Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/29b033a0925d060a3d2bbf175f383854e92f03d4.roa
File: 29b033a0925d060a3d2bbf175f383854e92f03d4.roa (raw, json)
Hash identifier: yiMz6IMiC1C1TC3ahkp8GuRqgAYzaE0UNpDp5v+UJSA=
Subject key identifier: C4:8F:E8:94:FD:83:0B:F3:AE:5E:81:56:E4:DF:35:B5:60:4A:F1:7C
Certificate issuer: /CN=4d6514d89948e6d41988b60c1228765a24fd7536
Certificate serial: 14E539
Authority key identifier: BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/29b033a0925d060a3d2bbf175f383854e92f03d4.roa
Signing time: Fri 28 Jan 2022 17:19:29 +0000
ROA not before: Fri 28 Jan 2022 03:00:00 +0000
ROA not after: Sun 28 Jan 2024 03:00:00 +0000
asID: 272036
IP address blocks: 200.12.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369401 (0x14e539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6514d89948e6d41988b60c1228765a24fd7536
Validity
Not Before: Jan 28 03:00:00 2022 GMT
Not After : Jan 28 03:00:00 2024 GMT
Subject: CN=29b033a0925d060a3d2bbf175f383854e92f03d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:a5:32:b6:06:84:05:02:bc:4c:8f:8f:23:
02:3f:da:f4:3b:12:15:3c:8e:1c:0b:50:93:a5:21:
38:5d:02:ef:76:3b:40:4e:e7:c0:61:90:78:93:12:
34:0a:49:67:16:5e:55:4d:72:d2:d4:fb:26:10:36:
00:42:2a:e3:67:24:8e:13:6f:fc:5f:30:15:6d:de:
95:fe:5f:ea:fe:64:2f:8f:a4:bf:bd:80:af:72:cf:
8a:d9:b8:a7:39:67:e0:ab:0a:6b:18:12:6a:4b:21:
e7:4f:42:79:2b:e9:19:d2:a3:f7:5f:09:5e:2b:44:
81:4a:17:f9:15:72:a1:13:9d:08:f8:d2:35:cc:d7:
ff:b1:48:c7:b7:ce:02:29:50:92:d0:8e:64:a4:3f:
a3:40:33:69:cd:1d:83:69:03:ac:f4:9d:46:0a:fd:
80:30:f7:98:e3:10:c2:90:2c:c9:02:91:03:c4:8f:
8b:b6:c8:18:45:6d:95:f9:fb:f6:6b:cd:2d:67:da:
7f:ba:03:05:3b:2d:6f:d5:fc:32:67:a3:33:d2:90:
22:b1:53:f1:73:b9:b5:7c:6c:ea:5b:bd:cf:12:a5:
5f:75:11:1d:d4:bf:ce:51:43:a7:f1:bb:bc:86:1c:
ea:5f:aa:4a:c0:f0:b4:be:cd:10:30:39:75:a5:d9:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8F:E8:94:FD:83:0B:F3:AE:5E:81:56:E4:DF:35:B5:60:4A:F1:7C
X509v3 Authority Key Identifier:
keyid:BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/29b033a0925d060a3d2bbf175f383854e92f03d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/4d6514d89948e6d41988b60c1228765a24fd7536.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.249.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3e:f8:06:5e:4e:33:9a:01:9a:78:01:97:1f:c3:b0:b5:4c:
e8:fe:97:3f:9d:7c:68:cf:2b:47:0e:78:a7:fe:65:65:15:f3:
a0:f2:60:c5:03:34:36:55:a6:e5:b4:c4:a1:47:7f:5c:e6:7a:
cb:11:6e:7a:4d:2b:37:b0:d0:1e:b0:03:0c:20:68:f0:b4:c1:
57:ea:e1:0a:8b:6f:f1:8b:84:24:c5:80:2c:26:70:b4:9e:a1:
c1:6b:2d:c4:cb:31:7e:bd:68:fe:5c:c7:1f:0b:10:84:15:df:
f7:22:8c:c4:eb:83:ee:3e:ed:f1:1d:fd:91:40:8e:0c:32:1b:
96:8e:6d:68:73:85:ec:0c:40:ec:9c:15:8c:0b:94:d1:64:24:
77:22:13:6f:ee:ea:d4:eb:b1:39:a4:ce:2d:a1:7c:c5:d4:bd:
48:a9:96:1b:8d:3e:5d:2d:9a:66:db:45:38:44:ae:0d:ae:7b:
ee:0c:e4:df:82:80:a7:5d:59:bb:79:04:8f:92:ac:ae:25:c4:
29:3e:c0:73:91:66:16:87:42:11:3d:23:13:e4:ca:2f:22:30:
db:ae:55:9c:0b:60:28:d0:af:bd:e1:7c:4e:f8:76:fd:f9:67:
d4:85:60:42:3e:d3:32:47:8a:00:0a:8a:8b:7b:ed:e3:84:22:
e1:8f:fb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 02:32:40 2023 by rpki-client on console-fra.rpki-client.org