Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/30757ef9dc68b288c798818df5b10a5496776ffd.roa
File: 30757ef9dc68b288c798818df5b10a5496776ffd.roa (raw, json)
Hash identifier: 0ZS+YgpIqneESsKTxd4wEqc5vTF/1zJLPOCytoue+ZI=
Subject key identifier: 7C:6E:10:AD:68:31:68:65:0D:63:FE:DF:F9:49:39:8B:F8:B5:E9:7A
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 0E2EC0
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/30757ef9dc68b288c798818df5b10a5496776ffd.roa
Signing time: Wed 24 Mar 2021 14:45:11 +0000
ROA not before: Wed 24 Mar 2021 14:45:09 +0000
ROA not after: Tue 24 Mar 2026 14:45:09 +0000
asID: 27788
IP address blocks: 200.46.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929472 (0xe2ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Mar 24 14:45:09 2021 GMT
Not After : Mar 24 14:45:09 2026 GMT
Subject: CN=30757ef9dc68b288c798818df5b10a5496776ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3b:bb:c6:07:b7:1e:09:f5:9f:4e:98:ab:41:
ed:07:b3:5f:e5:06:3f:ae:62:7d:69:03:0d:49:35:
e1:0c:59:59:d1:40:0c:34:b7:2a:22:e5:a3:5d:00:
e2:58:c7:4a:b7:da:b9:6b:2d:7f:57:68:e9:6e:23:
f0:cd:ff:e3:9a:10:a4:95:46:ad:96:19:30:fa:2f:
06:b2:a9:65:24:21:d2:fb:20:ff:90:40:48:76:ae:
fc:5f:de:c4:6f:17:b7:ef:fb:22:90:fd:9f:8c:8e:
a6:d9:79:6c:7d:f7:a5:07:2f:5b:f3:47:e9:f8:75:
93:17:7b:b7:c6:81:a7:ac:3f:76:90:ba:14:6c:7c:
ae:76:16:1c:1b:3b:5c:fe:03:88:b0:86:f0:4f:dd:
05:4c:06:6d:c4:b1:d2:c1:ef:cd:68:76:2f:6f:6e:
20:59:9d:22:0c:99:1e:c4:d2:0c:e1:c6:0b:ac:1b:
d1:9a:95:79:ce:17:43:f1:03:87:bf:58:20:2e:0f:
72:51:4d:69:02:c4:af:e7:52:54:1d:1e:57:94:cf:
79:cd:72:9b:b0:dd:e5:e9:df:0b:af:54:f5:99:94:
71:35:2a:4c:8a:b9:a1:c2:c4:e8:08:b8:3c:91:74:
65:5b:84:11:05:0a:f6:f2:6e:24:66:24:c0:05:ca:
e9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6E:10:AD:68:31:68:65:0D:63:FE:DF:F9:49:39:8B:F8:B5:E9:7A
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/30757ef9dc68b288c798818df5b10a5496776ffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.46.246.0/24
Signature Algorithm: sha256WithRSAEncryption
79:94:dd:3f:20:59:5a:70:58:18:3b:2b:2d:78:33:84:2f:37:
9b:65:a6:15:c4:2e:e5:99:a8:a6:c2:4b:42:26:9b:a9:00:1c:
ee:cc:95:7c:d1:c9:48:25:eb:a0:35:b2:94:05:0e:8d:77:2e:
5c:9a:3d:c4:1a:8a:52:0a:fa:98:af:c5:05:86:b1:76:21:e1:
2e:62:0f:c8:05:60:7c:02:48:5a:5f:f1:e1:00:76:b8:e4:69:
93:70:f9:15:d1:c6:03:53:76:0a:65:b7:13:52:b8:a5:4f:0b:
34:8c:65:24:62:a1:56:00:89:e6:0b:d8:d6:dd:01:12:09:a5:
fe:31:58:83:52:41:d8:e4:26:96:e7:0f:af:27:0e:07:43:d1:
6d:fb:89:66:2b:fa:b7:01:c5:72:05:1e:db:fd:16:63:10:5e:
45:78:7e:e1:e0:ed:c1:73:ed:f1:14:e2:ca:61:d8:55:79:35:
eb:5d:6b:51:82:62:c7:9e:83:32:e6:5f:a3:d2:ac:03:c6:3c:
6d:d0:c9:3e:0a:06:ce:1d:6e:19:56:5e:df:5f:c7:0b:27:46:
19:be:be:78:11:03:97:33:e4:bd:e4:f9:00:4a:f1:66:fe:db:
f9:d3:18:9b:10:8e:8c:d9:a4:3e:24:51:1f:ba:fc:c2:a5:6b:
1d:00:ed:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org