Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/d8ae6f1a9cf4cd1a8a2feb8a5da3f84543f4a240.roa
File: d8ae6f1a9cf4cd1a8a2feb8a5da3f84543f4a240.roa (raw, json)
Hash identifier: Bv+tGCPaSLoxDONxmo11g6WXzo770DAoLimVyL3HQXQ=
Subject key identifier: 2E:AA:DF:58:E4:B6:AA:4A:8D:87:BF:F3:E1:7C:47:41:94:F6:BB:21
Certificate issuer: /CN=6e37ba61cda2665349146e3f47d9626599bc42f0
Certificate serial: 0D28E8
Authority key identifier: 95:AE:CE:6D:67:BE:1D:4E:2D:8F:34:DB:70:3E:01:B2:11:53:03:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e37ba61cda2665349146e3f47d9626599bc42f0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/d8ae6f1a9cf4cd1a8a2feb8a5da3f84543f4a240.roa
Signing time: Wed 24 Mar 2021 14:47:10 +0000
ROA not before: Wed 24 Mar 2021 14:47:09 +0000
ROA not after: Tue 24 Mar 2026 14:47:09 +0000
asID: 6057
IP address blocks: 167.56.0.0/13 maxlen: 24
167.108.0.0/16 maxlen: 24
167.116.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862440 (0xd28e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37ba61cda2665349146e3f47d9626599bc42f0
Validity
Not Before: Mar 24 14:47:09 2021 GMT
Not After : Mar 24 14:47:09 2026 GMT
Subject: CN=d8ae6f1a9cf4cd1a8a2feb8a5da3f84543f4a240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:72:55:9e:9c:69:3a:40:b8:a6:1a:f1:b9:
7f:ce:41:b3:54:7e:82:5a:a3:ec:7d:a5:39:71:c1:
20:9d:53:40:b3:4d:c6:12:c8:a8:d6:85:9c:89:4b:
c7:05:b9:0d:4d:03:44:b3:a4:6e:eb:6e:c5:5e:e0:
50:d2:49:54:2d:e8:11:3e:f9:08:07:c8:c2:c2:ca:
81:4b:52:3c:ef:06:f1:2a:a4:49:2a:32:11:d1:56:
f7:64:90:c4:6f:e3:3c:5c:80:5c:b1:64:36:29:4f:
68:5d:3f:05:20:66:1a:25:fd:48:47:80:42:13:22:
fa:d8:c4:41:1b:7e:eb:69:e7:63:77:ae:62:f9:d6:
25:0b:30:4a:6b:62:13:41:94:dc:7e:6e:39:98:6e:
e9:ac:1f:99:d4:c0:69:e6:e6:f3:c7:c0:fc:8c:e3:
72:1c:21:ce:2b:17:5f:74:00:f9:3e:d4:43:d5:ba:
f1:fb:c9:37:c0:f7:8c:2c:d4:48:90:54:bc:3b:9b:
60:c5:de:44:0e:e2:8c:a2:29:41:14:8a:c9:fa:93:
be:30:55:c1:a7:a2:3f:32:e5:2f:ce:4c:3a:ab:ac:
1f:05:a8:1a:fc:15:d4:2f:b9:88:86:27:9d:e9:15:
7c:2f:ed:79:58:80:6c:a1:83:2b:1e:39:f5:26:92:
10:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:DF:58:E4:B6:AA:4A:8D:87:BF:F3:E1:7C:47:41:94:F6:BB:21
X509v3 Authority Key Identifier:
keyid:95:AE:CE:6D:67:BE:1D:4E:2D:8F:34:DB:70:3E:01:B2:11:53:03:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e37ba61cda2665349146e3f47d9626599bc42f0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/d8ae6f1a9cf4cd1a8a2feb8a5da3f84543f4a240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/6e37ba61cda2665349146e3f47d9626599bc42f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.56.0.0/13
167.108.0.0/16
