Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/a884ffb2960792fd9e137a8b40e2c6daeefa5026.roa
File: a884ffb2960792fd9e137a8b40e2c6daeefa5026.roa (raw, json)
Hash identifier: PFpvv99bbztABLwLrajCaOgVi2t0y8K0cipqa9+fjYc=
Subject key identifier: A7:9C:48:47:AB:72:5C:9C:44:F5:12:6B:03:A7:33:6A:43:8F:0F:B5
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 1D1A47
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/a884ffb2960792fd9e137a8b40e2c6daeefa5026.roa
Signing time: Fri 30 Sep 2022 02:47:11 +0000
ROA not before: Wed 24 Mar 2021 14:34:57 +0000
ROA not after: Tue 24 Mar 2026 14:34:57 +0000
asID: 12956
IP address blocks: 190.66.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1907271 (0x1d1a47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Mar 24 14:34:57 2021 GMT
Not After : Mar 24 14:34:57 2026 GMT
Subject: CN=a884ffb2960792fd9e137a8b40e2c6daeefa5026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:4c:95:30:2f:00:c0:55:e5:26:89:72:30:
52:29:01:47:5a:43:e7:1c:6d:40:32:ac:cd:74:15:
a8:25:fd:9f:fd:f2:7d:fe:92:6b:8b:37:78:9e:cb:
91:63:2a:52:78:f9:50:5f:3c:d1:21:26:26:f1:98:
e7:37:da:93:77:f3:bb:2d:97:03:89:35:6c:4f:d0:
ba:a9:53:20:22:e5:f1:75:2d:26:a4:33:f3:ae:2d:
79:2e:4d:15:32:68:0e:87:b2:45:51:ec:5d:f2:68:
83:ee:9a:56:a1:bb:a0:45:08:42:72:85:88:06:47:
c2:56:dd:c4:c6:9a:01:3b:9b:2b:97:91:c1:ff:c9:
b7:45:01:c2:e6:92:75:67:a1:e9:2c:6d:db:f1:69:
8c:38:61:b0:dc:3e:60:4b:93:52:f8:98:9c:56:8f:
8f:fd:01:2e:fd:d7:c7:81:ca:f0:19:c2:b4:6d:49:
6a:2c:4a:07:e8:4a:09:8a:3c:70:72:32:4a:f7:5e:
39:59:4c:56:49:93:91:91:aa:6f:9f:3e:e8:b3:12:
11:3c:26:10:9a:8c:cb:65:db:c8:13:81:0d:10:76:
be:11:ae:f6:2e:48:fe:d7:ca:50:a5:fd:86:c4:3a:
44:76:f2:23:fe:d0:e5:9c:58:aa:89:80:57:85:9e:
0a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:48:47:AB:72:5C:9C:44:F5:12:6B:03:A7:33:6A:43:8F:0F:B5
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/a884ffb2960792fd9e137a8b40e2c6daeefa5026.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.66.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:43:53:33:70:b5:39:12:c5:ac:b8:db:25:24:69:fb:75:a5:
ef:99:7c:8b:5c:5e:8a:0a:82:8f:a6:9f:26:ab:4a:3b:69:07:
c5:7d:68:91:65:cc:ed:00:33:30:c6:c2:2e:76:41:f0:09:b0:
41:07:6c:68:94:e0:fd:08:e4:b7:6e:7b:7a:92:b8:ac:01:a4:
74:4d:f0:20:c6:b5:91:18:49:61:a2:da:f9:99:96:58:20:59:
