Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/c96440e28e8b2ba42aef66357ce0bff2a3c7bd78.roa
File: c96440e28e8b2ba42aef66357ce0bff2a3c7bd78.roa (raw, json)
Hash identifier: Zewp5RPT3n8UteSen/w1T7Bww8DKB7YXR+rD1CGjYSE=
Subject key identifier: E3:E9:89:67:5C:3C:07:38:E3:12:61:5B:50:39:8F:ED:8F:3A:D9:5B
Certificate issuer: /CN=0a6ca410e9d4d6609a966809763133d36a922b82
Certificate serial: 242086
Authority key identifier: 61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/c96440e28e8b2ba42aef66357ce0bff2a3c7bd78.roa
Signing time: Sat 07 Oct 2023 08:30:09 +0000
ROA not before: Fri 06 Oct 2023 08:30:09 +0000
ROA not after: Sun 05 Oct 2025 08:30:09 +0000
asID: 269799
IP address blocks: 201.182.243.0/24 maxlen: 24
2803:8420:ff00::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Apr 2024 16:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2367622 (0x242086)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a6ca410e9d4d6609a966809763133d36a922b82
Validity
Not Before: Oct 6 08:30:09 2023 GMT
Not After : Oct 5 08:30:09 2025 GMT
Subject: CN=c96440e28e8b2ba42aef66357ce0bff2a3c7bd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:31:05:0f:38:03:f9:af:86:a1:ef:63:40:
96:97:17:e0:69:fc:8b:56:a0:66:9d:df:29:2a:6a:
cc:a6:fc:eb:d7:f1:43:34:a3:2e:e0:96:77:48:df:
24:06:3d:6f:fb:59:15:c7:cb:fe:65:5b:98:d1:eb:
3a:1a:10:fd:e2:92:30:02:cb:76:9c:a5:a0:e0:ef:
da:32:d1:6d:7e:f5:7f:0e:51:36:43:a0:bd:9d:9a:
9a:2a:66:f9:47:6b:f9:f5:cf:79:94:9b:d6:56:9b:
ec:fa:a5:0a:9b:8c:de:81:0d:49:b0:6f:38:f4:6c:
4f:92:34:24:93:34:aa:59:78:87:78:fe:31:46:18:
34:1a:7f:f3:47:91:bb:f6:ce:33:e7:cb:5b:7d:7a:
31:ed:f9:75:76:91:7b:ac:7c:bd:1d:00:44:18:0b:
80:e8:8a:a2:60:9e:ff:ad:3a:3f:6b:0b:83:a3:ba:
52:55:c8:51:7b:a6:7d:47:27:a6:73:aa:10:2e:82:
d1:c1:0b:0a:2e:50:6f:c3:6e:67:8c:9b:5d:01:ba:
59:5e:28:8f:1d:c8:9b:0a:51:44:09:15:1d:6c:fd:
c7:af:bb:86:1f:5b:1e:46:88:88:3c:1f:fa:19:05:
f5:30:57:ae:fe:37:a0:9b:0d:7d:aa:4e:e9:eb:dd:
61:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E9:89:67:5C:3C:07:38:E3:12:61:5B:50:39:8F:ED:8F:3A:D9:5B
X509v3 Authority Key Identifier:
keyid:61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/c96440e28e8b2ba42aef66357ce0bff2a3c7bd78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/0a6ca410e9d4d6609a966809763133d36a922b82.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.182.243.0/24
IPv6:
2803:8420:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
9e:08:8f:ba:9d:f7:8a:48:0e:61:a3:36:87:d5:dc:b8:6e:b8:
