Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed5fc3ec-59a1-438f-9389-0d71d0a85b5b/81b35c6ae76801f522c8bb901b028ee64a7aa8c3.roa
File: 81b35c6ae76801f522c8bb901b028ee64a7aa8c3.roa (raw, json)
Hash identifier: VHZfYy6vv1K9/11MHg2LtO70eMhh6cfjqQcRApq5NYU=
Subject key identifier: 34:35:ED:31:61:A2:F1:C4:39:02:7C:02:27:6B:C2:7D:F0:2B:C4:48
Certificate issuer: /CN=fc45a0da4b9457f1d354f1d490746e5603aea754
Certificate serial: 066F
Authority key identifier: 63:49:A9:6A:58:E9:0D:23:CC:54:06:77:E3:EA:EA:32:F3:15:D8:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc45a0da4b9457f1d354f1d490746e5603aea754.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ed5fc3ec-59a1-438f-9389-0d71d0a85b5b/81b35c6ae76801f522c8bb901b028ee64a7aa8c3.roa
Signing time: Mon 27 Jun 2022 17:33:55 +0000
ROA not before: Mon 27 Jun 2022 03:00:00 +0000
ROA not after: Thu 27 Jun 2024 03:00:00 +0000
asID: 3454
IP address blocks: 148.234.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Thu 29 Feb 2024 15:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1647 (0x66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc45a0da4b9457f1d354f1d490746e5603aea754
Validity
Not Before: Jun 27 03:00:00 2022 GMT
Not After : Jun 27 03:00:00 2024 GMT
Subject: CN=81b35c6ae76801f522c8bb901b028ee64a7aa8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:87:73:11:42:25:79:f9:a8:0e:20:71:25:
f9:18:8e:f4:87:42:9d:2d:2f:08:eb:d6:8d:a0:60:
ab:42:0a:3a:3c:9c:0c:ac:86:a8:0f:2a:5f:e5:85:
af:e9:05:f4:70:85:26:b1:43:60:d8:a1:59:52:2c:
26:fd:f9:64:18:83:21:4e:f0:e7:f0:19:92:0b:38:
b7:d4:47:53:49:82:71:7d:d5:05:68:27:73:41:8d:
ee:81:42:79:02:43:33:9f:0e:bd:6e:8f:72:40:2f:
8e:78:b7:a7:de:f6:d7:3d:af:54:3b:2e:a4:84:92:
25:13:32:f8:34:ed:7c:a2:88:49:1f:f1:2b:59:e5:
13:2a:f8:05:bd:9f:c4:23:3b:fc:be:e7:07:16:db:
a0:f4:a6:14:62:8b:a0:a2:1f:44:f6:03:70:91:c8:
44:f8:bb:89:e6:a1:e6:f0:11:2b:ee:88:db:0e:8a:
c7:0d:a9:71:85:63:ab:f1:9a:e7:9e:e2:3f:8a:04:
e7:b3:0d:7f:8f:bf:58:61:12:c0:94:53:fb:4f:f1:
0f:36:92:84:c8:65:02:3d:aa:96:ce:72:d7:11:b3:
fc:38:c9:77:fe:5f:16:1b:f5:36:b3:3d:da:11:90:
1b:5f:5e:8e:58:e8:7a:85:01:c8:0b:19:bd:95:85:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:35:ED:31:61:A2:F1:C4:39:02:7C:02:27:6B:C2:7D:F0:2B:C4:48
X509v3 Authority Key Identifier:
keyid:63:49:A9:6A:58:E9:0D:23:CC:54:06:77:E3:EA:EA:32:F3:15:D8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc45a0da4b9457f1d354f1d490746e5603aea754.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed5fc3ec-59a1-438f-9389-0d71d0a85b5b/81b35c6ae76801f522c8bb901b028ee64a7aa8c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ed5fc3ec-59a1-438f-9389-0d71d0a85b5b/fc45a0da4b9457f1d354f1d490746e5603aea754.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:3b:0b:51:de:a4:fc:b0:01:d8:3e:cb:7f:0b:00:a3:24:72:
