Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/3539ec0f72aa56ea0e779d723faffee33925f8b8.roa
File: 3539ec0f72aa56ea0e779d723faffee33925f8b8.roa (raw, json)
Hash identifier: NTviZQdXuGBwUxqLqPstd5DPv7aXvp0qalm3TxajdRg=
Subject key identifier: 81:0A:E9:AE:6D:42:5F:EA:76:32:81:B6:85:35:38:40:D6:F3:87:58
Certificate issuer: /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial: 0CD413
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/3539ec0f72aa56ea0e779d723faffee33925f8b8.roa
Signing time: Wed 24 Mar 2021 14:39:20 +0000
ROA not before: Wed 24 Mar 2021 14:39:20 +0000
ROA not after: Tue 24 Mar 2026 14:39:20 +0000
asID: 264668
IP address blocks: 157.100.52.0/22 maxlen: 24
157.100.56.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840723 (0xcd413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Validity
Not Before: Mar 24 14:39:20 2021 GMT
Not After : Mar 24 14:39:20 2026 GMT
Subject: CN=3539ec0f72aa56ea0e779d723faffee33925f8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:80:59:8f:11:4d:5c:ef:01:2a:2b:a7:e8:
dd:3c:0d:63:8e:2c:db:25:67:d1:08:12:35:69:e8:
c7:3c:33:b3:eb:f3:a1:2f:07:76:44:9a:c9:fb:e8:
7e:cb:16:d0:d1:e4:fb:82:7f:3d:b3:2a:bb:6c:4d:
2f:e0:f0:50:1c:b8:db:7d:62:0b:01:ba:fa:e6:51:
75:2f:c6:3b:63:94:fa:b0:0c:3d:ab:6a:03:c3:9d:
66:cc:f3:23:77:91:b6:02:25:86:90:f9:60:41:d7:
5d:9d:3c:d6:4a:e1:f2:c8:5c:7e:47:3b:91:19:21:
e3:bf:f6:b8:ed:6e:58:fd:8a:c4:cd:0a:79:90:5e:
a4:7e:e1:55:5e:96:13:f9:20:b6:2b:e0:fc:e0:15:
04:6a:e0:de:68:e2:5c:cd:46:d4:dc:3f:2f:09:4e:
47:f5:98:41:28:18:8a:e1:a0:98:69:b2:b8:56:96:
61:4c:16:31:77:6b:bb:2e:7f:b6:2b:84:f0:42:cf:
29:ee:3e:88:77:df:b5:6c:a7:01:28:2d:70:c2:8b:
06:8f:cc:df:5e:cc:89:7e:c3:ab:87:0a:0c:9c:24:
5e:85:56:45:dd:08:a1:c9:09:7c:28:3a:f8:5b:c9:
ec:03:c6:d9:a8:d5:7f:01:c9:bf:8d:28:2b:01:e7:
78:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0A:E9:AE:6D:42:5F:EA:76:32:81:B6:85:35:38:40:D6:F3:87:58
X509v3 Authority Key Identifier:
keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/3539ec0f72aa56ea0e779d723faffee33925f8b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.100.52.0-157.100.59.255
Signature Algorithm: sha256WithRSAEncryption
21:a4:a9:83:de:7a:67:00:f9:d0:67:33:d2:c3:dc:35:bc:83:
9a:64:69:97:ff:90:71:58:6a:ab:28:37:0d:31:79:f4:43:c5:
1e:89:17:66:80:4d:3d:cf:6e:0d:29:0b:34:64:d1:86:ce:76:
