270044
IP address blocks: 179.0.180.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1660712 (0x195728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7
Validity
Not Before: Nov 4 07:30:03 2023 GMT
Not After : Nov 3 07:30:03 2025 GMT
Subject: CN=1a6e578d15e6e4f786869b99ae9b0b7cb1032848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:42:59:32:65:6a:a3:82:69:3a:f4:09:1f:
33:4b:fb:0a:f9:94:b8:ab:68:40:91:1a:74:e7:3c:
85:57:e3:14:c1:73:96:db:d9:ea:d3:ca:8f:21:47:
d1:2b:c6:eb:6e:3a:34:82:f7:a7:1f:1a:26:c5:fc:
79:a7:17:5d:c8:f7:af:0b:4b:4f:ee:65:ab:1a:86:
5d:62:10:73:18:2a:2a:e9:92:ff:49:81:3e:fc:96:
f2:8d:82:6d:96:3a:2d:b1:da:43:3b:5b:63:a1:c4:
6a:ed:28:63:05:e6:20:fb:7c:eb:96:21:72:8d:19:
85:d0:f9:7a:a7:28:fe:b2:1e:3b:29:2b:2e:db:40:
17:ab:2c:67:db:cd:90:20:e5:9b:7b:2e:de:2a:a8:
5e:7e:30:42:4f:c0:45:22:61:bb:1c:0f:f8:03:bb:
74:fd:95:68:41:03:4b:db:20:46:82:f4:ca:7a:6e:
5d:cd:b7:bd:36:c7:fe:2b:6f:ef:e3:f5:c3:df:15:
4f:45:3e:83:82:c1:a6:d5:47:a2:21:01:5f:48:c3:
9b:9c:20:0d:bd:fe:c6:23:b1:cf:4b:ff:8d:a3:5d:
ff:0a:59:d6:f8:d5:29:70:ea:7b:0e:e5:1e:13:ab:
41:a3:33:fc:73:5a:ae:ec:98:7a:09:7d:89:04:4c:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2C:2C:64:AE:85:85:84:D0:B5:A8:4E:08:A6:E2:B3:0D:26:44:F0
X509v3 Authority Key Identifier:
keyid:49:0B:5B:D4:3B:34:52:BD:5F:D7:81:15:34:A4:B1:9B:31:DB:18:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/1a6e578d15e6e4f786869b99ae9b0b7cb1032848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c15f9374-b719-490a-87cd-0fb0a47df1e9/4ff1f04d5b5082854b1edbfb1e9cf4ec12001ef7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.180.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:f4:81:8a:56:3b:f5:21:f2:26:f6:83:42:12:27:e4:6a:ea:
a1:3e:1e:01:6f:11:25:1f:c9:e0:75:7d:c8:f3:69:f9:6f:5f:
4b:2b:2e:47:29:4b:46:4f:f0:5f:40:d5:76:90:7a:7e:d6:21:
60:fa:37:f8:df:67:a7:26:1d:60:cd:03:ee:cc:92:ad:6f:73:
a7:c5:4a:37:58:db:5d:cf:5e:73:1b:ea:97:74:fd:00:5b:65:
2d:77:3a:3b:01:b8:67:4d:1d:e0:29:6b:3c:e8:9a:79:c6:62:
62:7d:fc:ca:3e:76:6e:4b:9e:0a:72:91:04:a3:e5:6d:f1:5c:
7d:50:da:a7:4b:55:59:3d:65:c5:ac:6f:84:9b:a4:8c:5d:41:
68:f1:c2:b8:12:6a:c8:3d:d2:99:3d:2e:9f:d1:ec:40:5c:84:
47:75:19:03:b9:d0:e5:fd:b0:26:89:26:39:db:cd:da:5d:05:
72:45:06:20:71:47:78:b5:fb:1d:a1:62:ee:d4:16:51:19:f4:
a1:56:34:a3:c1:1a:99:84:e2:45:b2:0c:5e:c0:18:3e:b5:79:
0b:de:50:f5:12:5d:0e:40:61:2c:6a:d3:fd:11:b2:20:41:c5:
6d:87:2e:b9:6f:b1:ae:56:bc:29:4e:7b:30:b8:b4:c3:de:18:
7e:ab:4f:28
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGVcoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRm
ZjFmMDRkNWI1MDgyODU0YjFlZGJmYjFlOWNmNGVjMTIwMDFlZjcwHhcNMjMxMTA0
MDczMDAzWhcNMjUxMTAzMDczMDAzWjAzMTEwLwYDVQQDEygxYTZlNTc4ZDE1ZTZl
NGY3ODY4NjliOTlhZTliMGI3Y2IxMDMyODQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuIdCWTJlaqOCaTr0CR8zS/sK+ZS4q2hAkRp05zyFV+MUwXOW
29nq08qPIUfRK8brbjo0gvenHxomxfx5pxddyPevC0tP7mWrGoZdYhBzGCoq6ZL/
SYE+/JbyjYJtljotsdpDO1tjocRq7ShjBeYg+3zrliFyjRmF0Pl6pyj+sh47KSsu
20AXqyxn282QIOWbey7eKqhefjBCT8BFImG7HA/4A7t0/ZVoQQNL2yBGgvTKem5d
zbe9Nsf+K2/v4/XD3xVPRT6DgsGm1UeiIQFfSMObnCANvf7GI7HPS/+No13/ClnW
+NUpcOp7DuUeE6tBozP8c1qu7Jh6CX2JBEy3dwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOAsLGSuhYWE0LWoTgim4rMNJkTwMB8GA1UdIwQYMBaAFEkLW9Q7NFK9X9eB
FTSksZsx2xiAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGZmMWYw
NGQ1YjUwODI4NTRiMWVkYmZiMWU5Y2Y0ZWMxMjAwMWVmNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzE1ZjkzNzQtYjcxOS00OTBhLTg3Y2QtMGZiMGE0
N2RmMWU5LzFhNmU1NzhkMTVlNmU0Zjc4Njg2OWI5OWFlOWIwYjdjYjEwMzI4NDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMTVmOTM3NC1iNzE5LTQ5MGEtODdjZC0wZmIw
YTQ3ZGYxZTkvNGZmMWYwNGQ1YjUwODI4NTRiMWVkYmZiMWU5Y2Y0ZWMxMjAwMWVm
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArMAtDANBgkqhkiG9w0BAQsFAAOCAQEAH/SBilY79SHyJvaD
QhIn5GrqoT4eAW8RJR/J4HV9yPNp+W9fSysuRylLRk/wX0DVdpB6ftYhYPo3+N9n
pyYdYM0D7sySrW9zp8VKN1jbXc9ecxvql3T9AFtlLXc6OwG4Z00d4ClrPOiaecZi
Yn38yj52bkueCnKRBKPlbfFcfVDap0tVWT1lxaxvhJukjF1BaPHCuBJqyD3SmT0u
n9HsQFyER3UZA7nQ5f2wJokmOdvN2l0FckUGIHFHeLX7HaFi7tQWURn0oVY0o8Ea
mYTiRbIMXsAYPrV5C95Q9RJdDkBhLGrT/RGyIEHFbYcuuW+xrla8KU57MLi0w94Y
fqtPKA==
-----END CERTIFICATE-----
Generated at Fri Jan 5 21:23:34 2024 by rpki-client on console-fra.rpki-client.org