Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/5dfd2b7e081e406d7b586b625e75960b68438431.roa
File: 5dfd2b7e081e406d7b586b625e75960b68438431.roa (raw, json)
Hash identifier: pDg3PJW9enEXk955n+ba6hGWZP5kfCSN1lJxElYTbus=
Subject key identifier: 75:FA:17:63:B4:9D:6D:87:3F:D5:03:5F:EB:99:ED:11:09:C6:5F:2E
Certificate issuer: /CN=076e25208e9086c7775f52e507d559615ec76616
Certificate serial: 216084
Authority key identifier: 6F:24:C4:AF:14:A7:4A:B4:D2:12:56:3B:1E:C7:F0:26:7C:9D:9E:CC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/076e25208e9086c7775f52e507d559615ec76616.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/5dfd2b7e081e406d7b586b625e75960b68438431.roa
Signing time: Mon 10 Jul 2023 18:06:26 +0000
ROA not before: Sun 09 Jul 2023 18:06:26 +0000
ROA not after: Thu 10 Jul 2025 18:06:26 +0000
asID: 262589
IP address blocks: 143.0.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 11 Apr 2024 03:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2187396 (0x216084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076e25208e9086c7775f52e507d559615ec76616
Validity
Not Before: Jul 9 18:06:26 2023 GMT
Not After : Jul 10 18:06:26 2025 GMT
Subject: CN=5dfd2b7e081e406d7b586b625e75960b68438431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3a:80:85:b1:2b:a5:40:ee:73:64:6b:c8:53:
11:39:b4:ba:25:ef:11:38:84:17:b4:f8:c7:57:b7:
1c:b7:6c:0b:21:17:24:f6:40:42:a0:46:59:20:e1:
ea:1b:c7:2d:96:b9:9a:82:6e:18:19:1d:3a:af:57:
77:97:4e:8f:10:f1:23:20:4c:92:d2:cc:71:89:50:
cd:5c:6a:a9:3e:80:e1:b3:d0:79:c4:55:f6:9d:ed:
71:a5:2d:66:67:db:19:e9:af:a8:08:d3:dd:b4:22:
a3:98:d2:64:4a:3d:ca:c8:08:9b:c9:12:58:f2:47:
d4:67:c7:f7:81:f1:be:1d:c7:68:0d:1b:1e:98:0a:
d3:bb:8b:f5:a9:e2:31:e4:8f:15:cd:f7:76:94:c4:
d4:7b:7c:dc:ec:0f:cd:e5:f7:de:95:56:04:7d:f9:
aa:d8:39:4a:bb:5f:e0:d5:8c:39:b6:fd:4e:3a:42:
86:10:ca:a5:9c:cc:47:f6:49:10:18:68:d1:24:14:
b5:71:b4:06:9e:fa:f9:e7:2b:bc:0d:a0:80:63:63:
d9:3a:46:0a:b6:0b:ea:00:f3:5c:cd:ad:c5:1e:a5:
4a:53:39:bd:3c:b9:2c:b2:ca:32:c6:d1:d0:dd:dc:
e5:52:6c:c8:7a:6a:a6:41:b2:e5:c4:c4:bc:3e:16:
b7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FA:17:63:B4:9D:6D:87:3F:D5:03:5F:EB:99:ED:11:09:C6:5F:2E
X509v3 Authority Key Identifier:
keyid:6F:24:C4:AF:14:A7:4A:B4:D2:12:56:3B:1E:C7:F0:26:7C:9D:9E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/076e25208e9086c7775f52e507d559615ec76616.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/5dfd2b7e081e406d7b586b625e75960b68438431.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/076e25208e9086c7775f52e507d559615ec76616.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.108.0/22