19:09:72:e5:92:78:40:29:48:53:e2:a5:4c:17:d1:b7:b6:70:
cb:b1:02:2f:65:13:a7:5f:60:60:c4:d5:86:f5:a0:4f:c0:36:
19:f8:73:5c:0d:84:ff:cc:8e:13:07:25:6b:5f:12:ef:cb:ce:
d4:bf:a5:2d:d2:2d:a7:5e:45:36:1d:32:c4:2f:ab:54:3c:69:
6a:16:65:04:0c:55:54:df:ef:27:44:3a:53:c7:4e:43:4d:e2:
39:ef:73:2f:3a:8a:09:4e:5d:0d:10:6c:79:ff:55:c8:ed:8c:
7b:5e:ed:2a:92:21:84:cf:51:3e:09:44:c7:25:87:b5:81:1e:
cc:e5:ac:d3:cf:ef:a2:54:9b:ce:5f:fc:61:e0:e7:12:02:93:
a2:24:be:e9:33:1f:0f:ae:b5:28:1d:ea:4c:87:0f:a0:90:71:
bd:a2:45:78:ff:e1:cd:39:c6:1e:e5:13:42:1b:1b:ba:b4:de:
93:07:26:89:4d:c5:6a:80:a1:18:c1:89:5e:ad:06:57:01:90:
8a:b6:22:2f
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDDNQTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
MWVhNWUyYWJhNGM2YzA5MjllYWJmMGExNGI4OGY0MDNhNzI2ZTIwHhcNMjEwMzI0
MTQzOTIwWhcNMjYwMzI0MTQzOTIwWjAzMTEwLwYDVQQDEygzNTM5ZWMwZjcyYWE1
NmVhMGU3NzlkNzIzZmFmZmVlMzM5MjVmOGI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnK6AWY8RTVzvASorp+jdPA1jjizbJWfRCBI1aejHPDOz6/Oh
Lwd2RJrJ++h+yxbQ0eT7gn89syq7bE0v4PBQHLjbfWILAbr65lF1L8Y7Y5T6sAw9
q2oDw51mzPMjd5G2AiWGkPlgQdddnTzWSuHyyFx+RzuRGSHjv/a47W5Y/YrEzQp5
kF6kfuFVXpYT+SC2K+D84BUEauDeaOJczUbU3D8vCU5H9ZhBKBiK4aCYabK4VpZh
TBYxd2u7Ln+2K4TwQs8p7j6Id9+1bKcBKC1wwosGj8zfXsyJfsOrhwoMnCRehVZF
3QihyQl8KDr4W8nsA8bZqNV/Acm/jSgrAed4tQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFIEK6a5tQl/qdjKBtoU1OEDW84dYMB8GA1UdIwQYMBaAFLY/3JXBPG71vVGE
Wglkv+ALFJ6OMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzAxZWE1
ZTJhYmE0YzZjMDkyOWVhYmYwYTE0Yjg4ZjQwM2E3MjZlMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTU5NDg0MzQtNDA1Ni00Mzk0LWI3YTctNDMzZjUx
NzUxNzNhLzM1MzllYzBmNzJhYTU2ZWEwZTc3OWQ3MjNmYWZmZWUzMzkyNWY4Yjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNTk0ODQzNC00MDU2LTQzOTQtYjdhNy00MzNm
NTE3NTE3M2EvNzAxZWE1ZTJhYmE0YzZjMDkyOWVhYmYwYTE0Yjg4ZjQwM2E3MjZl
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQCnWQ0AwQCnWQ4MA0GCSqGSIb3DQEBCwUAA4IBAQAhpKmD
3npnAPnQZzPSw9w1vIOaZGmX/5BxWGqrKDcNMXn0Q8UeiRdmgE09z24NKQs0ZNGG
znYZCXLlknhAKUhT4qVMF9G3tnDLsQIvZROnX2BgxNWG9aBPwDYZ+HNcDYT/zI4T
ByVrXxLvy87Uv6Ut0i2nXkU2HTLEL6tUPGlqFmUEDFVU3+8nRDpTx05DTeI573Mv
OooJTl0NEGx5/1XI7Yx7Xu0qkiGEz1E+CUTHJYe1gR7M5azTz++iVJvOX/xh4OcS
ApOiJL7pMx8PrrUoHepMhw+gkHG9okV4/+HNOcYe5RNCGxu6tN6TByaJTcVqgKEY
wYlerQZXAZCKtiIv
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org