Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/be175558771dd2d72edf4fab834206ddef60f1e4.roa
File: be175558771dd2d72edf4fab834206ddef60f1e4.roa (raw, json)
Hash identifier: 2yqpsbLK5mi/cf/BevmDcFB/A58bJ40zbKGvB+EyOyU=
Subject key identifier: 8E:98:6C:0B:E8:EC:7A:23:E8:DA:34:9B:B8:62:EB:92:C2:02:1C:34
Certificate issuer: /CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Certificate serial: 11C522
Authority key identifier: 63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/be175558771dd2d72edf4fab834206ddef60f1e4.roa
Signing time: Fri 26 Nov 2021 00:18:37 +0000
ROA not before: Fri 26 Nov 2021 00:18:36 +0000
ROA not after: Thu 26 Nov 2026 00:18:36 +0000
asID: 265615
IP address blocks: 189.206.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1164578 (0x11c522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Validity
Not Before: Nov 26 00:18:36 2021 GMT
Not After : Nov 26 00:18:36 2026 GMT
Subject: CN=be175558771dd2d72edf4fab834206ddef60f1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:38:67:ba:f3:b6:5d:49:a1:a3:32:e4:69:
8d:c0:d3:41:29:93:97:cf:34:b6:27:6d:a4:5d:8d:
d7:f8:f0:ee:54:ed:fe:45:f5:ea:6a:74:48:91:3c:
d1:27:a7:58:46:aa:f9:c5:32:0f:81:14:b4:1c:2d:
db:90:40:17:97:48:ef:01:1a:55:d3:70:66:d7:d6:
32:e7:c1:2e:e8:50:b2:60:44:3f:1d:6b:7c:4e:fe:
78:ef:cd:d3:55:0e:8b:2f:55:74:54:63:99:2f:bc:
70:14:ae:a1:57:00:be:82:7e:31:0d:94:1f:34:4d:
4e:72:fc:ea:d9:89:0c:46:69:05:4e:44:a7:d7:b5:
76:e3:54:65:9b:29:05:82:4e:d9:e1:8c:4d:fa:85:
97:12:00:10:aa:bf:6a:3a:ba:e0:99:6a:12:db:44:
0f:06:51:7b:cb:54:42:a3:5f:20:9d:5c:30:49:90:
ae:a7:1a:2c:2a:7c:db:80:f4:a4:58:76:ef:56:66:
7e:48:a5:54:f0:21:19:ef:d9:8c:d3:b2:6a:c5:ed:
1a:5a:57:f6:2c:31:e1:35:c2:72:c7:75:44:6e:36:
9a:fb:a0:bc:e9:67:13:72:3c:f9:73:4f:48:bb:eb:
1b:60:5d:20:ef:bb:98:f2:52:87:24:a3:05:c8:6b:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:98:6C:0B:E8:EC:7A:23:E8:DA:34:9B:B8:62:EB:92:C2:02:1C:34
X509v3 Authority Key Identifier:
keyid:63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/be175558771dd2d72edf4fab834206ddef60f1e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/0932ed7fc7587a11240901c76c1f6f64f3020149.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.206.22.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:9d:27:c3:e7:f7:9c:fa:39:79:57:0b:d4:13:50:f9:0d:85:
ca:0d:c2:67:de:5e:99:d2:8c:31:b0:a9:bf:0f:b0:bc:a5:7a:
