Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/f5808655f68bbf0d4840a5d4dc333130791c802a.roa
File: f5808655f68bbf0d4840a5d4dc333130791c802a.roa (raw, json)
Hash identifier: xo/3ziO+d8LfsJKLMfO8+PUNW7shhzw/Wju4H8SQTD8=
Subject key identifier: 04:95:01:54:F8:70:80:AA:77:5F:5F:1A:60:38:2E:68:E2:6A:D2:46
Certificate issuer: /CN=1579ac51896b95038727e3223b1d7ae2507073b5
Certificate serial: 192AAD
Authority key identifier: 98:42:FC:61:A3:71:4E:E3:C0:53:2B:2A:F3:64:92:3B:17:17:D3:92
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1579ac51896b95038727e3223b1d7ae2507073b5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/f5808655f68bbf0d4840a5d4dc333130791c802a.roa
Signing time: Thu 23 Jun 2022 01:04:25 +0000
ROA not before: Wed 08 Jun 2022 03:00:00 +0000
ROA not after: Sat 08 Jun 2024 03:00:00 +0000
asID: 395161
IP address blocks: 45.228.67.0/24 maxlen: 24
138.186.140.0/22 maxlen: 24
170.80.108.0/22 maxlen: 24
190.103.176.0/22 maxlen: 24
2800:ba0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1649325 (0x192aad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1579ac51896b95038727e3223b1d7ae2507073b5
Validity
Not Before: Jun 8 03:00:00 2022 GMT
Not After : Jun 8 03:00:00 2024 GMT
Subject: CN=f5808655f68bbf0d4840a5d4dc333130791c802a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:98:a3:27:15:cc:4f:64:1f:62:72:01:47:
48:bc:1b:c1:6e:5e:a4:e1:cd:99:e0:ea:2d:ae:a4:
f9:ec:fc:b3:35:f4:8f:f1:5c:b5:4a:da:02:05:a0:
ab:00:ed:fd:a0:a4:5b:93:3f:68:df:a8:80:8f:d4:
5e:b8:1e:de:c9:7c:a1:41:d5:a1:e1:ec:54:b1:6f:
a8:a7:5b:2d:26:0b:48:cc:e4:ea:6e:76:c7:b7:9e:
cd:26:3c:f1:54:40:f3:52:62:55:02:63:45:a5:42:
5d:35:a3:96:67:15:2d:1e:59:68:cd:b2:d7:21:68:
ad:65:18:3b:d0:f6:35:62:0f:86:1a:08:5b:c1:49:
b0:39:6e:fa:fd:7f:28:97:4b:4b:d4:2a:88:a6:e3:
2b:b8:65:9f:2f:8c:f8:15:3a:b9:9c:3a:1d:f5:b0:
07:8b:9c:93:18:b8:2f:a0:6d:de:41:05:c6:f6:4e:
21:d4:95:32:85:ce:fd:5a:e8:13:ab:11:d1:19:b1:
d8:d9:6a:08:f2:b0:cc:ce:17:cb:4e:8b:6f:dc:75:
7a:31:55:08:0f:eb:a0:5a:e9:78:04:02:8c:6a:13:
09:f3:97:cd:df:f0:b6:37:0c:39:17:0c:ba:9b:ff:
de:b6:e9:96:40:82:c9:05:09:5c:65:4d:00:c8:a3:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:01:54:F8:70:80:AA:77:5F:5F:1A:60:38:2E:68:E2:6A:D2:46
X509v3 Authority Key Identifier:
keyid:98:42:FC:61:A3:71:4E:E3:C0:53:2B:2A:F3:64:92:3B:17:17:D3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1579ac51896b95038727e3223b1d7ae2507073b5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/f5808655f68bbf0d4840a5d4dc333130791c802a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/1579ac51896b95038727e3223b1d7ae2507073b5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.67.0/24
138.186.140.0/22
170.80.108.0/22
