Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/d4d80c14ed6147eb605e95a5d49b7ece314974b5.roa
File: d4d80c14ed6147eb605e95a5d49b7ece314974b5.roa (raw, json)
Hash identifier: xFKGKlRTB2D8o5xYwODVWL644gfYc/4i/lJHbyeLr6o=
Subject key identifier: A3:DB:4C:82:F0:93:8B:B9:F5:F6:B0:30:02:A0:62:07:D8:15:95:C7
Certificate issuer: /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial: 0ADD70
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/d4d80c14ed6147eb605e95a5d49b7ece314974b5.roa
Signing time: Wed 16 Nov 2022 18:14:24 +0000
ROA not before: Mon 14 Nov 2022 18:09:23 +0000
ROA not after: Sat 16 Nov 2024 18:09:23 +0000
asID: 262182
IP address blocks: 201.217.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712048 (0xadd70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
Validity
Not Before: Nov 14 18:09:23 2022 GMT
Not After : Nov 16 18:09:23 2024 GMT
Subject: CN=d4d80c14ed6147eb605e95a5d49b7ece314974b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:75:df:42:00:5b:0c:2d:79:e5:cc:1b:9c:7b:
62:90:45:68:25:2d:1e:cb:72:0a:c6:6c:5a:ad:fa:
e9:2c:9a:0b:c5:ad:71:8e:2c:89:16:63:83:db:5a:
de:8f:66:56:40:b7:62:a4:d8:b9:65:05:a2:e3:d9:
a8:72:12:ed:18:89:fa:c0:ff:69:f7:ed:a3:79:09:
0f:b0:7b:af:3b:a2:05:20:97:e9:91:bf:08:3c:2f:
84:7e:b3:85:be:f3:fb:cb:95:78:b1:43:02:d6:26:
33:31:e9:25:47:1d:a4:ad:83:3d:50:5c:82:5f:c8:
13:d4:5f:be:1b:8f:c2:6f:04:f3:d0:b4:c5:d6:14:
18:64:25:6a:a9:13:14:66:99:60:f8:b3:6d:93:79:
88:e6:47:5e:cc:02:93:b7:fa:83:7a:8b:cd:6f:bc:
a4:49:0e:2b:63:cc:32:61:cf:a7:2d:c8:e6:40:9e:
6c:bb:92:b7:f5:62:8c:f3:48:d8:49:2c:e5:ff:4c:
d7:2c:cb:02:a3:bc:b6:40:d8:64:83:b6:f2:04:0e:
7e:7c:74:b1:43:e8:3b:95:a3:7e:9f:a3:c1:e1:1f:
d8:29:2b:d3:a9:14:a4:6a:88:d8:6c:6d:c1:c2:3a:
87:48:16:82:ac:82:5a:68:1a:bd:24:06:bd:7b:3a:
ee:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DB:4C:82:F0:93:8B:B9:F5:F6:B0:30:02:A0:62:07:D8:15:95:C7
X509v3 Authority Key Identifier:
keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/d4d80c14ed6147eb605e95a5d49b7ece314974b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.13.0/24
Signature Algorithm: sha256WithRSAEncryption
72:37:10:62:36:07:f6:5a:3f:be:dd:73:df:d1:61:d2:ce:ef:
2f:63:13:b6:5c:7c:2f:cc:e9:af:37:62:4e:bc:40:b3:00:a7:
1e:56:79:23:8c:1c:8d:88:92:a0:5d:58:b3:fc:60:c1:73:f5:
2c:b6:e6:b3:61:4d:05:23:91:55:48:11:71:e9:25:fa:22:10:
b4:32:09:c0:81:39:31:b9:a2:08:49:7b:44:46:bc:ba:0e:c8:
06:c7:72:24:49:f3:bf:3a:46:69:ac:cf:45:62:55:94:c4:ce:
8a:5f:7a:30:4c:fc:3f:13:45:da:41:b7:cf:65:cf:87:60:62:
e7:75:44:74:f7:6f:8c:d8:a6:5d:51:86:ba:24:76:fb:4f:e0:
09:34:07:c0:13:66:66:a3:85:7a:16:d1:77:22:f7:6e:51:42:
96:b9:e6:72:d7:7c:13:56:57:a0:7a:d1:d7:eb:9c:c9:94:4e:
8f:40:1c:99:07:7d:51:46:7d:79:fa:e6:2c:4c:9e:b2:a8:e1:
89:e9:c3:0b:eb:ba:1c:2d:44:af:e3:c7:d1:99:f8:5a:2d:f2:
1b:9d:10:46:91:65:8f:e9:16:55:b4:1f:6d:b7:f0:3d:2d:9e:
c1:4c:80:09:4e:f9:09:a7:8c:0e:ac:59:22:bd:92:d8:22:3d:
d1:73:74:0b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCt1wMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
NjlmYjM4N2JlZmM5NmYwMTlkMDE0YzZlNTIzNGQwOTU1NTUzYTkwHhcNMjIxMTE0
MTgwOTIzWhcNMjQxMTE2MTgwOTIzWjAzMTEwLwYDVQQDEyhkNGQ4MGMxNGVkNjE0
N2ViNjA1ZTk1YTVkNDliN2VjZTMxNDk3NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh3XfQgBbDC155cwbnHtikEVoJS0ey3IKxmxarfrpLJoLxa1x
jiyJFmOD21rej2ZWQLdipNi5ZQWi49mochLtGIn6wP9p9+2jeQkPsHuvO6IFIJfp
kb8IPC+EfrOFvvP7y5V4sUMC1iYzMeklRx2krYM9UFyCX8gT1F++G4/CbwTz0LTF
1hQYZCVqqRMUZplg+LNtk3mI5kdezAKTt/qDeovNb7ykSQ4rY8wyYc+nLcjmQJ5s
u5K39WKM80jYSSzl/0zXLMsCo7y2QNhkg7byBA5+fHSxQ+g7laN+n6PB4R/YKSvT
qRSkaojYbG3BwjqHSBaCrIJaaBq9JAa9ezruQwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKPbTILwk4u59fawMAKgYgfYFZXHMB8GA1UdIwQYMBaAFAyFBRRHaAvbICkP
JHQ1FbXmEmp/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ2OWZi
Mzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTRhZDY4ZTMtYTdmMC00ZDUxLTg2NTgtY2NmOWMy
NmQzZWE3L2Q0ZDgwYzE0ZWQ2MTQ3ZWI2MDVlOTVhNWQ0OWI3ZWNlMzE0OTc0YjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNGFkNjhlMy1hN2YwLTRkNTEtODY1OC1jY2Y5
YzI2ZDNlYTcvOTQ2OWZiMzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnZDTANBgkqhkiG9w0BAQsFAAOCAQEAcjcQYjYH9lo/vt1z
39Fh0s7vL2MTtlx8L8zprzdiTrxAswCnHlZ5I4wcjYiSoF1Ys/xgwXP1LLbms2FN
BSORVUgRcekl+iIQtDIJwIE5MbmiCEl7REa8ug7IBsdyJEnzvzpGaazPRWJVlMTO
il96MEz8PxNF2kG3z2XPh2Bi53VEdPdvjNimXVGGuiR2+0/gCTQHwBNmZqOFehbR
dyL3blFClrnmctd8E1ZXoHrR1+ucyZROj0AcmQd9UUZ9efrmLEyesqjhienDC+u6
HC1Er+PH0Zn4Wi3yG50QRpFlj+kWVbQfbbfwPS2ewUyACU75CaeMDqxZIr2S2CI9
0XN0Cw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org