f0:5e:6b:29:f6:60:d3:5e:e0:60:53:1a:cf:80:ec:b5:d5:cc:
6e:7a:39:32:b6:15:84:fc:69:f4:6a:2d:28:28:81:bb:a7:fc:
1f:d2:b7:58:4d:41:46:68:d0:01:ec:69:3b:54:4a:0a:b8:2a:
00:63:f0:c6:a8:36:d7:d5:35:c7:2b:cc:ed:69:1c:b8:5b:bc:
ef:f3:06:9a:72:e7:3c:f9:01:b4:55:a7:4c:8f:b9:1e:93:05:
4d:2d:0a:e2:0c:89:af:e7:c8:2e:42:8e:33:27:3f:99:be:f4:
1a:a3:89:f2:4f:cc:2d:53:da:10:34:d8:bf:3a:a9:d7:48:ff:
2a:9b:f9:45:b2:02:79:cf:c2:1a:90:9c:02:c7:01:74:62:aa:
a3:05:4c:cf:24:5d:b3:73:b2:3c:6f:6d:16:6a:6c:1b:88:53:
3c:c0:d2:8d:a3:13:f4:cd:64:00:de:f6:58:fc:25:6f:3b:0e:
be:81:70:1e:2d:d0:70:7a:30:4d:df:5b:22:fb:78:db:88:06:
2d:65:d8:68:93:d8:32:15:9e:ad:de:79:f0:e3:9e:d9:94:b6:
6e:ae:3f:6d:09:e9:71:06:d7:c0:99:00:a3:1b:70:84:62:39:
eb:69:d4:f6
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIDJCCGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBh
NmNhNDEwZTlkNGQ2NjA5YTk2NjgwOTc2MzEzM2QzNmE5MjJiODIwHhcNMjMxMDA2
MDgzMDA5WhcNMjUxMDA1MDgzMDA5WjAzMTEwLwYDVQQDEyhjOTY0NDBlMjhlOGIy
YmE0MmFlZjY2MzU3Y2UwYmZmMmEzYzdiZDc4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoW4xBQ84A/mvhqHvY0CWlxfgafyLVqBmnd8pKmrMpvzr1/FD
NKMu4JZ3SN8kBj1v+1kVx8v+ZVuY0es6GhD94pIwAst2nKWg4O/aMtFtfvV/DlE2
Q6C9nZqaKmb5R2v59c95lJvWVpvs+qUKm4zegQ1JsG849GxPkjQkkzSqWXiHeP4x
Rhg0Gn/zR5G79s4z58tbfXox7fl1dpF7rHy9HQBEGAuA6IqiYJ7/rTo/awuDo7pS
VchRe6Z9Ryemc6oQLoLRwQsKLlBvw25njJtdAbpZXiiPHcibClFECRUdbP3Hr7uG
H1seRoiIPB/6GQX1MFeu/jegmw19qk7p691hHQIDAQABo4ICazCCAmcwHQYDVR0O
BBYEFOPpiWdcPAc44xJhW1A5j+2POtlbMB8GA1UdIwQYMBaAFGHJZcaafzMxVG7p
0Egpgt9FnHY5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGE2Y2E0
MTBlOWQ0ZDY2MDlhOTY2ODA5NzYzMTMzZDM2YTkyMmI4Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGI4YmU2ODItZWE1Ni00NzQ3LWExMzItOGI1MDUw
OWY4MDhhL2M5NjQ0MGUyOGU4YjJiYTQyYWVmNjYzNTdjZTBiZmYyYTNjN2JkNzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYjhiZTY4Mi1lYTU2LTQ3NDctYTEzMi04YjUw
NTA5ZjgwOGEvMGE2Y2E0MTBlOWQ0ZDY2MDlhOTY2ODA5NzYzMTMzZDM2YTkyMmI4
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQg
MB4wDAQCAAEwBgMEAMm28zAOBAIAAjAIAwYAKAOEIP8wDQYJKoZIhvcNAQELBQAD
ggEBAJ4Ij7qd94pIDmGjNofV3LhuuPBeayn2YNNe4GBTGs+A7LXVzG56OTK2FYT8
afRqLSgogbun/B/St1hNQUZo0AHsaTtUSgq4KgBj8MaoNtfVNccrzO1pHLhbvO/z
Bppy5zz5AbRVp0yPuR6TBU0tCuIMia/nyC5CjjMnP5m+9BqjifJPzC1T2hA02L86
qddI/yqb+UWyAnnPwhqQnALHAXRiqqMFTM8kXbNzsjxvbRZqbBuIUzzA0o2jE/TN
ZADe9lj8JW87Dr6BcB4t0HB6ME3fWyL7eNuIBi1l2GiT2DIVnq3eefDjntmUtm6u
P20J6XEG18CZAKMbcIRiOetp1PY=
-----END CERTIFICATE-----
Generated at Tue Apr 9 20:10:13 2024 by rpki-client on console-fra.rpki-client.org