167.116.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:b6:75:be:57:b3:19:5c:2c:6d:7d:49:d9:bc:5a:70:b4:5c:
f9:c3:9a:83:14:23:07:76:20:73:19:90:a1:86:80:e1:f4:84:
fc:a4:fd:e2:a4:9a:67:ec:c8:ed:34:eb:fc:3f:4b:fa:15:c1:
dd:84:45:59:dc:8f:60:00:b1:e3:d9:0d:0b:fe:a9:6b:27:ef:
90:d1:31:10:6f:be:aa:a3:8d:b8:e2:e4:7d:bb:14:83:a1:cb:
d3:f6:26:ab:c6:d7:0a:a9:3e:72:31:eb:2a:83:a0:7c:97:fd:
ca:80:ce:06:1e:e9:9e:9e:13:12:48:94:80:6f:45:fc:2c:fe:
82:fd:f5:ab:97:ff:74:7b:f6:be:45:b2:24:35:5f:67:d7:3f:
07:c8:74:a4:22:1d:35:b2:c1:f6:77:3e:ad:1a:2c:f6:87:18:
18:f3:8c:4e:14:9d:3a:be:33:dc:b3:43:56:43:61:53:7f:f1:
a8:98:a6:84:9d:49:8d:a1:7f:d5:e6:6f:ab:26:6e:79:14:4d:
5a:fc:b1:7c:fa:5a:f6:9a:bd:25:af:05:ba:c9:87:2f:e3:91:
d3:5e:03:3f:9a:f1:b5:d5:de:db:f5:68:21:39:c6:d5:e8:60:
24:b7:f9:a5:6a:09:fc:89:99:1f:99:d3:5a:47:dd:1c:52:70:
18:37:f7:af
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIDDSjoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZl
MzdiYTYxY2RhMjY2NTM0OTE0NmUzZjQ3ZDk2MjY1OTliYzQyZjAwHhcNMjEwMzI0
MTQ0NzA5WhcNMjYwMzI0MTQ0NzA5WjAzMTEwLwYDVQQDEyhkOGFlNmYxYTljZjRj
ZDFhOGEyZmViOGE1ZGEzZjg0NTQzZjRhMjQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtvNyVZ6caTpAuKYa8bl/zkGzVH6CWqPsfaU5ccEgnVNAs03G
Esio1oWciUvHBbkNTQNEs6Ru627FXuBQ0klULegRPvkIB8jCwsqBS1I87wbxKqRJ
KjIR0Vb3ZJDEb+M8XIBcsWQ2KU9oXT8FIGYaJf1IR4BCEyL62MRBG37raedjd65i
+dYlCzBKa2ITQZTcfm45mG7prB+Z1MBp5ubzx8D8jONyHCHOKxdfdAD5PtRD1brx
+8k3wPeMLNRIkFS8O5tgxd5EDuKMoilBFIrJ+pO+MFXBp6I/MuUvzkw6q6wfBaga
/BXUL7mIhied6RV8L+15WIBsoYMrHjn1JpIQrQIDAQABo4ICZDCCAmAwHQYDVR0O
BBYEFC6q31jktqpKjYe/8+F8R0GU9rshMB8GA1UdIwQYMBaAFJWuzm1nvh1OLY80
23A+AbIRUwMSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmUzN2Jh
NjFjZGEyNjY1MzQ5MTQ2ZTNmNDdkOTYyNjU5OWJjNDJmMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmU5MWE3YWEtMmQxMC00NzhkLWFiYzAtYzM4ZjYw
NGYzNDg4L2Q4YWU2ZjFhOWNmNGNkMWE4YTJmZWI4YTVkYTNmODQ1NDNmNGEyNDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZTkxYTdhYS0yZDEwLTQ3OGQtYWJjMC1jMzhm
NjA0ZjM0ODgvNmUzN2JhNjFjZGEyNjY1MzQ5MTQ2ZTNmNDdkOTYyNjU5OWJjNDJm
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAoBggrBgEFBQcBBwEB/wQZ
MBcwFQQCAAEwDwMDA6c4AwMAp2wDAwCndDANBgkqhkiG9w0BAQsFAAOCAQEACrZ1
vlezGVwsbX1J2bxacLRc+cOagxQjB3YgcxmQoYaA4fSE/KT94qSaZ+zI7TTr/D9L
+hXB3YRFWdyPYACx49kNC/6payfvkNExEG++qqONuOLkfbsUg6HL0/Ymq8bXCqk+
cjHrKoOgfJf9yoDOBh7pnp4TEkiUgG9F/Cz+gv31q5f/dHv2vkWyJDVfZ9c/B8h0
pCIdNbLB9nc+rRos9ocYGPOMThSdOr4z3LNDVkNhU3/xqJimhJ1JjaF/1eZvqyZu
eRRNWvyxfPpa9pq9Ja8FusmHL+OR014DP5rxtdXe2/VoITnG1ehgJLf5pWoJ/ImZ
H5nTWkfdHFJwGDf3rw==
-----END CERTIFICATE-----
Generated at Fri Sep 1 15:37:17 2023 by rpki-client on console-ams.rpki-client.org