Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/21861bbb8008bb13fdf6ded962b943eb8d6bbd9f.roa
File: 21861bbb8008bb13fdf6ded962b943eb8d6bbd9f.roa (raw, json)
Hash identifier: aGpQMCRCjv9RMw5vWeXrZlkiSPHv0fq4+D+YbkoqiMs=
Subject key identifier: 67:37:77:D0:FA:93:82:97:E7:D3:A0:FA:BD:25:E5:17:24:C9:96:76
Certificate issuer: /CN=bd7f33cd5376098fb55565247f8dae5ea5de2952
Certificate serial: 0DB766
Authority key identifier: A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7f33cd5376098fb55565247f8dae5ea5de2952.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/21861bbb8008bb13fdf6ded962b943eb8d6bbd9f.roa
Signing time: Tue 20 Apr 2021 22:34:55 +0000
ROA not before: Tue 20 Apr 2021 03:00:00 +0000
ROA not after: Thu 20 Apr 2023 03:00:00 +0000
asID: 27958
IP address blocks: 200.50.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898918 (0xdb766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7f33cd5376098fb55565247f8dae5ea5de2952
Validity
Not Before: Apr 20 03:00:00 2021 GMT
Not After : Apr 20 03:00:00 2023 GMT
Subject: CN=21861bbb8008bb13fdf6ded962b943eb8d6bbd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:d2:ac:8c:f1:a0:48:3e:40:0c:2c:2b:21:
b9:39:98:59:de:44:96:8c:30:99:15:10:f3:53:f3:
bf:bf:c5:cc:2f:6c:00:7b:a2:2b:cf:a7:a4:51:ab:
6c:b2:2f:0a:a5:d4:2a:1a:57:df:fc:6e:ac:d8:96:
00:44:39:53:b3:3e:5a:70:7f:37:c8:b8:70:da:ef:
46:37:85:c0:fa:ba:ba:e9:c7:15:9d:bf:53:db:f4:
71:64:7c:6b:38:90:b3:ff:7b:97:4b:55:cf:f2:69:
bd:d4:99:b1:ff:0e:da:0c:64:c7:d2:07:0b:89:a1:
a1:10:9a:47:92:17:e5:3c:4d:63:ce:17:9e:e1:dd:
af:b7:7b:d4:86:6f:b3:bf:50:4d:f4:62:d6:7e:f8:
c2:a8:ad:af:ac:d3:4b:68:b2:61:a2:90:d6:8c:c3:
8e:7a:9f:30:df:21:44:4d:59:07:e7:ec:6c:68:4b:
6d:57:56:a7:6f:40:5d:ba:e7:58:75:25:af:b7:f5:
18:fc:7c:50:b9:f7:09:24:a4:d5:3d:a6:70:19:2d:
ec:4a:35:f3:51:6b:a8:b2:0f:29:4d:d3:d7:a8:f7:
bf:65:0f:fd:d2:fd:57:66:ae:c1:7a:5a:8a:52:fc:
e5:80:4c:19:f0:2c:ab:a9:8f:a7:b6:77:32:e1:f7:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:37:77:D0:FA:93:82:97:E7:D3:A0:FA:BD:25:E5:17:24:C9:96:76
X509v3 Authority Key Identifier:
keyid:A6:04:C9:CB:35:2E:0C:6A:F1:2E:E5:72:B5:4F:8C:35:1B:BF:1C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7f33cd5376098fb55565247f8dae5ea5de2952.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/21861bbb8008bb13fdf6ded962b943eb8d6bbd9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1847714d-49dc-4914-b7c4-efe78e9a10c2/bd7f33cd5376098fb55565247f8dae5ea5de2952.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.235.0/24
Signature Algorithm: sha256WithRSAEncryption
98:8c:73:4e:14:83:69:ce:0c:3d:88:e7:8b:3c:b2:e7:6d:2c:
7e:2c:48:14:6c:2c:f4:3a:af:f0:f9:31:fa:65:90:2b:c9:79:
11:d1:dc:b3:45:22:3c:db:58:a2:e9:b3:47:09:a1:53:aa:87:
6f:87:f0:e2:05:86:17:8f:9e:e7:3b:bc:24:13:3e:01:c7:a5:
e5:6b:f7:b4:de:94:4f:38:03:87:91:5a:f2:76:a5:6d:64:45:
7a:5c:dc:a4:64:bb:06:43:e2:3f:8f:da:48:c6:4d:ad:29:d8:
2b:ba:31:46:dc:10:49:26:c6:be:af:f6:27:35:58:3b:db:6f:
15:3e:21:8d:61:0b:20:a3:ed:0f:5e:5d:dc:10:bc:1e:6b:1a:
f7:73:ae:f8:54:ef:4c:5f:29:9f:07:39:c1:14:ba:b1:38:0b:
d6:a5:a9:be:83:e4:a2:eb:62:36:56:5c:4d:5c:93:f7:5b:b6:
16:82:9f:f2:d1:61:58:bd:0c:9a:03:c8:cd:9b:70:8f:2b:54:
00:cf:ae:3a:25:4e:5b:7f:e4:46:df:8f:f9:38:3c:c8:f3:2f:
c1:78:d6:87:16:b3:72:6b:f5:a7:cb:48:59:d8:9e:99:16:56:
75:4d:33:af:97:41:37:79:9e:65:b3:db:21:a3:16:70:84:3c:
9c:8a:6b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org