Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/2ee4f8124d863126bfd4f3312635ec394060353b.roa
File: 2ee4f8124d863126bfd4f3312635ec394060353b.roa (raw, json)
Hash identifier: c/pU8R0wbxZ9J6JR7TNQCaUMTnHc50G77zwxkzIHWDw=
Subject key identifier: 85:29:D4:81:54:02:DC:0A:50:D4:16:9E:7B:5B:E8:AE:13:D6:24:E5
Certificate issuer: /CN=965400f367a3b50c2a9a6934837510a29a8a229f
Certificate serial: 0145
Authority key identifier: A5:FD:1E:FC:E0:65:40:BA:F0:28:40:9B:1C:21:2B:70:C6:AE:E6:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/965400f367a3b50c2a9a6934837510a29a8a229f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/2ee4f8124d863126bfd4f3312635ec394060353b.roa
Signing time: Mon 22 Nov 2021 11:10:33 +0000
ROA not before: Mon 22 Nov 2021 03:00:00 +0000
ROA not after: Fri 22 Nov 2024 03:00:00 +0000
asID: 61317
IP address blocks: 138.99.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965400f367a3b50c2a9a6934837510a29a8a229f
Validity
Not Before: Nov 22 03:00:00 2021 GMT
Not After : Nov 22 03:00:00 2024 GMT
Subject: CN=2ee4f8124d863126bfd4f3312635ec394060353b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:a2:07:5c:30:82:f8:40:31:0b:ae:fd:c9:
f5:52:9c:08:9c:26:45:b6:c0:dc:f0:16:0c:71:95:
3e:7e:16:11:e2:1f:55:8c:8a:db:ce:80:c7:f2:40:
99:16:0f:82:5c:28:e1:b2:07:2e:fb:a4:7e:87:67:
5b:49:bb:b8:8e:33:15:37:0c:e4:f6:69:c1:1f:bb:
59:aa:87:af:11:dc:29:cb:9a:1d:2f:f8:5b:cc:11:
1d:86:25:e8:8e:71:64:db:90:0e:bb:bd:61:2e:ea:
f8:cc:76:86:8d:fe:5a:02:48:3e:dd:4c:8a:98:af:
a1:53:81:ba:20:a7:0f:eb:09:c8:1f:12:4a:68:bb:
d6:69:79:b0:0c:ca:82:3e:7b:1a:01:e6:0f:c6:db:
a3:46:08:bd:be:dc:60:e9:27:4f:da:6e:4b:c7:c6:
eb:79:e6:e3:0e:64:95:b7:53:08:69:55:16:68:64:
39:2c:54:22:fc:c7:7e:dc:04:98:ed:78:51:b3:95:
54:34:05:8d:f2:e7:12:17:14:e7:18:e3:4f:66:74:
ac:a6:48:49:27:87:72:60:1b:a9:4e:0d:60:c0:c3:
5b:97:1a:6d:77:32:94:fa:17:f7:c6:39:00:28:1f:
92:32:9a:0e:8c:e2:ab:0b:66:cb:50:a0:dd:81:69:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:29:D4:81:54:02:DC:0A:50:D4:16:9E:7B:5B:E8:AE:13:D6:24:E5
X509v3 Authority Key Identifier:
keyid:A5:FD:1E:FC:E0:65:40:BA:F0:28:40:9B:1C:21:2B:70:C6:AE:E6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/965400f367a3b50c2a9a6934837510a29a8a229f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/2ee4f8124d863126bfd4f3312635ec394060353b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f06b4ed2-191b-42ce-b493-8366f066efe0/965400f367a3b50c2a9a6934837510a29a8a229f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.211.0/24
