Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/cec93a7e5f787c1777b0a7a4461711741e9e6812.roa
File: cec93a7e5f787c1777b0a7a4461711741e9e6812.roa (raw, json)
Hash identifier: gYUnGrDQdlnE29iZw6hJ+d7ZSC/HDvVSag8t9GHcy44=
Subject key identifier: BC:B4:79:95:28:46:3E:E6:ED:2E:AC:7D:F4:BA:40:CD:21:10:E8:98
Certificate issuer: /CN=79accacc0240f5ad175ea4c7ab2598e062ba3852
Certificate serial: 22D561
Authority key identifier: 81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/cec93a7e5f787c1777b0a7a4461711741e9e6812.roa
Signing time: Tue 11 Jul 2023 17:51:46 +0000
ROA not before: Mon 10 Jul 2023 17:51:46 +0000
ROA not after: Fri 11 Jul 2025 17:51:46 +0000
asID: 267781
IP address blocks: 200.229.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Feb 2024 20:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2282849 (0x22d561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79accacc0240f5ad175ea4c7ab2598e062ba3852
Validity
Not Before: Jul 10 17:51:46 2023 GMT
Not After : Jul 11 17:51:46 2025 GMT
Subject: CN=cec93a7e5f787c1777b0a7a4461711741e9e6812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:7d:2f:5f:d1:e7:e6:6f:d6:d6:e1:09:2f:
67:a3:30:4d:4c:cc:31:ea:e5:1f:3a:91:d5:d5:88:
06:6b:c5:b3:ce:5f:5e:9e:62:1c:b3:64:2e:1c:92:
9c:68:d4:f5:61:6c:b9:2a:40:01:49:8a:98:01:87:
92:3d:c2:34:be:19:62:dd:ed:1d:62:c4:ad:c5:dd:
af:e3:3d:c5:6e:e1:55:98:6e:fb:a5:2e:cc:81:f6:
e7:30:d6:87:b6:1b:30:e4:b7:d1:5d:78:3c:21:8c:
f9:55:cb:94:f4:f1:5f:a5:5b:66:de:7d:37:f6:51:
68:39:91:2f:71:1f:30:01:2b:86:d5:69:47:72:06:
af:71:9c:85:db:e8:27:73:c6:49:0a:89:4d:30:a6:
c9:e1:1b:9e:d3:61:df:e8:88:57:46:7c:e4:04:6b:
ed:54:d6:21:86:9b:ff:86:b3:c7:f7:1d:93:b8:16:
b1:1d:8b:9e:60:b6:2f:84:88:4c:65:3f:22:e3:0e:
e0:0d:d6:73:11:80:da:39:7a:54:f5:a0:af:5d:49:
5d:0f:98:50:61:17:b3:05:8b:70:11:c5:fc:95:06:
47:86:71:79:43:5e:98:64:f4:d7:bd:a5:16:91:fd:
82:3b:ee:7f:4f:56:9c:c8:ae:d8:eb:5a:9a:e2:9a:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B4:79:95:28:46:3E:E6:ED:2E:AC:7D:F4:BA:40:CD:21:10:E8:98
X509v3 Authority Key Identifier:
keyid:81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/cec93a7e5f787c1777b0a7a4461711741e9e6812.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/79accacc0240f5ad175ea4c7ab2598e062ba3852.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.216.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c4:be:f5:bc:16:5a:83:fc:77:be:3d:54:92:b4:06:d8:55:
de:5d:48:1a:65:1b:b5:8a:dc:b6:8d:5c:e4:4c:1d:01:da:d1:
80:43:3a:f4:a6:52:c9:3c:7d:63:e3:3a:34:20:ee:21:4c:69:
dd:7f:71:30:6f:5c:24:46:1a:d4:18:0e:a2:b8:6d:1c:30:ce:
81:db:07:58:c2:43:18:99:19:f4:9d:b0:7c:67:89:6f:c1:0b:
4e:3b:5c:4d:33:b3:bf:e8:37:08:2f:21:92:ef:d4:2d:ed:22:
4f:4a:a7:bf:65:4d:45:85:df:05:31:6d:38:e2:c7:d5:fb:a8:
77:e9:73:93:8d:ef:fc:1c:94:bb:c4:7c:4d:21:20:e1:3a:c3:
58:ef:60:1d:8e:90:17:8d:4f:b3:b3:8b:c7:e7:ef:37:3a:a7:
7b:39:c6:a1:4f:e1:85:af:17:a2:6c:24:07:bc:53:90:e7:26:
4c:e4:62:8d:cb:1c:d8:14:25:d2:1b:11:d3:24:5e:84:48:af:
2c:d4:a1:89:6f:d3:35:68:09:0a:13:a9:15:71:09:ac:cc:ff:
29:33:15:11:f4:99:97:d1:a7:f9:2f:9f:7a:da:25:99:63:4e:
eb:40:bf:de:2f:01:9d:80:b7:31:09:ce:51:3f:8d:8b:83:a9:
ad:4d:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 25 23:36:31 2024 by rpki-client on console-fra.rpki-client.org