Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/f3fdfaee5ae3513253a9137c1695a09dad191d90.roa
File: f3fdfaee5ae3513253a9137c1695a09dad191d90.roa (raw, json)
Hash identifier: nnY5fYqmmq822eOAv92Of1k5Yys6J3LHw0fUM+DO604=
Subject key identifier: 1F:66:7E:D4:C6:CE:4B:CD:6D:0D:C3:08:CD:F3:DD:97:CA:A9:B8:97
Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial: 0B83FF
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/f3fdfaee5ae3513253a9137c1695a09dad191d90.roa
Signing time: Wed 24 Mar 2021 14:31:58 +0000
ROA not before: Wed 24 Mar 2021 14:31:57 +0000
ROA not after: Tue 24 Mar 2026 14:31:57 +0000
asID: 61486
IP address blocks: 170.210.72.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 754687 (0xb83ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Validity
Not Before: Mar 24 14:31:57 2021 GMT
Not After : Mar 24 14:31:57 2026 GMT
Subject: CN=f3fdfaee5ae3513253a9137c1695a09dad191d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f1:56:9c:85:32:6f:59:df:62:53:d1:d3:fa:
60:f6:0f:8b:f4:e0:84:f2:ed:6d:c3:e4:16:13:1e:
e2:31:9d:62:b6:7d:a3:af:10:66:a9:e9:e3:4e:14:
9b:92:e2:e9:20:ec:9c:ca:ba:a0:fa:da:6f:66:4f:
62:1f:5a:ad:83:3b:ee:e0:d6:8a:d9:4f:8b:6b:9e:
ac:2f:e4:de:28:71:cc:2c:8a:fa:53:42:d9:04:73:
ae:e0:00:bc:49:8c:de:d7:ed:27:08:21:1a:78:00:
98:0b:4a:a5:6b:2b:f8:73:6a:64:1b:2a:bf:da:5d:
66:05:92:73:97:21:a2:cf:6d:85:a6:1e:b7:1d:3c:
c5:d4:77:3a:d7:d2:51:a4:75:52:f6:b7:ab:14:b6:
46:23:2a:e7:27:93:9e:db:22:e0:f2:a7:62:7f:1d:
a7:c3:3a:e9:75:db:22:a5:33:96:8c:33:39:cb:dc:
16:0b:72:4c:d7:7c:70:b1:82:f9:2e:34:1f:21:14:
63:cd:89:db:f8:17:5b:63:a7:3c:ae:7a:0a:3f:69:
42:6a:76:0f:b2:a0:17:ac:f8:39:9b:15:38:eb:24:
5c:22:b7:b9:c3:bf:70:c2:99:bd:52:24:22:8e:7e:
ef:26:04:ae:86:f3:df:79:38:78:cb:65:68:fe:84:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:66:7E:D4:C6:CE:4B:CD:6D:0D:C3:08:CD:F3:DD:97:CA:A9:B8:97
X509v3 Authority Key Identifier:
keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/f3fdfaee5ae3513253a9137c1695a09dad191d90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.72.0/22
Signature Algorithm: sha256WithRSAEncryption
87:ba:3f:2c:08:0d:fd:ba:2c:fe:ea:42:83:13:85:ae:d0:63:
a8:4c:e0:45:4c:d7:59:6b:2d:24:69:e4:08:3b:b6:95:71:28:
44:ae:e1:7f:3e:c4:4b:3d:b2:93:2a:67:6d:f5:40:58:8c:f0:
6e:56:f7:db:6f:5f:15:3a:ab:d4:45:f1:a3:35:93:e5:76:96:
