Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/4b461a6cdd9ba48c02273e6b03919bdc93ab22cf.roa
File: 4b461a6cdd9ba48c02273e6b03919bdc93ab22cf.roa (raw, json)
Hash identifier: TBdB4p4gitz1a72+kkkiPxiiyAjKUrtV1+Gza8/ZdaA=
Subject key identifier: 0D:96:EB:2A:1D:A2:00:50:61:BA:CB:E8:93:E4:20:53:B0:3A:3E:C5
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 0E6A8F
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/4b461a6cdd9ba48c02273e6b03919bdc93ab22cf.roa
Signing time: Wed 24 Mar 2021 23:19:25 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Fri 24 Mar 2023 03:00:00 +0000
asID: 18809
IP address blocks: 200.124.0.0/19 maxlen: 24
200.75.192.0/18 maxlen: 24
200.75.224.0/19 maxlen: 24
201.218.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944783 (0xe6a8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2023 GMT
Subject: CN=4b461a6cdd9ba48c02273e6b03919bdc93ab22cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:b5:e9:36:5c:c9:7c:e3:64:67:53:58:30:
94:1c:a9:e2:e8:12:a8:99:ae:97:4f:9b:75:f6:c8:
cb:6f:1f:f2:bf:25:a7:c1:7a:a0:b5:7f:40:81:83:
0d:8e:75:c0:ba:15:ce:38:a5:57:7e:e0:66:92:c8:
ac:6f:65:47:ed:98:28:f3:72:66:bd:cc:67:4b:73:
e7:25:9d:4b:14:cb:0a:86:b7:35:2d:4c:cf:29:1a:
a2:76:b4:b0:d8:cf:79:c9:64:bf:fe:69:a8:aa:5f:
f3:ee:e6:04:b2:a1:b8:9e:ee:2a:63:68:53:95:2c:
32:44:25:4e:d7:79:4e:47:e6:6f:8c:01:32:1c:19:
45:cb:9d:b4:33:d1:ca:35:9f:56:92:f6:1d:2e:15:
6b:d5:e9:e6:9b:84:6e:a5:16:51:fc:91:3c:53:69:
d2:39:63:b4:f8:13:58:43:c5:86:ce:de:eb:a0:26:
6c:55:f8:86:65:41:d5:21:11:16:ab:97:a1:ad:5d:
7a:00:ae:79:74:41:74:e8:02:73:24:1f:6c:34:a6:
0b:92:f1:70:18:25:89:2e:b3:94:d2:03:cb:80:4a:
34:d8:4c:c5:cd:36:cc:75:0d:d2:25:83:2d:37:bc:
74:02:c3:76:68:0d:e3:d3:c4:5d:1b:04:ce:8a:ab:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:96:EB:2A:1D:A2:00:50:61:BA:CB:E8:93:E4:20:53:B0:3A:3E:C5
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/4b461a6cdd9ba48c02273e6b03919bdc93ab22cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.75.192.0/18
200.124.0.0/19
201.218.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:f9:7b:f1:ea:6d:06:51:9b:0b:ef:36:19:4d:80:7f:cd:2e:
01:03:14:b8:b6:49:f5:e6:0f:84:06:11:83:9c:60:d8:19:40:
42:dd:2a:e3:fe:ed:d3:38:70:b5:b4:1a:01:60:f0:a2:36:9f:
37:06:29:bd:34:71:af:df:ac:fb:54:1e:37:b3:17:dc:ab:f4:
e6:e8:e6:ad:d5:5f:8a:3c:bd:8c:ac:41:b3:9d:ac:bc:1d:a7:
f6:e8:3c:b5:f6:d5:24:34:d7:67:bb:97:3c:1d:4c:7a:c9:a2:
8a:35:7d:48:13:8c:4d:06:f1:1c:db:67:9f:9d:0b:07:03:85:
d5:69:a6:02:36:32:4d:38:02:06:98:0e:38:3f:7e:b9:02:08:
d3:f1:69:7a:58:73:ac:4d:2f:60:c0:1c:64:62:29:3b:af:22:
0b:ae:ff:4c:00:2c:5d:70:a5:54:ae:43:68:23:f3:1d:32:81:
1c:32:ce:f7:05:5b:f0:66:39:ee:78:66:e3:3a:fe:90:a4:e2:
26:7c:f7:88:a7:6a:3c:1d:e3:dc:52:9e:17:db:61:b7:23:9e:
d3:47:54:40:08:76:a4:db:6d:ce:58:fa:15:dc:95:8c:8d:78:
55:2a:c8:5d:5f:06:d2:8a:48:a7:71:78:3b:f1:a9:7f:80:73:
1c:a9:72:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org