Signature Algorithm: sha256WithRSAEncryption
74:c1:3a:8e:c4:a7:24:be:11:5e:b6:98:59:c9:98:ec:af:66:
db:47:c1:d8:38:89:5c:fb:9a:ce:5d:89:cb:c5:99:fd:72:a5:
fd:80:8a:90:7f:95:18:2f:4c:8b:bd:d6:8e:0e:2b:fc:44:23:
ac:19:18:fb:33:e4:f0:50:65:56:01:eb:1e:4f:1b:83:08:2c:
26:22:d2:a3:31:ea:f4:95:b2:62:94:ad:69:76:d7:e4:32:05:
c5:ae:cd:06:1c:4d:9a:70:60:e2:48:ea:a7:b4:92:03:1e:28:
c6:e9:5d:57:39:2f:b4:59:ca:33:b9:cf:5a:7a:e2:f6:f9:52:
fc:cd:a9:89:ec:f0:bd:7e:01:45:1d:c1:79:f9:7e:cd:ac:f6:
6c:5a:05:89:95:2a:20:17:df:8b:5f:08:5c:f2:41:20:09:32:
06:e5:f3:2c:23:3c:03:74:b8:c1:bf:5c:ce:b0:ef:de:ac:d4:
fb:f0:0b:7b:83:99:ea:30:e0:0b:86:85:05:d6:6f:d6:df:07:
1e:0a:c4:a5:4f:80:3b:04:56:07:1a:b2:97:20:78:0c:07:34:
59:96:d9:6d:58:a9:ec:b6:6e:bb:73:35:cd:40:c6:e7:2a:5e:
c4:a2:67:b3:23:a6:a7:6b:9b:a6:c6:32:3f:d2:ad:4d:0a:cb:
d9:63:47:0f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIWCEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA3
NmUyNTIwOGU5MDg2Yzc3NzVmNTJlNTA3ZDU1OTYxNWVjNzY2MTYwHhcNMjMwNzA5
MTgwNjI2WhcNMjUwNzEwMTgwNjI2WjAzMTEwLwYDVQQDEyg1ZGZkMmI3ZTA4MWU0
MDZkN2I1ODZiNjI1ZTc1OTYwYjY4NDM4NDMxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxzqAhbErpUDuc2RryFMRObS6Je8ROIQXtPjHV7cct2wLIRck
9kBCoEZZIOHqG8ctlrmagm4YGR06r1d3l06PEPEjIEyS0sxxiVDNXGqpPoDhs9B5
xFX2ne1xpS1mZ9sZ6a+oCNPdtCKjmNJkSj3KyAibyRJY8kfUZ8f3gfG+HcdoDRse
mArTu4v1qeIx5I8Vzfd2lMTUe3zc7A/N5ffelVYEffmq2DlKu1/g1Yw5tv1OOkKG
EMqlnMxH9kkQGGjRJBS1cbQGnvr55yu8DaCAY2PZOkYKtgvqAPNcza3FHqVKUzm9
PLksssoyxtHQ3dzlUmzIemqmQbLlxMS8Pha3YwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHX6F2O0nW2HP9UDX+uZ7REJxl8uMB8GA1UdIwQYMBaAFG8kxK8Up0q00hJW
Ox7H8CZ8nZ7MMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDc2ZTI1
MjA4ZTkwODZjNzc3NWY1MmU1MDdkNTU5NjE1ZWM3NjYxNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWIwY2RhNjUtZWJkYy00MjA1LThlYjgtZjUxMzIy
MjdkMWEwLzVkZmQyYjdlMDgxZTQwNmQ3YjU4NmI2MjVlNzU5NjBiNjg0Mzg0MzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYjBjZGE2NS1lYmRjLTQyMDUtOGViOC1mNTEz
MjIyN2QxYTAvMDc2ZTI1MjA4ZTkwODZjNzc3NWY1MmU1MDdkNTU5NjE1ZWM3NjYx
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAo8AbDANBgkqhkiG9w0BAQsFAAOCAQEAdME6jsSnJL4RXraY
WcmY7K9m20fB2DiJXPuazl2Jy8WZ/XKl/YCKkH+VGC9Mi73Wjg4r/EQjrBkY+zPk
8FBlVgHrHk8bgwgsJiLSozHq9JWyYpStaXbX5DIFxa7NBhxNmnBg4kjqp7SSAx4o
xuldVzkvtFnKM7nPWnri9vlS/M2piezwvX4BRR3Befl+zaz2bFoFiZUqIBffi18I
XPJBIAkyBuXzLCM8A3S4wb9czrDv3qzU+/ALe4OZ6jDgC4aFBdZv1t8HHgrEpU+A
OwRWBxqylyB4DAc0WZbZbVip7LZuu3M1zUDG5ypexKJnsyOmp2ubpsYyP9KtTQrL
2WNHDw==
-----END CERTIFICATE-----
Generated at Thu Apr 11 04:32:59 2024 by rpki-client on console-ams.rpki-client.org