Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/e88fba627c54b86cd7cec693d1840f720195b12c.roa
File: e88fba627c54b86cd7cec693d1840f720195b12c.roa (raw, json)
Hash identifier: sXdXWDHa9pxDy9zn0B/PanZHlaIOpjZU+Y8X2DJVEk8=
Subject key identifier: 2E:21:0C:69:B5:45:C8:5A:86:AF:B5:22:B7:67:C8:32:A5:5C:64:1C
Certificate issuer: /CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
Certificate serial: 271CE0
Authority key identifier: F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/e88fba627c54b86cd7cec693d1840f720195b12c.roa
Signing time: Wed 24 Jan 2024 07:30:00 +0000
ROA not before: Wed 24 Jan 2024 07:30:00 +0000
ROA not after: Fri 23 Jan 2026 07:30:00 +0000
asID: 266698
IP address blocks: 45.229.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 17:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2563296 (0x271ce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f0c6ca567a621ac3630c71d89a326071ce724c8
Validity
Not Before: Jan 24 07:30:00 2024 GMT
Not After : Jan 23 07:30:00 2026 GMT
Subject: CN=e88fba627c54b86cd7cec693d1840f720195b12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:53:d2:24:87:5e:63:e3:b4:35:57:12:24:35:
e5:13:39:9f:cf:b3:d8:21:cc:d5:8c:e9:4f:ec:23:
96:6f:9e:9b:07:86:83:5d:3a:26:52:cb:84:08:3f:
61:07:70:36:08:8c:47:a7:be:e3:60:ef:9e:64:fa:
03:18:23:5b:37:98:c3:bd:2a:95:5e:e0:90:08:e6:
89:00:7c:95:e8:47:10:6e:f5:a3:69:0d:be:bf:bd:
ba:fc:62:6e:c1:a2:3a:20:a9:60:32:c5:92:2b:27:
79:36:46:28:52:16:f2:a5:26:08:b2:1b:32:9b:d0:
20:0e:db:2c:59:97:96:a3:ac:c3:51:b2:32:ed:db:
f4:d7:d1:7b:f3:ab:86:4c:bd:35:10:a9:eb:7c:63:
01:5a:c9:fc:e3:23:ee:ee:a8:a5:06:5b:b0:e6:d7:
81:14:b7:90:da:be:e0:78:bd:eb:78:42:3b:ac:5b:
c6:10:3b:5c:9d:b1:51:6d:d6:d9:b7:d5:f2:c0:27:
b8:2b:3e:7d:d6:75:14:21:ea:13:3b:a5:0f:a1:b4:
9c:fc:32:9f:95:e2:84:a0:38:aa:03:3e:7d:48:7e:
11:98:60:17:42:19:e4:9b:61:26:d6:c8:3f:c3:f7:
52:70:90:28:ed:e9:fd:b9:87:b2:ea:64:78:2e:05:
3b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:21:0C:69:B5:45:C8:5A:86:AF:B5:22:B7:67:C8:32:A5:5C:64:1C
X509v3 Authority Key Identifier:
keyid:F2:BD:14:2E:3B:9C:DA:D7:10:C5:82:85:0C:39:CA:05:7D:8D:F0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f0c6ca567a621ac3630c71d89a326071ce724c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/e88fba627c54b86cd7cec693d1840f720195b12c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e78bc3a2-fea7-4d9a-b4f8-5768242561a2/7f0c6ca567a621ac3630c71d89a326071ce724c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.73.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ec:03:a6:25:7b:79:15:4e:d8:0f:45:d0:65:2f:2c:f8:b9:
