Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/2c66b8608782cf9f0049a56d4b90f0473fcfb055.roa
File: 2c66b8608782cf9f0049a56d4b90f0473fcfb055.roa (raw, json)
Hash identifier: xRR5SVi/a012mkzfWJuMIBDaUI6XOHSH4NNlouGyZdQ=
Subject key identifier: 02:C7:77:61:1F:83:68:DE:EE:54:1B:A9:C1:8D:BC:1C:51:94:EC:51
Certificate issuer: /CN=8a34b88edc7711ba98c357c0cd7c26b4d31bbe13
Certificate serial: 0DA70C
Authority key identifier: AC:7D:06:CC:8D:9C:83:2B:CF:18:0B:CB:6C:01:5E:C2:4A:6D:A7:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/2c66b8608782cf9f0049a56d4b90f0473fcfb055.roa
Signing time: Wed 24 Mar 2021 14:39:28 +0000
ROA not before: Wed 24 Mar 2021 14:39:27 +0000
ROA not after: Tue 24 Mar 2026 14:39:27 +0000
asID: 28027
IP address blocks: 200.126.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894732 (0xda70c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a34b88edc7711ba98c357c0cd7c26b4d31bbe13
Validity
Not Before: Mar 24 14:39:27 2021 GMT
Not After : Mar 24 14:39:27 2026 GMT
Subject: CN=2c66b8608782cf9f0049a56d4b90f0473fcfb055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:33:cb:e1:49:1a:e0:d4:32:bc:6b:65:5c:
af:26:f8:c3:b3:6d:94:79:22:7d:6f:ca:27:7f:d7:
b9:4e:55:41:20:1e:6b:f2:60:0b:be:16:8a:41:50:
22:e0:c7:4d:dc:74:fb:27:27:b2:f3:64:06:e3:d7:
31:2e:b1:a8:6b:44:5c:65:08:2f:f3:90:99:04:7e:
07:7a:d9:a0:6b:33:0b:85:b8:4d:5c:57:fd:0b:ca:
ca:d5:11:2d:ad:dd:8f:02:83:94:03:97:bb:1e:ec:
97:73:11:e9:93:c0:1a:62:18:81:02:43:0a:0a:81:
e1:b5:c4:33:41:e3:b2:a9:a9:48:73:c6:53:31:12:
9d:65:23:04:d9:f6:6c:13:01:65:40:05:59:3c:f9:
3c:1f:d9:ca:ba:04:a0:0d:c0:f8:94:e7:88:b8:29:
50:2f:ab:3f:aa:56:c0:ec:ce:38:b9:23:6a:d1:63:
4f:3f:41:14:ce:57:73:db:10:f4:94:40:8d:73:83:
eb:e7:82:fc:e7:57:39:0c:9e:e6:d5:84:68:2f:a1:
16:48:70:0c:7d:98:6f:7d:1f:ed:67:75:4a:59:8d:
44:1d:ab:a4:72:9f:97:7e:e0:35:83:2c:49:25:a4:
09:c0:27:f0:ae:39:65:76:1c:63:e1:07:99:7d:35:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C7:77:61:1F:83:68:DE:EE:54:1B:A9:C1:8D:BC:1C:51:94:EC:51
X509v3 Authority Key Identifier:
keyid:AC:7D:06:CC:8D:9C:83:2B:CF:18:0B:CB:6C:01:5E:C2:4A:6D:A7:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/2c66b8608782cf9f0049a56d4b90f0473fcfb055.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/09a9b685-397d-4d4f-8734-6e8fb9651f21/8a34b88edc7711ba98c357c0cd7c26b4d31bbe13.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.126.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:2d:42:4a:5d:aa:f2:1b:d3:90:81:23:be:dc:e8:5b:90:89:
62:76:ee:bb:06:c1:37:b8:14:8d:57:88:50:e1:3a:1b:e2:2a:
d5:3f:74:91:55:8b:f6:37:58:0e:9a:69:9d:bf:d5:e3:39:35:
3d:d9:05:dc:77:07:90:d1:6a:10:9a:ae:53:51:2e:8d:15:8b:
cb:09:00:08:a6:db:1d:12:cd:f3:9a:74:94:81:f4:c9:14:ed:
46:fc:c1:12:de:2a:bd:5e:dc:23:8c:44:fe:f8:9a:e2:35:49:
71:52:b8:68:3f:b7:cc:15:32:61:18:7c:fc:3d:f3:02:60:bf:
4d:19:57:ef:16:9f:d1:f8:70:e4:17:ae:38:6a:fe:80:1d:65:
13:f4:16:cf:59:c6:a3:19:bf:0e:7d:9c:37:48:3c:7f:68:80:
38:6c:80:5d:d0:b6:86:74:a3:67:81:17:97:18:5f:8a:8b:fd:
97:6b:80:54:fa:0f:78:75:a8:9b:66:3c:f0:a2:be:2e:a7:93:
f1:d7:5a:29:08:cd:f5:b3:53:3f:c7:31:43:2f:48:d2:3e:98:
ce:74:47:a8:2c:3d:72:2f:1c:86:56:91:83:11:03:ff:f6:74:
a7:4f:fc:e0:f0:29:81:57:b1:08:25:e4:bd:de:88:e9:5f:9a:
d8:67:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 21:13:18 2023 by rpki-client on console-fra.rpki-client.org