Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/4d611dd6c40b7d294959b016f7e25ae17a1d2022.roa
File: 4d611dd6c40b7d294959b016f7e25ae17a1d2022.roa (raw, json)
Hash identifier: lawFbLGiIsFBlF20h1/+lnJFshIjAFY8awi1wVgExGY=
Subject key identifier: DE:7F:6B:02:AD:8C:99:C2:30:88:B6:B7:92:C2:F0:01:4A:0D:73:66
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 0E4CAA
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/4d611dd6c40b7d294959b016f7e25ae17a1d2022.roa
Signing time: Wed 24 Mar 2021 14:30:55 +0000
ROA not before: Wed 24 Mar 2021 14:30:53 +0000
ROA not after: Tue 24 Mar 2026 14:30:53 +0000
asID: 22411
IP address blocks: 200.41.86.0/24 maxlen: 24
200.41.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937130 (0xe4caa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Mar 24 14:30:53 2021 GMT
Not After : Mar 24 14:30:53 2026 GMT
Subject: CN=4d611dd6c40b7d294959b016f7e25ae17a1d2022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c8:9a:0d:6c:fc:33:74:4b:f3:5d:27:c5:e3:
ab:18:ef:86:7e:31:af:31:7c:8d:e1:b7:99:3c:f2:
23:40:b0:74:08:62:80:75:5e:20:9d:ca:cd:34:d7:
7d:64:8c:71:ed:3d:a2:31:70:b9:04:65:f3:2b:29:
6a:81:84:fe:ff:15:d7:11:84:60:96:8f:97:c0:55:
b2:a8:90:e7:19:ad:66:c0:74:a1:a0:bc:c9:06:b2:
64:fd:f3:1c:d5:1c:fe:83:02:f2:03:04:1f:c9:61:
e3:a5:e1:19:15:cc:c6:55:33:77:28:59:4f:37:67:
ea:fe:2a:a4:a4:bd:e8:b7:6c:44:2e:d2:96:8e:68:
a6:9f:a8:7e:8c:56:a2:ca:11:a4:d3:6b:b1:66:a1:
f1:c4:f6:1e:a3:30:17:cc:1b:29:07:82:9f:ee:32:
65:e4:9d:df:86:fa:77:d4:6b:fa:39:45:57:8e:28:
ea:96:88:65:26:8d:46:b3:b6:bf:02:ad:c4:a0:aa:
9d:26:17:08:4f:47:44:5d:35:58:47:d9:ea:ea:af:
c0:2a:0c:c5:2b:22:80:1d:ab:60:15:1c:9b:a8:4a:
39:f5:ef:1d:43:d7:ed:9f:e0:ef:b6:99:e8:89:2b:
8b:e1:91:1e:90:85:10:0b:0e:0d:8d:c8:cb:ac:4f:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7F:6B:02:AD:8C:99:C2:30:88:B6:B7:92:C2:F0:01:4A:0D:73:66
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/4d611dd6c40b7d294959b016f7e25ae17a1d2022.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.41.86.0/24
200.41.100.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:9e:1c:f5:59:be:be:4f:7a:b8:ff:f4:91:d9:26:0b:3e:ba:
6e:c8:54:2c:a9:15:8d:ae:11:15:3d:44:24:74:69:7e:5a:4c:
38:15:a0:f0:d1:b1:07:a3:fb:40:b5:cc:b2:84:de:0a:f7:9e:
ab:69:03:6b:c3:4e:a2:3d:8a:af:9a:bb:98:44:95:d1:48:b5:
fc:7b:1d:18:f9:e4:cc:0d:98:6c:c7:52:d3:b3:45:8f:1f:e2:
2a:6c:77:85:eb:a8:9f:7e:56:6b:bc:ad:28:e7:71:15:a0:da:
07:c3:ba:28:61:fc:f0:a0:a6:5b:60:76:63:b7:8a:7f:43:d6:
e9:c5:ec:ed:90:c6:4b:e6:85:11:fc:9a:19:81:a2:2f:ad:59:
76:5e:55:04:0e:d1:3d:1b:20:80:84:54:f6:3a:cc:59:3f:fd:
5b:45:de:ef:67:c3:eb:ac:9a:19:f1:21:c5:fb:88:37:72:4a:
68:0a:76:02:4e:f6:ba:66:e5:fd:7c:91:a9:07:49:c0:c5:55:
2b:9f:be:3e:36:63:bd:8f:90:65:12:e0:69:07:c1:c3:2d:86:
8a:14:80:25:57:45:bb:10:8b:81:2a:e2:62:37:96:0c:96:47:
6c:25:62:e5:66:72:42:4b:2f:31:5e:5e:2f:2e:33:d3:82:cc:
bc:7f:16:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 21:29:53 2023 by rpki-client on console-ams.rpki-client.org