9b:8f:99:7a:ba:f7:33:b5:22:74:dd:1c:77:cc:8b:f8:74:64:
41:d8:4a:f4:bb:8f:bc:e9:81:f9:0d:dd:4d:08:e4:80:ae:d1:
52:14:ce:70:cb:42:c1:3f:76:8a:46:e8:bb:90:02:17:93:4a:
f7:f2:dd:6b:e0:6f:3b:7d:00:c1:0a:a7:e4:4a:db:ef:1c:44:
64:bf:9c:2e:ac:b8:12:d9:68:27:8c:90:26:5a:61:dc:1a:35:
42:de:95:d1:07:e5:0c:2f:c9:ad:8e:10:18:6e:a0:d0:68:3e:
de:af:91:00:1c:6d:6d:54:83:c8:52:c6:84:e0:e8:12:df:67:
00:cf:7f:d1:d9:67:b0:59:27:7a:23:9d:18:c7:27:84:39:f0:
ab:7a:d1:1f:95:c1:57:60:05:97:79:92:59:43:38:40:9d:b3:
b6:47:41:47:f5:90:f9:c3:4f:8a:85:1d:dc:2d:c2:93:14:e9:
41:e1:2b:96:1d:e1:e7:9a:d1:20:b7:6f:bf:1a:d7:b3:f8:32:
e0:46:e0:b0:a6:07:ce:7f:c9:12:e1:2b:a8:35:ba:9d:bc:26:
1a:d1:6c:35:92:0c:3f:14:16:91:46:34:a2:44:fd:45:b1:e0:
9e:0c:cf:02
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJxzgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdm
MGM2Y2E1NjdhNjIxYWMzNjMwYzcxZDg5YTMyNjA3MWNlNzI0YzgwHhcNMjQwMTI0
MDczMDAwWhcNMjYwMTIzMDczMDAwWjAzMTEwLwYDVQQDEyhlODhmYmE2MjdjNTRi
ODZjZDdjZWM2OTNkMTg0MGY3MjAxOTViMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAk1PSJIdeY+O0NVcSJDXlEzmfz7PYIczVjOlP7COWb56bB4aD
XTomUsuECD9hB3A2CIxHp77jYO+eZPoDGCNbN5jDvSqVXuCQCOaJAHyV6EcQbvWj
aQ2+v726/GJuwaI6IKlgMsWSKyd5NkYoUhbypSYIshsym9AgDtssWZeWo6zDUbIy
7dv019F786uGTL01EKnrfGMBWsn84yPu7qilBluw5teBFLeQ2r7geL3reEI7rFvG
EDtcnbFRbdbZt9XywCe4Kz591nUUIeoTO6UPobSc/DKfleKEoDiqAz59SH4RmGAX
Qhnkm2Em1sg/w/dScJAo7en9uYey6mR4LgU70wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFC4hDGm1Rchahq+1IrdnyDKlXGQcMB8GA1UdIwQYMBaAFPK9FC47nNrXEMWC
hQw5ygV9jfC7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2YwYzZj
YTU2N2E2MjFhYzM2MzBjNzFkODlhMzI2MDcxY2U3MjRjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTc4YmMzYTItZmVhNy00ZDlhLWI0ZjgtNTc2ODI0
MjU2MWEyL2U4OGZiYTYyN2M1NGI4NmNkN2NlYzY5M2QxODQwZjcyMDE5NWIxMmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNzhiYzNhMi1mZWE3LTRkOWEtYjRmOC01NzY4
MjQyNTYxYTIvN2YwYzZjYTU2N2E2MjFhYzM2MzBjNzFkODlhMzI2MDcxY2U3MjRj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3lSTANBgkqhkiG9w0BAQsFAAOCAQEAJuwDpiV7eRVO2A9F
0GUvLPi5m4+Zerr3M7UidN0cd8yL+HRkQdhK9LuPvOmB+Q3dTQjkgK7RUhTOcMtC
wT92ikbou5ACF5NK9/Lda+BvO30AwQqn5Erb7xxEZL+cLqy4EtloJ4yQJlph3Bo1
Qt6V0QflDC/JrY4QGG6g0Gg+3q+RABxtbVSDyFLGhODoEt9nAM9/0dlnsFkneiOd
GMcnhDnwq3rRH5XBV2AFl3mSWUM4QJ2ztkdBR/WQ+cNPioUd3C3CkxTpQeErlh3h
55rRILdvvxrXs/gy4EbgsKYHzn/JEuErqDW6nbwmGtFsNZIMPxQWkUY0okT9RbHg
ngzPAg==
-----END CERTIFICATE-----
Generated at Thu Apr 4 20:21:25 2024 by rpki-client on console-fra.rpki-client.org