Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/27216a64232c55983bfd2526112e72d0e2364eb9.roa
File: 27216a64232c55983bfd2526112e72d0e2364eb9.roa (raw, json)
Hash identifier: dtyj8l0mFs6wxPiENIK1dwRyra796grQgcNZ0Fw/ASw=
Subject key identifier: 7A:A5:4F:D0:65:86:A3:E9:C7:B9:62:BF:2E:48:DB:52:D1:DF:96:56
Certificate issuer: /CN=8f3873d2185c02d28d6e454da708150f962e9305
Certificate serial: 27F6
Authority key identifier: 18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/27216a64232c55983bfd2526112e72d0e2364eb9.roa
Signing time: Tue 27 Jun 2023 19:44:43 +0000
ROA not before: Mon 26 Jun 2023 19:44:42 +0000
ROA not after: Fri 27 Jun 2025 19:44:42 +0000
asID: 28067
IP address blocks: 64.28.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10230 (0x27f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3873d2185c02d28d6e454da708150f962e9305
Validity
Not Before: Jun 26 19:44:42 2023 GMT
Not After : Jun 27 19:44:42 2025 GMT
Subject: CN=27216a64232c55983bfd2526112e72d0e2364eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:be:c5:e4:1b:f2:ff:9a:b7:44:7b:8b:f0:
0f:9d:fc:05:1a:4f:80:49:0d:1a:32:10:6c:03:b2:
09:81:97:af:42:d9:29:ba:fe:7a:62:6c:6c:10:d1:
69:65:c8:be:a8:8f:7f:0f:f3:4a:19:40:5f:92:9f:
1c:b9:68:2d:27:4e:bf:6e:57:f5:36:5d:47:75:ae:
22:7f:ad:9c:82:f4:b4:14:26:44:14:f9:c1:21:56:
ab:85:fb:86:da:eb:c8:52:b8:52:19:f8:03:96:8b:
e9:31:e4:e6:07:cf:9e:f2:3f:24:26:8d:70:f5:e6:
48:22:d5:8f:53:d8:7e:5e:4d:42:c9:42:7b:3e:01:
3e:9d:ee:6b:52:99:fa:ed:cf:12:fc:d8:e4:38:37:
0f:e5:f7:d3:86:6c:0e:2f:e5:fb:f1:0c:a2:56:b5:
c4:e5:1e:98:4b:a9:6a:13:6f:ae:9e:90:de:8d:00:
2d:a8:7d:64:3c:c1:50:bf:5d:49:57:e8:c7:ff:d9:
fe:19:6c:c8:3f:68:26:51:3c:a2:03:92:4f:69:ed:
4e:e1:08:b8:62:99:ed:05:85:ea:b0:39:a2:ea:4d:
0e:27:3c:70:52:35:4f:60:7e:81:ba:34:d4:59:a8:
58:e1:64:7b:19:c3:fb:ce:b4:62:58:fd:61:90:49:
28:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A5:4F:D0:65:86:A3:E9:C7:B9:62:BF:2E:48:DB:52:D1:DF:96:56
X509v3 Authority Key Identifier:
keyid:18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/27216a64232c55983bfd2526112e72d0e2364eb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/8f3873d2185c02d28d6e454da708150f962e9305.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.28.136.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ae:b5:44:22:9f:dc:85:68:73:47:ad:39:25:bc:01:98:47:
93:ed:de:85:e3:3e:ad:1e:bc:6f:81:16:cf:1c:67:75:21:5d:
b9:48:1c:92:64:69:dd:55:1c:06:af:9c:ce:0a:88:85:56:86:
05:ca:36:d3:e4:f4:e7:cf:72:74:91:c0:2e:8b:8a:b6:56:eb:
ac:99:24:07:b5:8b:93:5c:c7:8f:69:0f:a5:3c:cc:1b:65:09:
ad:2d:c8:42:33:6b:4e:a6:f1:08:77:d7:64:3a:3e:f0:8d:92:
c5:87:4e:ec:e6:40:35:49:6c:58:d9:9e:2e:7b:4b:2a:60:8b:
b3:51:f5:10:31:71:c1:99:7f:65:4a:cc:a7:22:48:f0:4a:51:
ba:57:d4:e9:2a:7d:c2:b9:ff:1c:02:1d:31:5b:6c:cb:ae:d3:
79:54:76:9c:c1:45:f0:fb:12:6d:85:01:89:46:73:2d:bf:b7:
cd:97:e7:6b:cd:fa:b7:dc:ed:70:c1:2f:44:fc:46:b0:af:6d:
dc:05:08:61:d7:4a:cb:9d:1d:b1:67:fa:cf:1e:ed:64:6c:cd:
a2:1a:ba:95:7e:6d:16:0c:a8:f0:b8:d1:fd:ad:6e:93:2b:44:
2c:be:d4:bb:96:66:af:69:ff:50:c4:66:0d:fd:f0:7a:f9:45:
a6:3b:8e:4e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICJ/YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOGYz
ODczZDIxODVjMDJkMjhkNmU0NTRkYTcwODE1MGY5NjJlOTMwNTAeFw0yMzA2MjYx
OTQ0NDJaFw0yNTA2MjcxOTQ0NDJaMDMxMTAvBgNVBAMTKDI3MjE2YTY0MjMyYzU1
OTgzYmZkMjUyNjExMmU3MmQwZTIzNjRlYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfhL7F5Bvy/5q3RHuL8A+d/AUaT4BJDRoyEGwDsgmBl69C2Sm6
/npibGwQ0WllyL6oj38P80oZQF+Snxy5aC0nTr9uV/U2XUd1riJ/rZyC9LQUJkQU
+cEhVquF+4ba68hSuFIZ+AOWi+kx5OYHz57yPyQmjXD15kgi1Y9T2H5eTULJQns+
AT6d7mtSmfrtzxL82OQ4Nw/l99OGbA4v5fvxDKJWtcTlHphLqWoTb66ekN6NAC2o
fWQ8wVC/XUlX6Mf/2f4ZbMg/aCZRPKIDkk9p7U7hCLhime0FheqwOaLqTQ4nPHBS
NU9gfoG6NNRZqFjhZHsZw/vOtGJY/WGQSSivAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUeqVP0GWGo+nHuWK/LkjbUtHfllYwHwYDVR0jBBgwFoAUGJcuFKdCBCDgk86A
an/0aek+a80wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84ZjM4NzNk
MjE4NWMwMmQyOGQ2ZTQ1NGRhNzA4MTUwZjk2MmU5MzA1LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mYWJjY2ZlOS03NTFkLTQ0MTktOWE2NS1lMzZmOTZj
NzRhMjEvMjcyMTZhNjQyMzJjNTU5ODNiZmQyNTI2MTEyZTcyZDBlMjM2NGViOS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2ZhYmNjZmU5LTc1MWQtNDQxOS05YTY1LWUzNmY5
NmM3NGEyMS84ZjM4NzNkMjE4NWMwMmQyOGQ2ZTQ1NGRhNzA4MTUwZjk2MmU5MzA1
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAQByIMA0GCSqGSIb3DQEBCwUAA4IBAQB+rrVEIp/chWhzR605
JbwBmEeT7d6F4z6tHrxvgRbPHGd1IV25SBySZGndVRwGr5zOCoiFVoYFyjbT5PTn
z3J0kcAui4q2VuusmSQHtYuTXMePaQ+lPMwbZQmtLchCM2tOpvEId9dkOj7wjZLF
h07s5kA1SWxY2Z4ue0sqYIuzUfUQMXHBmX9lSsynIkjwSlG6V9TpKn3Cuf8cAh0x
W2zLrtN5VHacwUXw+xJthQGJRnMtv7fNl+drzfq33O1wwS9E/Eawr23cBQhh10rL
nR2xZ/rPHu1kbM2iGrqVfm0WDKjwuNH9rW6TK0QsvtS7lmavaf9QxGYN/fB6+UWm
O45O
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:19 2023 by rpki-client on console.sobornost.net