6c:9c:f9:96:a2:28:3e:6d:92:e9:f8:b8:18:b9:15:d3:b2:0f:
0a:3e:96:7e:89:37:ef:58:bb:81:23:d5:8e:6b:29:11:bc:05:
65:c3:67:5a:70:09:b5:b2:bb:2a:22:44:05:75:57:c7:38:6f:
94:91:91:ed:6a:05:99:4e:48:48:45:25:4c:b5:eb:f6:e2:85:
bb:14:e1:2c:9c:71:ff:4c:e9:5f:66:5c:c3:78:8d:68:b7:62:
ab:03:da:73:81:08:48:df:a6:a0:73:ae:11:44:b4:e3:0c:55:
d4:68:02:68:e1:dd:b8:50:6c:d3:3f:32:ce:f7:93:22:cf:1f:
6e:57:a2:2e:08:27:af:a3:5c:57:40:0a:68:69:97:e1:a0:2a:
ad:fe:78:8a:77:2f:3e:61:ed:f1:cd:cc:4a:d2:01:2d:f9:84:
2a:c5:a9:fd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHRpHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIz
NTgwMDc4ZjRmODk3ZmNmZGJhYTBkOTBjMmVjNmY0NjBlMzMyMjIwHhcNMjEwMzI0
MTQzNDU3WhcNMjYwMzI0MTQzNDU3WjAzMTEwLwYDVQQDEyhhODg0ZmZiMjk2MDc5
MmZkOWUxMzdhOGI0MGUyYzZkYWVlZmE1MDI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp/5MlTAvAMBV5SaJcjBSKQFHWkPnHG1AMqzNdBWoJf2f/fJ9
/pJrizd4nsuRYypSePlQXzzRISYm8ZjnN9qTd/O7LZcDiTVsT9C6qVMgIuXxdS0m
pDPzri15Lk0VMmgOh7JFUexd8miD7ppWobugRQhCcoWIBkfCVt3ExpoBO5srl5HB
/8m3RQHC5pJ1Z6HpLG3b8WmMOGGw3D5gS5NS+JicVo+P/QEu/dfHgcrwGcK0bUlq
LEoH6EoJijxwcjJK9145WUxWSZORkapvnz7osxIRPCYQmozLZdvIE4ENEHa+Ea72
Lkj+18pQpf2GxDpEdvIj/tDlnFiqiYBXhZ4KvQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKecSEerclycRPUSawOnM2pDjw+1MB8GA1UdIwQYMBaAFN/Gyo1ROTKXljh0
TDeMs6BDDpW1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjM1ODAw
NzhmNGY4OTdmY2ZkYmFhMGQ5MGMyZWM2ZjQ2MGUzMzIyMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzIwYjU1OGEtODllMC00YzllLWI2YzgtZDdjNjk0
NjMyMTIwL2E4ODRmZmIyOTYwNzkyZmQ5ZTEzN2E4YjQwZTJjNmRhZWVmYTUwMjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMjBiNTU4YS04OWUwLTRjOWUtYjZjOC1kN2M2
OTQ2MzIxMjAvYjM1ODAwNzhmNGY4OTdmY2ZkYmFhMGQ5MGMyZWM2ZjQ2MGUzMzIy
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5CBDANBgkqhkiG9w0BAQsFAAOCAQEAe0NTM3C1ORLFrLjb
JSRp+3Wl75l8i1xeigqCj6afJqtKO2kHxX1okWXM7QAzMMbCLnZB8AmwQQdsaJTg
/Qjkt257epK4rAGkdE3wIMa1kRhJYaLa+ZmWWCBZbJz5lqIoPm2S6fi4GLkV07IP
Cj6Wfok371i7gSPVjmspEbwFZcNnWnAJtbK7KiJEBXVXxzhvlJGR7WoFmU5ISEUl
TLXr9uKFuxThLJxx/0zpX2Zcw3iNaLdiqwPac4EISN+moHOuEUS04wxV1GgCaOHd
uFBs0z8yzveTIs8fbleiLggnr6NcV0AKaGmX4aAqrf54incvPmHt8c3MStIBLfmE
KsWp/Q==
-----END CERTIFICATE-----
Generated at Wed Aug 30 17:58:48 2023 by rpki-client on console-ams.rpki-client.org