Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/e4eba680ba881f065a688199effb82eaa25a4647.roa
File: e4eba680ba881f065a688199effb82eaa25a4647.roa (raw, json)
Hash identifier: NMLrMeeQWkuPvkTbm7NgY5IMXJw7H8C1TFH+Gb4Il2Y=
Subject key identifier: B8:3E:DE:6D:59:F0:40:D5:B3:D0:24:5F:6F:EB:22:94:F0:C3:F8:67
Certificate issuer: /CN=76297e078144b7f66e2711a6f32f1a781bd74804
Certificate serial: 05940A
Authority key identifier: 6C:72:C6:D0:F2:23:5B:DA:09:12:EE:68:8C:D6:59:92:B1:90:5B:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76297e078144b7f66e2711a6f32f1a781bd74804.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/e4eba680ba881f065a688199effb82eaa25a4647.roa
Signing time: Wed 17 Nov 2021 17:10:04 +0000
ROA not before: Thu 01 Apr 2021 03:00:00 +0000
ROA not after: Sat 01 Apr 2023 03:00:00 +0000
asID: 271868
IP address blocks: 200.215.228.0/22 maxlen: 30
2803:8c10:40::/42 maxlen: 42
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365578 (0x5940a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76297e078144b7f66e2711a6f32f1a781bd74804
Validity
Not Before: Apr 1 03:00:00 2021 GMT
Not After : Apr 1 03:00:00 2023 GMT
Subject: CN=e4eba680ba881f065a688199effb82eaa25a4647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:d5:8a:97:5e:3c:08:27:d9:06:af:12:5c:
40:9b:ff:25:ec:72:a3:e5:30:f8:87:de:d8:4f:cb:
ac:3e:aa:5a:cf:d5:fc:21:8d:d5:20:06:32:fa:44:
ed:b0:b0:4c:e9:07:c9:e0:58:d5:99:64:27:08:bc:
d9:8e:4c:f2:98:c8:6c:7a:69:ff:cf:2a:85:ef:7b:
72:3b:19:a6:77:77:c8:a4:b3:0d:5f:d8:f6:3d:74:
38:f7:85:55:43:fa:db:64:8b:bf:63:06:65:e0:6d:
d6:59:d8:8b:68:b9:9c:c2:8b:a7:18:01:5c:e4:d4:
70:c7:d9:a5:6a:85:7d:e5:a5:50:a1:2e:76:1f:14:
54:29:37:4e:7e:cb:19:41:11:2e:34:06:1c:47:07:
7b:e6:93:22:c9:51:fc:d3:c5:11:e0:39:39:a4:55:
66:bf:83:40:2c:40:fc:18:7f:71:6f:47:4b:d9:13:
d8:a2:2d:7d:2c:29:3e:c6:78:33:60:96:ba:64:c1:
01:25:0e:05:15:f7:f4:8a:5e:60:c7:1b:51:d0:45:
dd:4a:89:87:5b:1e:5d:85:7d:8d:2c:c1:de:7b:34:
f5:45:be:af:c2:4d:6c:d7:db:41:3b:7c:2b:90:5b:
52:14:8c:cb:5a:2f:93:58:08:4a:2a:f5:60:00:2f:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3E:DE:6D:59:F0:40:D5:B3:D0:24:5F:6F:EB:22:94:F0:C3:F8:67
X509v3 Authority Key Identifier:
keyid:6C:72:C6:D0:F2:23:5B:DA:09:12:EE:68:8C:D6:59:92:B1:90:5B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76297e078144b7f66e2711a6f32f1a781bd74804.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/e4eba680ba881f065a688199effb82eaa25a4647.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0de8cb5a-7dcd-463c-9158-90cca41da734/76297e078144b7f66e2711a6f32f1a781bd74804.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.215.228.0/22
IPv6:
2803:8c10:40::/42
Signature Algorithm: sha256WithRSAEncryption
46:40:b3:71:6c:fd:ea:b0:e8:88:7c:b6:34:6a:6d:ec:98:34:
17:70:dc:3f:ea:85:32:9e:d6:7a:f1:f6:5b:2d:f6:d2:65:6f:
3a:09:f8:40:1a:7b:7b:47:e9:e5:5b:98:19:59:bd:fe:5f:01:
90:56:eb:e7:9c:2a:36:ec:67:6e:9e:bb:d1:ea:63:75:9a:c8:
48:db:2a:01:ce:6c:0f:78:e0:c8:88:e5:76:42:2c:e5:50:e5:
3a:d8:cb:39:77:a6:f9:de:ea:d2:f6:b9:85:d1:9a:70:0f:e5:
cf:b5:ce:a3:52:72:da:ea:9d:76:fb:b8:46:74:9f:8b:26:e4:
65:9c:9d:12:02:2e:dd:45:60:1e:39:06:4c:33:5d:48:db:55:
e9:99:18:41:7d:36:da:2c:d6:1a:b0:1f:cd:3a:6e:ce:60:fd:
65:df:0a:13:80:a1:6a:97:95:c6:14:3a:ea:ba:e1:9c:c8:57:
a5:be:23:8d:ab:77:99:2d:76:b2:dd:cd:9b:01:b5:47:ab:f8:
99:be:7f:94:22:80:b8:28:bf:06:b9:80:7d:4f:db:8e:83:8e:
84:0d:e4:6b:78:a0:64:1b:49:73:e2:c8:21:66:5c:85:50:1c:
03:8d:7b:e7:cf:d1:03:91:d3:5c:b1:7f:c2:2d:b4:73:6d:ef:
46:bc:da:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org