Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/af4c22cd-92b3-485b-b2f6-42863f94a036/fb4b2182cf514b743d61df1a0c8b164e74c50ae3.roa
File: fb4b2182cf514b743d61df1a0c8b164e74c50ae3.roa (raw, json)
Hash identifier: CucpCg3ulxdU3YtfwkKM56E52oCskhQwCGAzJGUpLyY=
Subject key identifier: E2:0D:A3:D7:D0:48:F8:FC:08:A9:19:A9:F0:E3:52:4C:29:C4:33:66
Certificate issuer: /CN=22267ca11916d4b70d820d1978ab2e851fd12b4a
Certificate serial: 194514
Authority key identifier: DD:2B:84:18:1F:75:D5:11:A1:2B:11:79:2D:98:45:7D:66:ED:41:D2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22267ca11916d4b70d820d1978ab2e851fd12b4a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/af4c22cd-92b3-485b-b2f6-42863f94a036/fb4b2182cf514b743d61df1a0c8b164e74c50ae3.roa
Signing time: Wed 10 May 2023 08:30:01 +0000
ROA not before: Tue 09 May 2023 08:30:01 +0000
ROA not after: Thu 08 May 2025 08:30:01 +0000
asID: 52402
IP address blocks: 200.123.240.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1656084 (0x194514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22267ca11916d4b70d820d1978ab2e851fd12b4a
Validity
Not Before: May 9 08:30:01 2023 GMT
Not After : May 8 08:30:01 2025 GMT
Subject: CN=fb4b2182cf514b743d61df1a0c8b164e74c50ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:62:f4:9c:17:1b:1a:29:90:4e:fb:92:4f:9a:
74:36:fa:93:57:da:43:27:4f:08:66:02:ef:d5:1a:
29:d1:d2:b5:e5:40:97:89:7d:bf:bb:79:98:57:ce:
14:af:63:94:ec:01:d9:d3:04:d6:87:12:bb:15:5f:
f1:1f:9c:dc:65:3d:ea:68:f1:88:82:f2:f8:c0:9d:
96:52:90:8d:d5:97:24:04:24:84:56:5d:71:33:4b:
5d:83:e4:b0:f0:10:27:b6:84:05:ef:a7:ae:53:58:
a0:8b:e8:6e:11:94:7d:03:dd:e3:37:97:fa:35:eb:
4a:c7:2c:85:dc:5c:15:39:07:6a:85:ff:01:7e:8f:
c9:46:ee:22:10:92:fa:a5:f9:55:1a:94:85:0b:7b:
dd:a0:0c:4d:6c:dd:2f:8d:76:25:82:7f:76:28:56:
a3:0f:6d:08:1a:d0:b5:ae:e5:b3:77:22:32:56:41:
0d:5e:bc:db:bb:16:b4:55:d6:d5:1c:90:df:99:8e:
91:59:60:c6:32:ed:17:e2:8b:8a:6e:34:a2:f7:62:
7f:98:d6:25:64:85:ed:df:46:c9:97:b6:45:31:91:
e4:b6:3a:e6:50:2a:d8:f0:58:44:5b:9a:a6:f9:f2:
e7:8a:48:05:18:ae:02:70:c8:82:4b:07:13:8d:5a:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0D:A3:D7:D0:48:F8:FC:08:A9:19:A9:F0:E3:52:4C:29:C4:33:66
X509v3 Authority Key Identifier:
keyid:DD:2B:84:18:1F:75:D5:11:A1:2B:11:79:2D:98:45:7D:66:ED:41:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22267ca11916d4b70d820d1978ab2e851fd12b4a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/af4c22cd-92b3-485b-b2f6-42863f94a036/fb4b2182cf514b743d61df1a0c8b164e74c50ae3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/af4c22cd-92b3-485b-b2f6-42863f94a036/22267ca11916d4b70d820d1978ab2e851fd12b4a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.240.0/20
Signature Algorithm: sha256WithRSAEncryption
58:da:15:42:25:8d:36:8b:71:ee:b5:23:c2:fb:46:a5:d2:06:
da:da:3f:f0:05:72:22:a5:9f:f0:41:20:2f:fb:10:2f:1d:a6:
1f:89:8f:5e:97:ad:12:8d:04:89:32:a9:31:fc:b4:b4:cc:34:
2f:aa:a5:cf:ae:0a:aa:c5:f4:be:70:d0:dd:d1:24:08:86:d5:
72:49:d0:c0:80:06:28:45:f0:31:42:c2:a2:b7:7e:03:47:1d:
0d:91:0f:7e:e6:a8:bf:13:ca:e0:3b:53:34:2c:4c:1b:97:c1:
84:5d:88:55:ea:ac:4c:2e:72:b5:aa:a0:a6:e9:18:f0:83:6f:
d6:f2:65:a8:5e:3b:c7:f2:dd:17:ce:9e:d3:51:f8:f3:72:9e:
6a:78:c9:5b:f8:5e:76:90:ec:4e:31:f0:a5:69:d9:9a:fa:58:
b9:00:59:61:33:ed:66:89:5f:52:d6:87:24:8d:ac:1c:15:e2:
c5:73:22:bf:c1:36:ba:84:02:50:13:10:f0:41:4d:ee:6e:f7:
c4:63:3c:e8:5a:84:b8:8d:10:5d:d3:07:bd:b4:cc:73:08:07:
48:a2:e9:4b:43:9b:60:0e:42:51:8d:c1:f9:1f:eb:e7:c0:31:
da:87:1f:9b:f9:45:83:cd:2b:1b:c3:af:82:78:83:1c:95:c2:
c3:ae:e9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org