Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/517e41d0a0a7a7c7e9a0a65c5df795d10093cf72.roa
File: 517e41d0a0a7a7c7e9a0a65c5df795d10093cf72.roa (raw, json)
Hash identifier: 163ezhV29qfUsl5AaJDG1HgXabGwslWqxTnNeZ3nWrQ=
Subject key identifier: 23:35:0C:26:AF:72:C4:BB:BF:0F:88:4D:D2:FF:F4:41:9A:00:57:1F
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 0E32A7
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/517e41d0a0a7a7c7e9a0a65c5df795d10093cf72.roa
Signing time: Wed 24 Mar 2021 14:30:55 +0000
ROA not before: Wed 24 Mar 2021 14:30:53 +0000
ROA not after: Tue 24 Mar 2026 14:30:53 +0000
asID: 22698
IP address blocks: 200.31.18.0/24 maxlen: 24
201.234.187.0/24 maxlen: 24
201.234.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930471 (0xe32a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Mar 24 14:30:53 2021 GMT
Not After : Mar 24 14:30:53 2026 GMT
Subject: CN=517e41d0a0a7a7c7e9a0a65c5df795d10093cf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:52:95:97:40:6d:d0:72:c3:ca:b5:5d:89:22:
b3:85:3a:0d:d2:0c:ff:6d:1f:50:b8:b8:95:8e:20:
ed:cd:05:fc:59:51:6c:7a:6d:27:b0:aa:45:ff:53:
af:4d:59:8c:5d:fe:32:ec:3b:0d:09:0c:5b:c2:a2:
83:a8:d2:3e:00:c3:e0:09:df:d4:88:72:e5:eb:56:
93:95:4b:49:71:f5:a9:cd:cf:2d:e8:5a:fd:cf:47:
3e:f8:57:e1:f1:cf:29:16:d1:ea:18:86:0a:9c:cd:
76:3d:4b:83:74:d4:fd:0d:a7:ae:88:cd:11:26:a6:
65:78:a0:37:e0:5f:37:af:b6:cb:e2:4e:78:7c:d4:
59:fb:8d:94:ac:ed:39:9d:b0:d7:e0:46:38:30:85:
09:f3:2d:cf:31:f9:4c:b4:58:be:e8:c6:21:a0:d2:
74:e8:bd:01:67:cb:c1:e8:40:6c:07:c4:56:9a:99:
bc:f4:bb:12:57:03:8d:41:f0:ea:6d:80:4c:af:87:
f4:ef:a8:b3:3b:34:22:d5:ba:0b:43:2d:17:ec:22:
83:f1:ec:c6:b5:67:a2:a7:80:e3:56:61:ae:ca:fa:
d8:31:bd:1a:dc:38:8e:67:a9:08:6a:16:7e:34:14:
20:75:6b:56:8f:70:e3:73:42:75:b1:25:a1:5f:1d:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:35:0C:26:AF:72:C4:BB:BF:0F:88:4D:D2:FF:F4:41:9A:00:57:1F
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/517e41d0a0a7a7c7e9a0a65c5df795d10093cf72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.31.18.0/24
201.234.187.0-201.234.188.255
Signature Algorithm: sha256WithRSAEncryption
92:57:d1:b8:39:04:3d:e2:14:3b:a6:86:88:80:48:27:ca:68:
8d:1a:00:ea:d8:ec:8a:fc:aa:94:c0:9c:d6:1a:4a:53:72:88:
cc:8b:fb:13:4c:e6:f9:3f:77:a2:4a:4d:ce:4c:41:75:f7:52:
dc:66:7a:4d:09:7c:9f:d1:16:4a:f2:56:7a:5b:38:78:bd:ad:
f7:e8:e0:c8:15:6c:2d:5f:ed:da:e3:45:dd:75:7f:fc:e3:91:
5a:84:c5:02:69:67:7f:1d:be:3a:9e:a3:36:b8:ef:8d:89:64:
7f:c5:2c:35:fb:e8:db:2c:10:4c:2a:47:24:c8:b3:ba:20:d3:
a1:28:5a:05:f8:bd:b3:a8:b2:7a:21:53:f0:c2:0a:88:f8:88:
b5:71:88:d1:c7:24:46:29:4f:d0:3f:c4:29:f8:da:d3:d3:1d:
bb:ca:0a:7b:21:f4:fc:34:df:fb:a9:d1:63:3b:b8:75:49:61:
ab:63:ba:3d:fb:cd:ee:2f:f8:7b:8a:77:e2:56:d9:61:58:a1:
a2:6b:94:a8:02:2f:2d:f7:5c:f5:e7:74:f4:23:2d:b9:4d:5d:
a2:79:03:9a:79:7e:fa:26:5a:80:f4:a0:bb:26:2d:86:f2:d2:
09:5c:29:4a:06:90:c8:a8:57:d6:9e:5b:df:d8:77:fc:7f:37:
0c:41:c3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 21:29:53 2023 by rpki-client on console-ams.rpki-client.org