Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/e1b1b4b48213d1216ae7c957d4dc846384dc1649.roa
File: e1b1b4b48213d1216ae7c957d4dc846384dc1649.roa (raw, json)
Hash identifier: oax9GRNd+0zZeyyDC7RPUUvULWL2+JfhEwoU7tN4H6U=
Subject key identifier: 41:69:54:30:08:E8:A2:15:1F:2A:C0:46:8F:BD:37:9E:65:92:8B:CE
Certificate issuer: /CN=a9639b1f3b25de6401926fd200d3e7a73a364740
Certificate serial: 0DE8F6
Authority key identifier: B4:E7:A9:FC:24:99:08:D1:27:14:5D:7C:0B:1D:E4:1A:FB:B2:7C:DA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9639b1f3b25de6401926fd200d3e7a73a364740.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/e1b1b4b48213d1216ae7c957d4dc846384dc1649.roa
Signing time: Wed 24 Mar 2021 14:42:11 +0000
ROA not before: Wed 24 Mar 2021 14:42:11 +0000
ROA not after: Tue 24 Mar 2026 14:42:11 +0000
asID: 52468
IP address blocks: 201.159.112.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911606 (0xde8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9639b1f3b25de6401926fd200d3e7a73a364740
Validity
Not Before: Mar 24 14:42:11 2021 GMT
Not After : Mar 24 14:42:11 2026 GMT
Subject: CN=e1b1b4b48213d1216ae7c957d4dc846384dc1649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1e:74:96:d5:3c:73:73:d9:2f:97:8f:fb:10:
22:27:01:1c:be:aa:43:5e:91:38:27:a0:8e:99:e0:
33:fa:1b:bd:b2:cf:7c:a4:e5:74:a9:31:8d:fd:f9:
3b:a0:7d:03:92:61:55:27:07:c8:f0:63:99:e4:c3:
b1:75:96:5b:0d:42:18:00:51:0c:b6:10:2e:81:1c:
99:73:9f:72:d2:b4:73:74:57:72:ac:0f:63:c1:b5:
c5:e5:e2:e4:c8:a5:ac:37:69:5b:bb:cd:c9:79:30:
5f:1e:47:14:ac:2c:97:18:d8:ac:7a:6e:dc:66:43:
ea:97:37:21:db:c9:0d:a6:4a:da:4a:16:e8:2a:1f:
40:d7:c4:67:08:a8:90:96:8d:a0:c8:87:20:dd:97:
43:91:71:02:a9:58:c9:20:78:7d:c1:32:60:60:a8:
d9:75:60:d3:95:2f:5c:40:24:06:b9:27:0d:a4:b5:
34:33:ff:5c:f7:c7:93:77:fd:f2:fd:72:7e:9c:98:
eb:a7:39:13:d2:ed:84:ab:9a:5f:c1:98:a8:94:a8:
2f:a1:79:5f:f5:05:11:03:73:a7:14:f5:c7:2d:d7:
bc:b6:7c:ac:75:27:0a:f0:92:f7:5c:55:ee:3e:7f:
0a:53:9c:6c:8d:87:07:8f:89:3d:ed:3e:ba:f5:85:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:54:30:08:E8:A2:15:1F:2A:C0:46:8F:BD:37:9E:65:92:8B:CE
X509v3 Authority Key Identifier:
keyid:B4:E7:A9:FC:24:99:08:D1:27:14:5D:7C:0B:1D:E4:1A:FB:B2:7C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9639b1f3b25de6401926fd200d3e7a73a364740.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/e1b1b4b48213d1216ae7c957d4dc846384dc1649.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/a9639b1f3b25de6401926fd200d3e7a73a364740.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.112.0/22
Signature Algorithm: sha256WithRSAEncryption
63:36:1f:a0:52:b2:a7:75:b1:6e:50:6c:18:08:69:a4:cf:1b:
e5:53:12:b6:f5:7e:83:27:3e:ab:92:5c:b2:e7:cd:3f:c0:36:
fe:2f:bc:c1:c2:ea:5d:34:2c:9b:d4:b6:41:59:06:0f:68:92:
31:3b:be:9c:83:fc:95:88:e4:ae:91:39:b0:ea:c0:0a:43:0b:
03:02:d9:73:44:66:32:63:a5:97:ce:4a:32:1a:24:63:2e:2c:
39:05:d1:99:81:15:91:70:63:df:d8:da:5a:80:aa:b0:a8:c5:
76:f9:15:75:c7:a4:91:a8:e1:07:ad:ac:e8:6a:f5:67:77:b5:
77:22:1b:7f:ba:d6:f7:ae:23:f3:8e:e6:c0:7a:9f:4e:30:e0:
97:e4:15:5a:19:4b:ae:73:5f:53:a4:13:14:ce:65:d1:bf:7f:
14:7e:7f:a4:c7:af:df:ca:70:17:a5:5e:16:fe:fd:d3:9b:c4:
20:8e:34:90:d2:cd:54:23:fe:66:ae:ea:dc:19:fb:f3:d2:09:
fa:14:30:02:5b:a0:c1:1e:bb:a0:97:75:1c:2b:e0:9a:7c:48:
7e:8f:7e:d8:6f:5b:e0:18:0b:ef:e9:4f:92:f8:24:80:fd:43:
5a:50:46:dd:9b:ec:27:dd:e5:37:07:f0:ed:2f:69:82:1d:2d:
74:6b:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-fra.rpki-client.org