Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/4aad2dfae3afc9ab22efa29f570da431baaed500.roa
File: 4aad2dfae3afc9ab22efa29f570da431baaed500.roa (raw, json)
Hash identifier: rhIQBZCqIAYIb/QipHZzOcYkC5UKo/bB+MAEXwTNEWw=
Subject key identifier: 5E:41:15:19:2B:B9:E3:13:70:1C:EA:D8:E9:72:C0:CB:F6:8F:54:74
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 0E421C
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/4aad2dfae3afc9ab22efa29f570da431baaed500.roa
Signing time: Wed 24 Mar 2021 14:30:55 +0000
ROA not before: Wed 24 Mar 2021 14:30:53 +0000
ROA not after: Tue 24 Mar 2026 14:30:53 +0000
asID: 52255
IP address blocks: 201.234.19.0/24 maxlen: 24
201.234.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934428 (0xe421c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Mar 24 14:30:53 2021 GMT
Not After : Mar 24 14:30:53 2026 GMT
Subject: CN=4aad2dfae3afc9ab22efa29f570da431baaed500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:15:43:64:06:94:e1:6c:d4:0d:de:c1:59:e0:
02:df:6e:8f:79:68:94:11:4b:19:02:f8:26:58:a2:
36:9e:a2:aa:45:b1:a5:94:d1:74:2f:d5:a2:8a:c8:
fd:50:0a:89:b0:93:dd:89:55:06:29:16:42:c9:bc:
72:3f:ea:90:e7:6a:98:6a:0a:18:0f:db:ec:7a:0e:
2e:38:d2:8f:bc:ac:b1:2a:6e:3d:db:de:c9:f6:c6:
c6:62:6f:89:11:f1:c2:b2:70:b7:4d:93:c9:55:34:
a0:32:34:61:7d:74:48:4d:c8:56:d3:7b:d1:d7:77:
88:1d:b6:d3:51:22:7c:d0:f6:f7:5f:da:3d:24:53:
a9:e2:53:1f:42:ea:e1:03:c0:05:a3:d7:d0:0e:ec:
a5:2a:dd:e4:62:cf:dc:b5:4d:1c:8d:34:16:f3:69:
64:2e:1a:73:6c:bc:16:5d:af:32:b1:bc:52:c0:4e:
d6:e4:fd:f4:0c:da:8a:30:36:8b:a2:9f:a9:a3:93:
b3:3f:b9:79:98:2b:d2:5e:59:eb:c4:9c:0f:57:d8:
e9:7c:3b:9c:34:bc:e7:ce:3c:83:40:fc:70:d4:8e:
56:8c:55:82:f6:9f:fd:bb:04:f4:21:b0:f2:46:a8:
43:43:76:70:cf:a5:a3:66:c5:6a:d0:18:9d:47:59:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:41:15:19:2B:B9:E3:13:70:1C:EA:D8:E9:72:C0:CB:F6:8F:54:74
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/4aad2dfae3afc9ab22efa29f570da431baaed500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.19.0/24
201.234.101.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ff:f4:22:92:40:77:2f:ce:06:71:0e:6f:35:93:6f:4b:39:
39:ca:5d:9a:eb:f2:9c:c8:b0:d4:1c:7d:d4:54:25:1a:3a:90:
f2:70:5e:62:71:33:4e:e3:e1:17:68:4c:14:39:8b:ef:29:a3:
52:d2:ea:a9:07:cd:31:b4:4e:38:de:66:53:36:31:86:17:d1:
12:fc:ba:ac:19:c4:d1:c0:c4:de:26:d7:5b:e9:f8:bb:67:1d:
9a:dc:bb:45:95:83:32:d1:e9:6a:85:b1:a1:2b:40:a0:90:14:
7f:d4:38:f8:51:51:36:29:81:c1:71:70:62:3f:b1:dd:2a:2d:
8f:be:be:ef:2a:23:26:25:a0:86:c9:dc:a7:b0:74:9c:bb:59:
b5:8b:fd:a8:1d:d5:85:fd:da:9b:5c:2e:52:f6:0e:c1:27:38:
21:ee:6c:c6:65:4f:8a:93:18:2b:97:3c:81:a0:9f:fb:13:4b:
da:67:8e:7e:c5:34:85:da:4b:4e:c1:07:f2:96:61:c3:ae:e0:
4b:d1:c9:c2:d0:89:e3:e5:48:93:94:84:a6:49:33:ec:60:aa:
8b:bd:31:18:6c:2d:13:4b:64:d5:21:96:a9:cc:1d:eb:72:a3:
b1:5f:c0:1c:02:6f:b2:52:a1:23:fc:00:25:bf:d1:2b:49:a1:
d5:0a:1e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 21:29:53 2023 by rpki-client on console-ams.rpki-client.org