Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/f3d8a877bf6f1c1c0e92e2fbf2ff62881945a520.roa
File: f3d8a877bf6f1c1c0e92e2fbf2ff62881945a520.roa (raw, json)
Hash identifier: J+96Ptni7biXFWBCYhgHXdAgPy7uVqpkQMb3B4SDMPg=
Subject key identifier: 4F:15:03:24:BE:07:AF:3C:A8:A1:D5:29:B3:36:F1:20:BE:E1:1B:85
Certificate issuer: /CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Certificate serial: 0D3701
Authority key identifier: EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/f3d8a877bf6f1c1c0e92e2fbf2ff62881945a520.roa
Signing time: Wed 24 Mar 2021 14:41:27 +0000
ROA not before: Wed 24 Mar 2021 14:41:27 +0000
ROA not after: Tue 24 Mar 2026 14:41:27 +0000
asID: 264668
IP address blocks: 45.225.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 17:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866049 (0xd3701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Validity
Not Before: Mar 24 14:41:27 2021 GMT
Not After : Mar 24 14:41:27 2026 GMT
Subject: CN=f3d8a877bf6f1c1c0e92e2fbf2ff62881945a520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:38:c5:80:f4:16:c3:56:28:9f:96:ec:5e:c3:
9c:33:c2:d5:b0:30:12:82:39:e2:dd:e1:a3:49:62:
7a:7e:87:d9:6b:26:a9:dd:ba:b0:e8:ec:fa:b8:e5:
4e:f6:93:02:94:45:68:db:48:90:65:09:8e:46:04:
89:59:ce:50:4d:21:cb:04:cc:5e:a6:58:51:08:dc:
bd:49:ff:d5:2c:1f:95:ff:1f:6c:fa:8d:35:9b:c6:
75:ea:6c:95:25:96:67:8b:29:b0:96:fc:95:3c:1b:
ed:e0:34:f3:68:6b:3e:a0:ae:12:1f:fd:3e:6b:7c:
94:19:6d:ee:fe:ff:11:ea:5a:94:67:27:ff:62:e7:
9e:93:28:8f:92:ca:69:c8:fe:ca:50:2a:2b:4c:de:
db:90:10:5f:47:49:ba:bd:b9:ff:61:1e:9f:52:51:
c9:1e:03:f8:32:9b:b4:b0:c0:4c:25:c7:5a:36:b0:
02:82:d4:33:e1:0b:a2:30:b9:9e:ea:b5:2e:9d:52:
7b:a1:ea:94:13:db:a6:26:dd:b7:a6:00:8a:42:03:
e2:26:13:2d:1d:dd:43:08:e9:cf:15:49:a2:45:00:
f1:e6:cf:1a:20:4d:de:c1:d8:ee:f2:ab:2d:c4:64:
c4:9d:25:c3:97:c1:37:13:74:40:32:6f:19:3b:22:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:15:03:24:BE:07:AF:3C:A8:A1:D5:29:B3:36:F1:20:BE:E1:1B:85
X509v3 Authority Key Identifier:
keyid:EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/f3d8a877bf6f1c1c0e92e2fbf2ff62881945a520.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.104.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:e6:40:ee:05:9d:ce:64:f0:03:c8:88:92:38:7e:37:e9:a6:
44:32:fc:e7:21:b9:0c:9f:72:8e:f2:82:d3:a2:74:63:bf:3e:
ac:62:e7:c8:38:9c:d5:33:3b:a5:64:be:29:94:b8:cc:d2:38:
c7:e2:a4:ba:23:73:60:99:d8:eb:a5:7b:fd:07:3b:53:48:f2:
15:b4:f2:e2:ba:40:ed:c1:08:bb:09:a9:85:42:a6:48:a9:2e:
5a:cc:d4:fc:9b:a8:cf:42:89:a4:4b:b8:7a:b8:a2:f3:0c:46:
c6:37:95:1e:d3:8b:f2:52:3f:e2:34:c8:8f:9e:c8:39:27:08:
7f:1a:ef:e9:d0:6f:a6:42:09:7b:9e:db:0b:05:1b:88:25:26:
83:a3:63:4c:c7:3a:6d:9c:18:f8:b0:d9:89:2d:07:e9:0c:ed:
f4:db:2a:1d:0e:ee:be:a0:6e:d5:7c:96:eb:c2:37:8c:5c:1a:
14:e8:56:a6:ad:eb:5e:38:68:49:bd:95:23:ad:e6:26:03:9b:
56:51:c9:8d:05:df:fd:29:30:e3:af:4e:11:ce:e1:65:7d:84:
b0:33:33:c7:50:7e:17:ce:f1:eb:23:e6:f8:d1:ae:62:68:ec:
51:99:97:fe:3b:85:b4:f6:41:63:97:26:2e:87:03:89:4d:0e:
08:26:54:b7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDTcBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
MWZlMGM0ZTY1MGEzMzhlODBiNDA2NmUzMWU0OWU4MTIyY2RlYjEwHhcNMjEwMzI0
MTQ0MTI3WhcNMjYwMzI0MTQ0MTI3WjAzMTEwLwYDVQQDEyhmM2Q4YTg3N2JmNmYx
YzFjMGU5MmUyZmJmMmZmNjI4ODE5NDVhNTIwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhjjFgPQWw1Yon5bsXsOcM8LVsDASgjni3eGjSWJ6fofZayap
3bqw6Oz6uOVO9pMClEVo20iQZQmORgSJWc5QTSHLBMxeplhRCNy9Sf/VLB+V/x9s
+o01m8Z16myVJZZniymwlvyVPBvt4DTzaGs+oK4SH/0+a3yUGW3u/v8R6lqUZyf/
YueekyiPksppyP7KUCorTN7bkBBfR0m6vbn/YR6fUlHJHgP4Mpu0sMBMJcdaNrAC
gtQz4QuiMLme6rUunVJ7oeqUE9umJt23pgCKQgPiJhMtHd1DCOnPFUmiRQDx5s8a
IE3ewdju8qstxGTEnSXDl8E3E3RAMm8ZOyIzHQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFE8VAyS+B688qKHVKbM28SC+4RuFMB8GA1UdIwQYMBaAFOz7MiMnJia//GJW
1tjVhZ/+q+gLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkxZmUw
YzRlNjUwYTMzOGU4MGI0MDY2ZTMxZTQ5ZTgxMjJjZGViMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzUzZDZmNjMtOTFlMS00NGVkLWFmY2QtMTYyMjA2
MGM3ODRjL2YzZDhhODc3YmY2ZjFjMWMwZTkyZTJmYmYyZmY2Mjg4MTk0NWE1MjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNTNkNmY2My05MWUxLTQ0ZWQtYWZjZC0xNjIy
MDYwYzc4NGMvZDkxZmUwYzRlNjUwYTMzOGU4MGI0MDY2ZTMxZTQ5ZTgxMjJjZGVi
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3haDANBgkqhkiG9w0BAQsFAAOCAQEAHOZA7gWdzmTwA8iI
kjh+N+mmRDL85yG5DJ9yjvKC06J0Y78+rGLnyDic1TM7pWS+KZS4zNI4x+KkuiNz
YJnY66V7/Qc7U0jyFbTy4rpA7cEIuwmphUKmSKkuWszU/Juoz0KJpEu4erii8wxG
xjeVHtOL8lI/4jTIj57IOScIfxrv6dBvpkIJe57bCwUbiCUmg6NjTMc6bZwY+LDZ
iS0H6Qzt9NsqHQ7uvqBu1XyW68I3jFwaFOhWpq3rXjhoSb2VI63mJgObVlHJjQXf
/Skw469OEc7hZX2EsDMzx1B+F87x6yPm+NGuYmjsUZmX/juFtPZBY5cmLocDiU0O
CCZUtw==
-----END CERTIFICATE-----
Generated at Thu Mar 28 20:49:16 2024 by rpki-client on console-ams.rpki-client.org