bc:ec:5c:b1:bd:9a:84:75:98:da:de:07:52:aa:db:7b:b7:53:
fe:ae:ba:42:2a:7b:2a:57:ef:d9:e6:ec:07:b5:fd:c5:1a:03:
d4:49:85:91:4d:83:16:6e:e7:fe:e2:aa:d1:6f:40:09:61:ee:
04:dd:70:4c:76:f4:a6:01:ac:a7:52:ab:da:e3:8a:03:87:74:
48:84:22:9e:6b:3b:b5:e4:50:12:5a:63:f3:e7:a5:86:d8:ac:
d9:a3:92:23:21:4f:63:91:fc:a3:d5:2c:a2:f0:da:51:8f:e2:
9a:f9:0b:d8:23:e3:f2:ab:17:d5:b3:cd:ef:0f:16:6d:62:62:
8e:a1:d4:cb:1a:83:15:6b:f5:3e:62:d2:17:3e:e6:d8:3b:80:
e9:08:3e:a9:8d:3b:6d:fb:88:ce:e8:f7:43:d1:a1:82:f5:02:
19:c4:46:85:89:26:80:65:66:3b:5a:32:75:80:1d:65:a7:51:
d6:b0:30:85
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC4P/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVl
YzkzMzQ3ODlkNGZiOTdiMGMwYWE0ODM1NjM5MDZhNWQ2OWI0YzIwHhcNMjEwMzI0
MTQzMTU3WhcNMjYwMzI0MTQzMTU3WjAzMTEwLwYDVQQDEyhmM2ZkZmFlZTVhZTM1
MTMyNTNhOTEzN2MxNjk1YTA5ZGFkMTkxZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAifFWnIUyb1nfYlPR0/pg9g+L9OCE8u1tw+QWEx7iMZ1itn2j
rxBmqenjThSbkuLpIOycyrqg+tpvZk9iH1qtgzvu4NaK2U+La56sL+TeKHHMLIr6
U0LZBHOu4AC8SYze1+0nCCEaeACYC0qlayv4c2pkGyq/2l1mBZJzlyGiz22Fph63
HTzF1Hc619JRpHVS9rerFLZGIyrnJ5Oe2yLg8qdifx2nwzrpddsipTOWjDM5y9wW
C3JM13xwsYL5LjQfIRRjzYnb+BdbY6c8rnoKP2lCanYPsqAXrPg5mxU46yRcIre5
w79wwpm9UiQijn7vJgSuhvPfeTh4y2Vo/oTQ5QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFB9mftTGzkvNbQ3DCM3z3ZfKqbiXMB8GA1UdIwQYMBaAFAiRqsSRgrsOBnj6
2ng1jFjfNFzLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWVjOTMz
NDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRjMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjhkNWJlNGQtZTc1MS00YzcwLTk2NmItY2ZmNWVk
N2JmNWJlL2YzZmRmYWVlNWFlMzUxMzI1M2E5MTM3YzE2OTVhMDlkYWQxOTFkOTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOGQ1YmU0ZC1lNzUxLTRjNzAtOTY2Yi1jZmY1
ZWQ3YmY1YmUvZWVjOTMzNDc4OWQ0ZmI5N2IwYzBhYTQ4MzU2MzkwNmE1ZDY5YjRj
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqrSSDANBgkqhkiG9w0BAQsFAAOCAQEAh7o/LAgN/bos/upC
gxOFrtBjqEzgRUzXWWstJGnkCDu2lXEoRK7hfz7ESz2ykypnbfVAWIzwblb3229f
FTqr1EXxozWT5XaWvOxcsb2ahHWY2t4HUqrbe7dT/q66Qip7Klfv2ebsB7X9xRoD
1EmFkU2DFm7n/uKq0W9ACWHuBN1wTHb0pgGsp1Kr2uOKA4d0SIQinms7teRQElpj
8+elhtis2aOSIyFPY5H8o9UsovDaUY/imvkL2CPj8qsX1bPN7w8WbWJijqHUyxqD
FWv1PmLSFz7m2DuA6Qg+qY07bfuIzuj3Q9GhgvUCGcRGhYkmgGVmO1oydYAdZadR
1rAwhQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:59 2023 by rpki-client on console-ams.rpki-client.org