Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/444964230ac08ab3cd34cda84a2e00e10cfaa392.roa
File: 444964230ac08ab3cd34cda84a2e00e10cfaa392.roa (raw, json)
Hash identifier: O5iYyWAJj1olJHN1AUKj9bND67gagI1yd2D64xaEMAI=
Subject key identifier: 5B:5B:7F:6C:AA:75:C4:0D:07:94:3D:C2:79:F4:3C:D8:8C:95:B6:30
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 0E586C
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/444964230ac08ab3cd34cda84a2e00e10cfaa392.roa
Signing time: Wed 24 Mar 2021 14:30:56 +0000
ROA not before: Wed 24 Mar 2021 14:30:53 +0000
ROA not after: Tue 24 Mar 2026 14:30:53 +0000
asID: 263230
IP address blocks: 200.41.34.0/24 maxlen: 24
200.41.35.0/24 maxlen: 24
200.41.36.0/24 maxlen: 24
200.41.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940140 (0xe586c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Mar 24 14:30:53 2021 GMT
Not After : Mar 24 14:30:53 2026 GMT
Subject: CN=444964230ac08ab3cd34cda84a2e00e10cfaa392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a6:8b:70:0f:40:36:98:85:70:57:55:ea:3b:
c0:3d:1c:80:ad:3c:79:0c:86:5a:bd:87:73:7e:d2:
b2:28:33:71:26:91:e6:08:b5:f7:dd:ed:48:82:41:
ae:60:cf:fe:18:50:49:8d:8e:2f:ac:a0:d5:bf:54:
7e:e5:e3:0c:41:ee:0a:a7:fe:1d:ba:32:ac:af:a2:
30:9c:1c:6d:1b:e4:79:1d:17:a4:cf:3e:13:27:cd:
46:30:65:82:0c:1f:d7:f0:96:9e:c6:3b:ea:a8:3f:
32:9e:74:06:3b:7d:7d:68:bf:ce:d1:62:a1:0c:7e:
90:df:f0:99:cb:36:a2:02:81:f5:af:61:6e:3e:65:
b4:4c:c0:2f:82:1d:dc:40:33:49:0c:b4:ee:f5:f2:
13:3c:2b:32:04:62:f7:7f:6e:54:81:76:c6:f0:88:
13:86:f2:4e:b1:b5:49:4d:e5:7f:c2:3c:d3:58:11:
2f:91:1e:44:4c:f1:19:8b:e5:38:50:91:a0:4a:a8:
91:bb:c7:72:14:d2:f1:19:8e:cb:ba:c3:52:17:d6:
f6:6a:95:df:4f:b8:9f:31:c3:b2:69:34:94:44:29:
4d:a1:92:2b:4f:73:41:59:ef:2a:2a:37:55:18:3a:
57:ec:63:e1:5f:c0:6e:86:9d:ef:e3:82:8f:15:7b:
15:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:7F:6C:AA:75:C4:0D:07:94:3D:C2:79:F4:3C:D8:8C:95:B6:30
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/444964230ac08ab3cd34cda84a2e00e10cfaa392.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.41.34.0-200.41.37.255
Signature Algorithm: sha256WithRSAEncryption
5c:3e:55:7b:67:df:b6:18:a4:fb:93:c2:fc:fc:2f:1f:e8:eb:
17:4b:16:9c:63:d0:a2:7f:4a:9d:76:35:c0:ce:1c:29:a8:cd:
90:90:cc:93:ab:d5:51:88:6f:0a:03:1c:7e:18:a8:94:bf:e1:
09:e0:a2:43:ce:0b:59:23:bd:04:da:ac:50:db:f0:28:ed:90:
eb:c2:d1:64:36:ef:78:7d:8c:52:71:37:98:9e:f8:b4:c5:b9:
e4:4e:c0:e7:82:94:14:68:b9:e1:5b:4e:22:31:82:36:d4:fd:
8d:02:f1:99:b2:b1:be:56:86:a8:ff:b5:15:d0:5f:f0:e9:f6:
93:9e:41:a6:c4:3f:8f:8f:0f:75:61:71:9d:e8:09:5a:a8:ac:
bc:58:fc:f9:92:f1:aa:1c:a2:fd:a2:d1:16:87:c5:a7:90:8f:
d4:c7:fc:4a:94:4e:75:fb:d8:19:47:bb:7a:be:00:9c:1c:61:
da:65:da:09:22:25:5a:6a:41:79:a8:17:92:8b:81:23:b6:7e:
b5:09:82:62:8b:34:3a:75:90:65:63:7b:bd:19:3c:1a:bf:f5:
c5:0d:bb:ac:5f:83:4d:57:3d:1b:b0:da:e1:0d:bb:31:90:26:
cb:a8:5e:23:e3:e9:b4:3f:a8:fa:5d:78:9d:98:ba:1c:23:a2:
61:1d:4c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 21:31:50 2023 by rpki-client on console-fra.rpki-client.org