Signature Algorithm: sha256WithRSAEncryption
43:65:8b:57:11:8d:19:5a:8e:b1:89:1f:d9:54:b8:36:a3:fd:
58:a7:f3:63:36:15:18:23:bb:45:6e:43:6e:26:20:95:87:71:
f5:47:7a:1a:c5:57:07:e2:b4:fd:7f:a4:cf:65:cf:6f:22:52:
38:6c:d3:6a:2c:8c:8e:e5:6c:34:f9:6a:b2:d8:12:9c:87:96:
78:76:bf:12:ab:b0:6a:d1:6e:2c:80:5e:e0:7d:24:fa:35:ec:
23:91:c8:e2:01:5e:e8:04:a4:4d:3d:66:84:2b:f4:46:4d:36:
09:84:b2:5e:1f:89:d6:1d:29:d3:ea:af:47:ba:3f:17:2d:a0:
ae:db:e2:9d:85:49:c3:aa:76:78:12:0b:7b:c2:6a:6a:3c:5b:
f6:47:2f:5a:f6:99:7c:08:68:4f:dc:53:fa:e8:04:1e:f5:f9:
d5:c5:68:27:78:86:ac:4d:c1:6d:57:06:d4:c7:5b:13:5f:47:
14:08:93:f4:2f:a4:79:3c:4d:f1:79:89:ea:04:d5:03:40:88:
b2:a5:4f:a8:cd:99:57:53:78:1a:e3:6a:38:34:9f:8a:f0:a4:
cd:dd:6b:b7:b0:c9:24:78:87:37:a8:53:c9:8b:51:c2:4c:c1:
67:cd:64:9c:3b:61:8c:b3:a0:10:74:a4:71:8d:03:77:b6:b6:
1c:38:ed:f9
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTY1
NDAwZjM2N2EzYjUwYzJhOWE2OTM0ODM3NTEwYTI5YThhMjI5ZjAeFw0yMTExMjIw
MzAwMDBaFw0yNDExMjIwMzAwMDBaMDMxMTAvBgNVBAMTKDJlZTRmODEyNGQ4NjMx
MjZiZmQ0ZjMzMTI2MzVlYzM5NDA2MDM1M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjbKIHXDCC+EAxC679yfVSnAicJkW2wNzwFgxxlT5+FhHiH1WM
itvOgMfyQJkWD4JcKOGyBy77pH6HZ1tJu7iOMxU3DOT2acEfu1mqh68R3CnLmh0v
+FvMER2GJeiOcWTbkA67vWEu6vjMdoaN/loCSD7dTIqYr6FTgbogpw/rCcgfEkpo
u9ZpebAMyoI+exoB5g/G26NGCL2+3GDpJ0/abkvHxut55uMOZJW3UwhpVRZoZDks
VCL8x37cBJjteFGzlVQ0BY3y5xIXFOcY409mdKymSEknh3JgG6lODWDAw1uXGm13
MpT6F/fGOQAoH5Iymg6M4qsLZstQoN2BaTPJAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUhSnUgVQC3ApQ1Baee1vorhPWJOUwHwYDVR0jBBgwFoAUpf0e/OBlQLrwKECb
HCErcMau5vIwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS85NjU0MDBm
MzY3YTNiNTBjMmE5YTY5MzQ4Mzc1MTBhMjlhOGEyMjlmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mMDZiNGVkMi0xOTFiLTQyY2UtYjQ5My04MzY2ZjA2
NmVmZTAvMmVlNGY4MTI0ZDg2MzEyNmJmZDRmMzMxMjYzNWVjMzk0MDYwMzUzYi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2YwNmI0ZWQyLTE5MWItNDJjZS1iNDkzLTgzNjZm
MDY2ZWZlMC85NjU0MDBmMzY3YTNiNTBjMmE5YTY5MzQ4Mzc1MTBhMjlhOGEyMjlm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAimPTMA0GCSqGSIb3DQEBCwUAA4IBAQBDZYtXEY0ZWo6xiR/Z
VLg2o/1Yp/NjNhUYI7tFbkNuJiCVh3H1R3oaxVcH4rT9f6TPZc9vIlI4bNNqLIyO
5Ww0+Wqy2BKch5Z4dr8Sq7Bq0W4sgF7gfST6NewjkcjiAV7oBKRNPWaEK/RGTTYJ
hLJeH4nWHSnT6q9Huj8XLaCu2+KdhUnDqnZ4Egt7wmpqPFv2Ry9a9pl8CGhP3FP6
6AQe9fnVxWgneIasTcFtVwbUx1sTX0cUCJP0L6R5PE3xeYnqBNUDQIiypU+ozZlX
U3ga42o4NJ+K8KTN3Wu3sMkkeIc3qFPJi1HCTMFnzWScO2GMs6AQdKRxjQN3trYc
OO35
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org