Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/6a5dbf4f0b13ec484b35ee3e77d00850d1846272.roa
File: 6a5dbf4f0b13ec484b35ee3e77d00850d1846272.roa (raw, json)
Hash identifier: WWs3Ado2AmUdYM+oeyvTMtM07hyGPmWxDaZI9p8Nutk=
Subject key identifier: 85:2F:C1:17:74:B9:6E:D2:6C:2A:14:7F:70:90:CD:CD:59:1D:FE:7D
Certificate issuer: /CN=68f7a0910bc6c4f99cea989c6355a0951ef0b528
Certificate serial: 1A2BD0
Authority key identifier: 6B:8C:3D:C3:47:40:C7:C9:00:8B:09:AE:D1:04:97:E0:B1:6A:6F:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68f7a0910bc6c4f99cea989c6355a0951ef0b528.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/6a5dbf4f0b13ec484b35ee3e77d00850d1846272.roa
Signing time: Wed 10 Aug 2022 17:06:36 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 264746
IP address blocks: 191.97.64.0/24 maxlen: 24
191.97.65.0/24 maxlen: 24
191.97.66.0/24 maxlen: 24
191.97.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1715152 (0x1a2bd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f7a0910bc6c4f99cea989c6355a0951ef0b528
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=6a5dbf4f0b13ec484b35ee3e77d00850d1846272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:a0:84:6d:4c:0b:43:f1:9a:4b:c0:05:b1:
38:9c:e5:37:91:f7:07:1f:5f:51:25:f3:7f:32:df:
ef:f2:9b:7c:28:48:e1:cb:ca:35:89:a5:30:ae:35:
38:39:a0:53:cc:f7:56:9f:66:74:25:ae:62:3f:bc:
93:9a:d7:81:c2:9d:4b:b7:f0:ad:6e:1d:e9:e2:c3:
9c:7d:b8:69:2d:8f:30:f7:ae:aa:0c:c2:5b:c0:11:
93:fe:20:91:04:fa:76:87:b9:5e:26:34:98:bd:43:
99:26:77:0a:9a:b2:ee:17:98:28:ff:7f:3f:61:f0:
64:fe:e2:d9:a3:87:15:a0:06:45:c5:35:d8:88:3e:
fb:86:33:ad:fa:15:4e:07:0e:f1:a8:6e:34:70:26:
86:65:f4:c4:93:0d:72:06:83:4e:4f:fd:a0:40:ca:
0f:7e:fb:44:50:42:16:72:7a:47:89:30:04:35:1f:
99:42:f7:8f:c2:b9:1d:9a:00:ff:2f:a2:4e:b7:e0:
4f:eb:c6:37:29:02:a5:f0:2d:af:c4:11:43:09:58:
3d:04:2d:50:6a:5c:aa:91:0a:2f:9a:1e:5a:39:f3:
b8:3c:f4:70:cc:a5:53:4c:fc:54:3c:cf:aa:df:97:
71:a0:0f:a1:63:84:2a:53:3a:ca:2e:fe:28:ce:55:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2F:C1:17:74:B9:6E:D2:6C:2A:14:7F:70:90:CD:CD:59:1D:FE:7D
X509v3 Authority Key Identifier:
keyid:6B:8C:3D:C3:47:40:C7:C9:00:8B:09:AE:D1:04:97:E0:B1:6A:6F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68f7a0910bc6c4f99cea989c6355a0951ef0b528.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/6a5dbf4f0b13ec484b35ee3e77d00850d1846272.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d76b6fa5-88c4-4269-bdde-3fcc865b8380/68f7a0910bc6c4f99cea989c6355a0951ef0b528.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.64.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:e9:b2:5f:b8:60:68:69:23:26:09:8c:98:4f:1d:ba:c4:b0:
