Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/709d50d8c4772ecc17840605a082fc7dd7f84dc2.roa
File: 709d50d8c4772ecc17840605a082fc7dd7f84dc2.roa (raw, json)
Hash identifier: AyyHxk8FubICBTOlTNCqCxlq7X19+PjyfiM8OtH2mMQ=
Subject key identifier: DA:57:9C:AE:A8:43:77:63:2E:EA:15:15:11:A4:2F:21:69:4E:52:47
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 0E338F
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/709d50d8c4772ecc17840605a082fc7dd7f84dc2.roa
Signing time: Wed 24 Mar 2021 14:30:55 +0000
ROA not before: Wed 24 Mar 2021 14:30:53 +0000
ROA not after: Tue 24 Mar 2026 14:30:53 +0000
asID: 22699
IP address blocks: 201.234.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930703 (0xe338f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Mar 24 14:30:53 2021 GMT
Not After : Mar 24 14:30:53 2026 GMT
Subject: CN=709d50d8c4772ecc17840605a082fc7dd7f84dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:ab:f9:1c:8c:bd:fc:b2:cd:41:df:7f:3d:
64:c2:a6:bd:02:cd:de:cb:31:5e:5c:6b:9e:34:a7:
65:8e:8d:26:e9:3b:48:0f:0d:84:f9:b7:0c:7d:ad:
f2:23:8b:2b:04:21:14:c8:18:a1:ea:68:9d:18:55:
cb:80:a0:87:3b:c1:05:1c:f8:d4:a4:59:4a:5a:50:
b7:7c:50:f0:7b:3e:c0:2c:ec:5c:46:8f:9e:b1:32:
bd:0a:47:b7:18:9c:b5:29:14:49:36:a0:9d:61:0e:
e6:b0:8d:a1:b1:64:ac:b4:03:03:78:c7:a6:22:70:
98:83:50:11:ec:69:cf:50:bf:a2:00:a9:e3:d8:31:
a5:bd:d7:89:64:0b:18:d2:92:8f:64:65:a1:a2:53:
15:ac:72:a3:1a:7d:cf:a7:7a:3d:7d:2a:b9:ff:70:
b8:53:02:7e:6f:48:c6:d4:25:44:75:b8:0c:86:a4:
60:41:71:d3:8b:6c:ce:64:b4:1d:b7:77:a4:70:32:
2a:61:21:a8:f3:4a:14:b7:b3:be:42:b9:26:31:e4:
23:6e:85:fa:ec:b7:3c:ea:6a:d8:ba:9d:16:be:90:
88:ea:14:b6:74:b6:d7:93:3f:95:81:6f:98:31:31:
dc:03:ba:a9:37:6b:39:c7:ba:02:63:c7:43:2d:01:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:57:9C:AE:A8:43:77:63:2E:EA:15:15:11:A4:2F:21:69:4E:52:47
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/709d50d8c4772ecc17840605a082fc7dd7f84dc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:0e:03:23:7b:56:47:89:90:7b:9e:e5:9d:bc:02:fb:43:98:
d4:98:ae:a1:cc:5f:c5:c2:79:15:fb:b7:3e:ce:95:0c:d4:c2:
8b:5d:7d:51:0a:83:c5:8b:b9:d5:82:c6:dd:de:bf:7b:13:b5:
14:4a:40:8b:ce:03:fb:1c:18:74:3a:89:83:f0:9c:0b:20:e1:
00:fc:3c:77:5a:6c:c2:aa:6b:ae:fe:0e:7d:b6:76:ac:35:22:
cf:bf:f5:81:ec:e0:81:9b:b4:8a:4d:91:05:11:e5:ec:2d:69:
37:d5:0a:77:48:ff:e8:69:b1:4c:b4:45:27:eb:d8:8d:89:ff:
3e:ec:1e:47:c6:53:e0:9b:d0:aa:92:e1:15:89:60:ee:e9:e7:
bd:a5:0b:92:ee:7a:f4:31:11:a0:12:1a:59:00:89:0e:2e:48:
fa:23:6a:6c:bc:ee:bc:45:b1:da:30:7b:93:b8:ab:f4:66:b1:
5b:89:f0:05:cc:eb:f3:cc:8f:cf:3e:4c:79:75:31:44:92:04:
a9:4c:9a:e0:87:a4:92:0b:75:09:08:05:81:9e:e6:51:b5:5d:
b4:bb:77:0f:91:91:d7:56:20:e1:5c:c7:d6:5f:21:b9:65:84:
cf:28:5c:4b:2e:55:a2:7f:b9:12:c5:89:af:62:c1:95:0c:ec:
87:7f:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 21:31:50 2023 by rpki-client on console-fra.rpki-client.org