Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/76e1905fce6042a9d2852688b015307c1c65d416.roa
File: 76e1905fce6042a9d2852688b015307c1c65d416.roa (raw, json)
Hash identifier: 7kqNh76Nr/OAg+OxCG161iE0at6rzn8p2yo+yZR+IKw=
Subject key identifier: A0:4A:73:8C:BD:18:94:19:A3:EB:A3:CD:AD:BF:77:71:90:2C:DE:9B
Certificate issuer: /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial: 18C07E
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/76e1905fce6042a9d2852688b015307c1c65d416.roa
Signing time: Wed 18 May 2022 16:23:18 +0000
ROA not before: Wed 18 May 2022 03:00:00 +0000
ROA not after: Sat 18 May 2024 03:00:00 +0000
asID: 272130
IP address blocks: 200.30.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 17:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1622142 (0x18c07e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Validity
Not Before: May 18 03:00:00 2022 GMT
Not After : May 18 03:00:00 2024 GMT
Subject: CN=76e1905fce6042a9d2852688b015307c1c65d416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f5:2e:60:1d:b1:f2:8c:6a:77:71:6c:c1:1a:
ac:86:79:b4:7b:af:4c:bf:e5:bf:fa:d5:d9:81:bf:
e0:73:48:df:fd:28:1a:1d:3f:50:27:e8:bc:dc:b2:
d0:21:5c:40:01:28:99:84:70:fe:73:a6:30:fc:28:
03:bb:b7:30:b6:77:c9:ad:02:3b:fc:af:f2:16:6e:
b0:83:d3:b9:ea:e7:c5:76:db:05:ec:21:6a:53:24:
95:52:92:62:f2:06:0f:6e:c4:1f:c9:3d:30:58:95:
bf:1f:5c:81:22:b3:1c:50:0a:87:1b:7c:79:43:43:
20:f2:1d:26:57:1d:3a:5a:5d:61:62:e6:da:1e:94:
7d:2e:32:53:77:6e:01:4b:52:2a:01:ea:a7:c4:74:
1a:57:49:d7:bf:2c:a0:e8:74:ea:35:10:ee:75:ac:
0f:ed:d1:6c:68:82:cb:18:1d:a5:a5:6b:77:b5:ac:
3d:c8:4d:e9:18:86:6d:20:9f:70:2b:e8:b5:93:b7:
7b:7c:eb:32:64:95:05:fd:bc:5e:73:69:30:00:06:
1c:0e:29:a0:b8:c9:47:02:ae:42:37:4b:ed:90:61:
60:71:6c:21:f2:40:1a:ca:24:bb:29:c2:ee:a6:04:
a1:6b:63:3a:26:3c:9d:79:26:ca:6f:d7:66:0d:36:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4A:73:8C:BD:18:94:19:A3:EB:A3:CD:AD:BF:77:71:90:2C:DE:9B
X509v3 Authority Key Identifier:
keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/76e1905fce6042a9d2852688b015307c1c65d416.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.30.187.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d0:69:83:99:16:b7:b3:2f:76:01:2e:15:14:02:c0:b7:dd:
6b:e5:28:e3:0b:91:1d:d2:ae:a1:68:05:ce:9f:5d:f0:a6:14:
4b:87:75:71:d3:26:e0:d1:53:e6:c5:48:25:88:5c:54:14:34:
7a:ea:44:38:9a:8e:e6:99:d4:a6:46:e6:bc:f0:d8:3a:3f:79:
03:16:95:0b:b4:fd:b6:f5:29:c4:63:56:f2:6b:03:10:71:b6:
f7:c0:9a:54:e1:48:23:fc:ff:5f:44:15:d8:ff:82:46:59:97:
b0:20:81:9d:4d:a6:28:6c:25:03:b2:22:a8:84:30:4b:b9:32:
d0:b8:c2:92:24:4f:b7:29:56:0a:25:d1:1f:78:ea:24:cc:aa:
02:fb:f5:e1:77:0c:2b:fe:d1:05:5f:f8:24:38:57:75:19:55:
70:48:6e:77:c7:7d:2b:7b:e4:01:60:1c:78:c1:0e:60:12:88:
89:03:06:87:3b:6c:86:bc:a5:51:b9:5b:12:cc:6b:c2:bb:2c:
0e:06:b5:5d:72:0e:6d:85:68:04:57:a6:5c:cf:04:8c:01:dc:
91:88:22:13:d5:54:7c:1a:28:6e:41:82:a2:48:87:ed:3e:2c:
8b:14:16:86:02:53:05:9f:dc:fa:91:e8:cc:6b:5c:98:4b:87:
da:f5:85:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 18:56:14 2024 by rpki-client on console-ams.rpki-client.org