Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/257e9a54ab8aa3c39ac92f87dd613b962e590001.roa
File: 257e9a54ab8aa3c39ac92f87dd613b962e590001.roa (raw, json)
Hash identifier: f5k8aq2zAJyO0mzqmmQVYJhK++MUNd4103LIe+boU1w=
Subject key identifier: D7:5F:5C:1D:54:77:94:97:67:C8:B5:EE:DF:C3:A4:93:9A:4D:EC:52
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 0E6357
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/257e9a54ab8aa3c39ac92f87dd613b962e590001.roa
Signing time: Wed 24 Mar 2021 22:50:28 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 21599
IP address blocks: 200.46.0.0/17 maxlen: 24
200.46.128.0/19 maxlen: 24
200.46.160.0/20 maxlen: 24
200.46.176.0/20 maxlen: 24
200.46.192.0/20 maxlen: 24
200.46.208.0/20 maxlen: 24
200.46.224.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942935 (0xe6357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=257e9a54ab8aa3c39ac92f87dd613b962e590001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:24:2c:1a:7f:20:3a:70:71:73:db:a0:3a:eb:
84:a7:0b:83:ac:ac:af:01:e9:3d:17:c9:23:7a:06:
71:cf:c2:47:9d:1f:21:c4:ab:b4:88:a0:5a:ba:75:
77:0c:1d:a7:ec:04:ab:3c:84:e9:5f:73:67:8e:1a:
e3:23:99:d7:38:b4:e6:99:79:49:92:a1:27:c2:24:
b8:ae:d0:48:27:61:5a:16:98:df:67:5a:ec:34:ee:
79:07:bb:42:cf:22:18:a9:8a:21:e8:47:04:51:4e:
01:be:a9:43:ee:07:c0:7e:91:b8:d5:aa:7e:69:cd:
0c:90:22:0f:a7:80:a9:61:b2:38:69:10:8a:8e:cf:
93:a9:de:36:59:7d:dc:ed:6e:3e:8c:9c:f8:7f:07:
04:1a:f3:6c:cc:1f:5b:16:cf:4f:21:77:8c:c7:c5:
55:d6:cb:fd:c3:07:a2:8b:1c:e3:90:b8:fd:2d:d1:
34:d0:c6:c8:73:2b:88:e1:7c:04:e2:50:92:a3:19:
42:43:be:31:c3:25:0e:32:48:a9:3b:43:4b:a0:25:
b3:c3:9a:33:c4:9e:9d:e3:fd:37:02:43:4c:59:97:
b9:5c:14:02:bf:32:7a:77:0e:9f:6d:17:8d:38:a8:
58:9b:ad:e0:2a:91:0e:9b:25:f0:1a:b5:32:97:d2:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5F:5C:1D:54:77:94:97:67:C8:B5:EE:DF:C3:A4:93:9A:4D:EC:52
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/257e9a54ab8aa3c39ac92f87dd613b962e590001.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.46.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:7c:28:6a:e8:e4:d7:5d:cf:e3:b5:a1:e1:54:75:a2:c4:b0:
55:e9:f2:aa:ba:40:8c:5a:7d:32:12:6b:67:f3:2f:e2:d3:11:
64:c2:86:2e:21:26:b3:0d:5d:fb:a4:d4:07:5f:2d:00:30:98:
18:f2:71:2e:ff:5e:55:df:e1:6e:0e:97:45:bd:1d:ba:41:bf:
c1:44:8a:cb:b7:9b:ce:7b:b1:c5:75:0c:12:0e:93:fb:b8:8a:
f3:0d:d4:7d:d9:eb:f0:bd:a6:be:74:c0:b9:4f:43:b5:46:d0:
f9:cc:3f:05:b7:62:2c:4e:89:93:94:72:29:2e:57:43:93:50:
24:00:ca:af:b1:6c:0b:6e:61:56:6a:46:91:f7:3a:96:1e:03:
a9:51:03:9e:1e:5b:ec:08:0f:01:37:0a:c1:23:d9:13:3f:ff:
58:5f:7f:e2:07:48:a9:21:96:4b:6b:27:bd:9d:bc:99:2f:3b:
1b:bd:56:16:2b:a9:4f:54:61:e3:0b:87:50:29:0d:bf:3f:92:
5e:a4:5d:16:8d:db:af:1f:3d:9d:21:d6:98:20:1b:ae:40:da:
f0:5f:b8:20:c8:2c:7c:fc:eb:02:30:69:a9:38:59:1f:f5:fd:
59:16:8a:0b:1f:32:bd:31:86:70:04:fa:9d:3f:85:09:70:3f:
0b:fd:84:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org