11:cb:cf:4c:e4:ae:0a:e4:4e:40:df:6c:2c:ea:5c:6e:2a:14:
8b:b9:0c:8e:dc:ee:97:0a:fe:28:60:4f:92:95:34:cf:c5:02:
37:dd:9e:df:2f:63:70:98:f1:31:2f:36:f2:c6:a5:fc:92:cd:
c6:45:55:5c:95:e2:2f:4f:20:62:74:ea:f4:ff:8b:bd:24:bc:
70:bc:07:ab:3a:d0:b7:e2:f6:7f:e3:60:d0:91:e5:f1:53:46:
61:d0:cf:ce:b1:b8:8f:bf:23:a2:7c:e6:29:1b:a7:dd:b0:e1:
da:10:1b:4d:38:87:e6:6e:13:83:9c:f0:a3:67:77:94:aa:64:
aa:03:f9:0a:ec:fe:15:e5:e9:2c:d2:e3:24:0c:d9:16:9d:8a:
1c:da:f9:51:4a:64:90:06:cb:15:17:75:e2:03:45:d6:0b:ea:
27:4b:0f:b1:f4:85:06:a6:b5:f9:28:0f:a9:ca:bc:8d:eb:dd:
09:07:31:0f:dd:04:5c:47:f7:5d:e6:1e:ee:c2:56:bc:00:5b:
fa:5d:f2:0f:32:79:d4:0f:b5:ee:4e:6b:c1:c5:f7:ba:f5:f7:
4a:e4:b2:f0:ef:f0:00:09:72:1f:c2:87:ab:ad:8f:94:88:8f:
24:52:98:6e
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZmM0
NWEwZGE0Yjk0NTdmMWQzNTRmMWQ0OTA3NDZlNTYwM2FlYTc1NDAeFw0yMjA2Mjcw
MzAwMDBaFw0yNDA2MjcwMzAwMDBaMDMxMTAvBgNVBAMTKDgxYjM1YzZhZTc2ODAx
ZjUyMmM4YmI5MDFiMDI4ZWU2NGE3YWE4YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcHIdzEUIlefmoDiBxJfkYjvSHQp0tLwjr1o2gYKtCCjo8nAys
hqgPKl/lha/pBfRwhSaxQ2DYoVlSLCb9+WQYgyFO8OfwGZILOLfUR1NJgnF91QVo
J3NBje6BQnkCQzOfDr1uj3JAL454t6fe9tc9r1Q7LqSEkiUTMvg07XyiiEkf8StZ
5RMq+AW9n8QjO/y+5wcW26D0phRii6CiH0T2A3CRyET4u4nmoebwESvuiNsOiscN
qXGFY6vxmuee4j+KBOezDX+Pv1hhEsCUU/tP8Q82koTIZQI9qpbOctcRs/w4yXf+
XxYb9TazPdoRkBtfXo5Y6HqFAcgLGb2Vhf77AgMBAAGjggJaMIICVjAdBgNVHQ4E
FgQUNDXtMWGi8cQ5AnwCJ2vCffArxEgwHwYDVR0jBBgwFoAUY0mpaljpDSPMVAZ3
4+rqMvMV2JkwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9mYzQ1YTBk
YTRiOTQ1N2YxZDM1NGYxZDQ5MDc0NmU1NjAzYWVhNzU0LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9lZDVmYzNlYy01OWExLTQzOGYtOTM4OS0wZDcxZDBh
ODViNWIvODFiMzVjNmFlNzY4MDFmNTIyYzhiYjkwMWIwMjhlZTY0YTdhYThjMy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2VkNWZjM2VjLTU5YTEtNDM4Zi05Mzg5LTBkNzFk
MGE4NWI1Yi9mYzQ1YTBkYTRiOTQ1N2YxZDM1NGYxZDQ5MDc0NmU1NjAzYWVhNzU0
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8w
DTALBAIAATAFAwMAlOowDQYJKoZIhvcNAQELBQADggEBAHU7C1HepPywAdg+y38L
AKMkchHLz0zkrgrkTkDfbCzqXG4qFIu5DI7c7pcK/ihgT5KVNM/FAjfdnt8vY3CY
8TEvNvLGpfySzcZFVVyV4i9PIGJ06vT/i70kvHC8B6s60Lfi9n/jYNCR5fFTRmHQ
z86xuI+/I6J85ikbp92w4doQG004h+ZuE4Oc8KNnd5SqZKoD+Qrs/hXl6SzS4yQM
2Radihza+VFKZJAGyxUXdeIDRdYL6idLD7H0hQamtfkoD6nKvI3r3QkHMQ/dBFxH
913mHu7CVrwAW/pd8g8yedQPte5Oa8HF97r190rksvDv8AAJch/Ch6utj5SIjyRS
mG4=
-----END CERTIFICATE-----
Generated at Thu Feb 29 19:07:30 2024 by rpki-client on console-ams.rpki-client.org