190.103.176.0/22
IPv6:
2800:ba0::/32
Signature Algorithm: sha256WithRSAEncryption
bd:6f:d4:2e:ec:1b:16:4f:82:1f:b9:f1:08:9f:8b:28:71:bd:
1d:f4:07:3d:b6:1f:ad:92:30:2d:b2:27:22:7e:2d:d1:04:75:
cb:97:73:a0:77:49:eb:3b:a1:b1:70:15:7c:97:52:32:e8:0c:
4a:b8:21:9c:a7:10:10:7e:34:ac:0d:0b:44:d0:ee:17:93:fc:
7c:95:ce:29:ff:5c:46:0a:7f:f8:02:7b:bc:6e:8f:88:cd:ea:
f5:ac:93:00:ee:e2:48:60:ee:cd:6f:71:97:ef:e5:0c:7b:a8:
53:af:6a:d4:90:70:a1:1c:9b:3d:92:27:98:4c:cc:b2:93:3f:
aa:0b:57:bb:4d:c3:19:84:7f:91:c8:9b:71:70:1f:36:8f:55:
9d:f9:ef:aa:fd:1a:08:45:bd:7e:20:7b:5e:c5:fb:19:fc:3b:
a0:45:51:ea:02:97:29:2c:0f:4b:64:3a:33:dc:f3:28:6f:3b:
4c:e8:f8:bd:e3:45:1a:ba:db:8f:77:96:9b:65:2d:cd:b8:7e:
25:a1:c3:4d:bd:9f:da:e8:5f:14:5a:ce:ce:3b:15:e7:d2:9d:
8d:3e:17:0a:6d:d9:3c:3b:98:f4:f6:13:d9:1a:39:52:3f:9e:
56:fc:db:69:de:de:f9:ae:e3:02:7e:04:70:20:b2:96:26:7e:
57:70:0b:90
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIDGSqtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE1
NzlhYzUxODk2Yjk1MDM4NzI3ZTMyMjNiMWQ3YWUyNTA3MDczYjUwHhcNMjIwNjA4
MDMwMDAwWhcNMjQwNjA4MDMwMDAwWjAzMTEwLwYDVQQDEyhmNTgwODY1NWY2OGJi
ZjBkNDg0MGE1ZDRkYzMzMzEzMDc5MWM4MDJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwDWYoycVzE9kH2JyAUdIvBvBbl6k4c2Z4OotrqT57PyzNfSP
8Vy1StoCBaCrAO39oKRbkz9o36iAj9ReuB7eyXyhQdWh4exUsW+op1stJgtIzOTq
bnbHt57NJjzxVEDzUmJVAmNFpUJdNaOWZxUtHllozbLXIWitZRg70PY1Yg+GGghb
wUmwOW76/X8ol0tL1CqIpuMruGWfL4z4FTq5nDod9bAHi5yTGLgvoG3eQQXG9k4h
1JUyhc79WugTqxHRGbHY2WoI8rDMzhfLTotv3HV6MVUID+ugWul4BAKMahMJ85fN
3/C2Nww5Fwy6m//etumWQILJBQlcZU0AyKPI2QIDAQABo4ICfDCCAngwHQYDVR0O
BBYEFASVAVT4cICqd19fGmA4LmjiatJGMB8GA1UdIwQYMBaAFJhC/GGjcU7jwFMr
KvNkkjsXF9OSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTU3OWFj
NTE4OTZiOTUwMzg3MjdlMzIyM2IxZDdhZTI1MDcwNzNiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmZiOWI3ZmUtZThmZi00ZGE4LTkyNTYtZGY1OWYx
NjVmOTFkL2Y1ODA4NjU1ZjY4YmJmMGQ0ODQwYTVkNGRjMzMzMTMwNzkxYzgwMmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZmI5YjdmZS1lOGZmLTRkYTgtOTI1Ni1kZjU5
ZjE2NWY5MWQvMTU3OWFjNTE4OTZiOTUwMzg3MjdlMzIyM2IxZDdhZTI1MDcwNzNi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQx
MC8wHgQCAAEwGAMEAC3kQwMEAoq6jAMEAqpQbAMEAr5nsDANBAIAAjAHAwUAKAAL
oDANBgkqhkiG9w0BAQsFAAOCAQEAvW/ULuwbFk+CH7nxCJ+LKHG9HfQHPbYfrZIw
LbInIn4t0QR1y5dzoHdJ6zuhsXAVfJdSMugMSrghnKcQEH40rA0LRNDuF5P8fJXO
Kf9cRgp/+AJ7vG6PiM3q9ayTAO7iSGDuzW9xl+/lDHuoU69q1JBwoRybPZInmEzM
spM/qgtXu03DGYR/kcibcXAfNo9Vnfnvqv0aCEW9fiB7XsX7Gfw7oEVR6gKXKSwP
S2Q6M9zzKG87TOj4veNFGrrbj3eWm2Utzbh+JaHDTb2f2uhfFFrOzjsV59KdjT4X
Cm3ZPDuY9PYT2Ro5Uj+eVvzbad7e+a7jAn4EcCCyliZ+V3ALkA==
-----END CERTIFICATE-----
Generated at Fri Aug 18 03:13:15 2023 by rpki-client on console-ams.rpki-client.org