09:fc:e4:6f:3e:4a:d0:31:cb:87:71:95:2f:c4:7f:5b:d7:c1:
c9:19:48:ca:d3:fb:f3:49:05:be:54:5c:1f:ec:0c:f6:82:db:
95:f3:ca:4f:2a:8b:03:a9:05:0c:3e:34:2b:95:a6:c0:2d:84:
f3:e6:fd:a0:ad:92:12:41:48:09:c5:ad:35:c9:89:41:2a:c9:
97:05:6c:b9:48:d3:e1:33:0f:1a:5c:27:3f:b9:7d:54:fc:39:
78:6b:66:4c:0b:39:d1:30:10:c9:e3:0a:9a:8e:01:4f:27:d6:
ed:4c:b0:80:06:8a:e7:ca:18:15:16:0c:dd:78:8e:13:6a:cc:
0f:fe:45:ce:27:ee:3d:f6:eb:e4:8f:ed:76:c0:ee:fe:e9:05:
27:fc:2c:25:8d:fe:c8:bb:06:56:58:4b:5f:cf:d6:e3:1e:d4:
7e:98:1c:4c:10:37:03:7e:ec:28:88:31:99:a0:31:a8:e5:fe:
ef:e0:24:32:5f:bd:2c:2a:31:0f:4e:10:4d:dd:ae:0c:61:fa:
ea:db:79:6e:15:14:09:1d:da:c8:b0:b8:6e:07:39:aa:67:bc:
f7:fb:7b:b9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEcUiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
MzJlZDdmYzc1ODdhMTEyNDA5MDFjNzZjMWY2ZjY0ZjMwMjAxNDkwHhcNMjExMTI2
MDAxODM2WhcNMjYxMTI2MDAxODM2WjAzMTEwLwYDVQQDEyhiZTE3NTU1ODc3MWRk
MmQ3MmVkZjRmYWI4MzQyMDZkZGVmNjBmMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiI04Z7rztl1JoaMy5GmNwNNBKZOXzzS2J22kXY3X+PDuVO3+
RfXqanRIkTzRJ6dYRqr5xTIPgRS0HC3bkEAXl0jvARpV03Bm19Yy58Eu6FCyYEQ/
HWt8Tv54783TVQ6LL1V0VGOZL7xwFK6hVwC+gn4xDZQfNE1Ocvzq2YkMRmkFTkSn
17V241RlmykFgk7Z4YxN+oWXEgAQqr9qOrrgmWoS20QPBlF7y1RCo18gnVwwSZCu
pxosKnzbgPSkWHbvVmZ+SKVU8CEZ79mM07Jqxe0aWlf2LDHhNcJyx3VEbjaa+6C8
6WcTcjz5c09Iu+sbYF0g77uY8lKHJKMFyGutkwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFI6YbAvo7Hoj6No0m7hi65LCAhw0MB8GA1UdIwQYMBaAFGPl5w+iPAyAg36h
/pZQdpXAzl7/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDkzMmVk
N2ZjNzU4N2ExMTI0MDkwMWM3NmMxZjZmNjRmMzAyMDE0OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjI1MDA5M2MtYmE5OC00OGI4LThjNTItOWFiZTU3
ZDUyZDRmL2JlMTc1NTU4NzcxZGQyZDcyZWRmNGZhYjgzNDIwNmRkZWY2MGYxZTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMjUwMDkzYy1iYTk4LTQ4YjgtOGM1Mi05YWJl
NTdkNTJkNGYvMDkzMmVkN2ZjNzU4N2ExMTI0MDkwMWM3NmMxZjZmNjRmMzAyMDE0
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL3OFjANBgkqhkiG9w0BAQsFAAOCAQEAS50nw+f3nPo5eVcL
1BNQ+Q2Fyg3CZ95emdKMMbCpvw+wvKV6Cfzkbz5K0DHLh3GVL8R/W9fByRlIytP7
80kFvlRcH+wM9oLblfPKTyqLA6kFDD40K5WmwC2E8+b9oK2SEkFICcWtNcmJQSrJ
lwVsuUjT4TMPGlwnP7l9VPw5eGtmTAs50TAQyeMKmo4BTyfW7UywgAaK58oYFRYM
3XiOE2rMD/5FzifuPfbr5I/tdsDu/ukFJ/wsJY3+yLsGVlhLX8/W4x7UfpgcTBA3
A37sKIgxmaAxqOX+7+AkMl+9LCoxD04QTd2uDGH66tt5bhUUCR3ayLC4bgc5qme8
9/t7uQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org