f3:62:44:04:6c:87:8c:5a:96:e7:b6:ac:29:dd:1e:b2:e7:a4:
a9:c8:1b:1f:96:0d:c8:c9:87:18:f8:f6:39:48:79:c9:22:b1:
7e:75:72:9a:e6:54:c7:39:ad:e5:31:b1:c7:3b:3e:46:94:8d:
cb:67:8b:4c:57:2a:8a:58:c1:9f:bf:01:90:50:e4:52:03:8e:
16:1e:1d:6a:41:17:8e:f7:e6:ef:3e:b1:fa:d1:cf:72:99:49:
35:f0:77:7a:aa:2e:c4:f6:8c:61:2e:e4:99:13:7f:91:df:4a:
35:86:04:ca:be:3b:04:17:b5:f1:5f:af:1b:e9:f4:3f:ec:09:
ba:23:fb:9b:5f:ae:be:af:0e:90:3c:3d:22:5a:98:29:ea:12:
c0:b7:e7:a0:60:5b:50:de:e4:2b:96:0d:ec:22:a2:f0:a6:81:
82:91:52:56:87:9c:89:8b:c8:38:e5:44:0f:af:31:fb:af:19:
a3:e3:f6:3d:01:3f:0b:5a:d4:95:fa:1b:f5:a6:a4:dc:53:85:
e1:0d:34:67:7f:bb:de:e1:51:53:ac:03:4d:26:70:e7:4d:13:
68:cf:04:09:8e:29:23:5b:bf:a3:b0:ce:0a:b6:2a:ec:88:ff:
dc:07:0c:17
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGivQMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY4
ZjdhMDkxMGJjNmM0Zjk5Y2VhOTg5YzYzNTVhMDk1MWVmMGI1MjgwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyg2YTVkYmY0ZjBiMTNl
YzQ4NGIzNWVlM2U3N2QwMDg1MGQxODQ2MjcyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlzmghG1MC0PxmkvABbE4nOU3kfcHH19RJfN/Mt/v8pt8KEjh
y8o1iaUwrjU4OaBTzPdWn2Z0Ja5iP7yTmteBwp1Lt/Ctbh3p4sOcfbhpLY8w966q
DMJbwBGT/iCRBPp2h7leJjSYvUOZJncKmrLuF5go/38/YfBk/uLZo4cVoAZFxTXY
iD77hjOt+hVOBw7xqG40cCaGZfTEkw1yBoNOT/2gQMoPfvtEUEIWcnpHiTAENR+Z
QvePwrkdmgD/L6JOt+BP68Y3KQKl8C2vxBFDCVg9BC1QalyqkQovmh5aOfO4PPRw
zKVTTPxUPM+q35dxoA+hY4QqUzrKLv4ozlUZ+wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIUvwRd0uW7SbCoUf3CQzc1ZHf59MB8GA1UdIwQYMBaAFGuMPcNHQMfJAIsJ
rtEEl+Cxam8kMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjhmN2Ew
OTEwYmM2YzRmOTljZWE5ODljNjM1NWEwOTUxZWYwYjUyOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDc2YjZmYTUtODhjNC00MjY5LWJkZGUtM2ZjYzg2
NWI4MzgwLzZhNWRiZjRmMGIxM2VjNDg0YjM1ZWUzZTc3ZDAwODUwZDE4NDYyNzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNzZiNmZhNS04OGM0LTQyNjktYmRkZS0zZmNj
ODY1YjgzODAvNjhmN2EwOTEwYmM2YzRmOTljZWE5ODljNjM1NWEwOTUxZWYwYjUy
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr9hQDANBgkqhkiG9w0BAQsFAAOCAQEAwemyX7hgaGkjJgmM
mE8dusSw82JEBGyHjFqW57asKd0esuekqcgbH5YNyMmHGPj2OUh5ySKxfnVymuZU
xzmt5TGxxzs+RpSNy2eLTFcqiljBn78BkFDkUgOOFh4dakEXjvfm7z6x+tHPcplJ
NfB3eqouxPaMYS7kmRN/kd9KNYYEyr47BBe18V+vG+n0P+wJuiP7m1+uvq8OkDw9
IlqYKeoSwLfnoGBbUN7kK5YN7CKi8KaBgpFSVoeciYvIOOVED68x+68Zo+P2PQE/
C1rUlfob9aak3FOF4Q00Z3+73uFRU6wDTSZw500TaM8ECY4pI1u/o7DOCrYq7Ij/
3AcMFw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org