Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/e42bc66e208b225de0a2c759d9216a1cf75d2d00.roa
File: e42bc66e208b225de0a2c759d9216a1cf75d2d00.roa (raw, json)
Hash identifier: +54ADeRNVCIkCHm9e04CcOjknJrOPDSSjjv3sB/cc/U=
Subject key identifier: 8B:28:A3:83:6E:17:24:3E:7E:41:9F:78:EC:3D:CC:D0:0B:B2:F7:8E
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 0E46E3
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/e42bc66e208b225de0a2c759d9216a1cf75d2d00.roa
Signing time: Wed 24 Mar 2021 14:30:55 +0000
ROA not before: Wed 24 Mar 2021 14:30:53 +0000
ROA not after: Tue 24 Mar 2026 14:30:53 +0000
asID: 263736
IP address blocks: 190.216.28.128/25 maxlen: 25
200.31.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 935651 (0xe46e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Mar 24 14:30:53 2021 GMT
Not After : Mar 24 14:30:53 2026 GMT
Subject: CN=e42bc66e208b225de0a2c759d9216a1cf75d2d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:38:d5:a0:5b:c8:43:96:9e:53:8a:82:c1:af:
12:46:2c:fa:19:5a:65:8d:3a:ff:0d:05:20:03:fd:
92:2b:46:c4:ee:a9:ca:ca:4d:f4:c7:2d:d5:8f:20:
35:9b:c6:40:52:bc:0f:51:8f:68:56:72:51:6b:70:
f0:b5:11:42:79:61:a7:fb:64:0e:54:5f:e4:bb:26:
93:46:6d:f4:27:3e:ab:2e:1d:ad:8d:1d:19:4a:62:
6c:98:26:0b:29:48:d1:ea:2d:5c:be:46:24:5a:ac:
48:7a:a3:92:a7:68:d9:a0:e1:1d:eb:75:ec:e8:02:
ef:b8:d6:d3:81:dc:7b:00:a3:09:e2:23:7c:ac:2b:
b7:43:4c:53:c1:fb:ba:b2:6e:b6:85:d3:fe:f9:f8:
5b:0f:08:df:1c:7d:a8:40:2f:f9:12:b1:d6:b2:b2:
54:88:75:df:a6:5c:2f:f8:1d:bd:09:b5:c9:86:fe:
8e:ae:7f:f6:1a:78:10:ea:80:f5:7c:fa:25:da:aa:
f7:88:ec:2c:e5:43:d8:fc:db:c9:dc:99:ff:11:39:
ee:0a:9f:f9:bb:d0:31:46:fc:b8:94:0e:bc:a2:12:
2d:fb:d0:4e:66:8e:87:b1:30:f0:70:de:db:18:a5:
6e:25:e0:68:24:da:f9:1e:45:42:ac:fa:55:84:16:
7d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:28:A3:83:6E:17:24:3E:7E:41:9F:78:EC:3D:CC:D0:0B:B2:F7:8E
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/e42bc66e208b225de0a2c759d9216a1cf75d2d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.216.28.128/25
200.31.3.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c6:95:64:d9:07:19:bf:24:72:5c:67:7d:5d:e9:01:51:dc:
cd:9d:64:90:ea:09:df:63:a3:fc:16:9b:21:78:30:18:58:e5:
7a:97:55:7b:41:90:5a:5f:fa:97:d6:4f:af:3a:fe:f6:c3:06:
9b:f8:c0:0a:0b:f5:02:02:e8:01:62:6c:c7:fd:e5:be:3a:f7:
6e:9f:4d:ea:87:f6:88:ac:7a:92:b7:28:10:29:3a:24:e8:f2:
92:ef:29:0b:5b:fb:0f:d4:f6:3c:d8:0e:98:f1:e2:a8:79:44:
98:f7:18:2a:e0:0d:49:15:61:f9:74:77:32:08:0d:e6:e1:03:
dd:86:0d:78:9d:2d:ab:d0:f4:d1:08:92:7e:6a:2f:c5:44:16:
ea:6c:d4:cb:f6:fe:c4:80:b2:d6:dd:61:f6:0f:08:8f:a8:44:
d7:85:19:cd:df:87:f0:d5:27:78:a3:11:db:f1:94:51:0a:ad:
f3:0f:bd:68:a3:98:de:43:34:f9:53:68:f1:10:5a:98:60:25:
59:d9:a1:d4:03:4d:59:f2:e3:8b:0c:ba:35:85:14:12:0f:61:
61:e2:ba:3a:dc:8c:41:df:2a:c2:be:10:8a:2f:ec:96:cd:a5:
62:f0:22:ae:1f:13:89:11:e2:69:12:92:43:3e:38:c6:1a:34:
e4:a2:f6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 21:29:53 2023 by rpki-client on console-ams.rpki-client.org