Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a27aa316d297420fc6be25ec8799745c2d6eec9e.roa
File: a27aa316d297420fc6be25ec8799745c2d6eec9e.roa (raw, json)
Hash identifier: H2KV53pab5jWfgrnpRnkyw6tPfYANc1KBrRIpHWsJr4=
Subject key identifier: 8A:7A:AD:F3:8A:0F:0A:8A:93:65:AF:B5:7A:8D:C3:24:51:C0:C0:03
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 0E5D29
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a27aa316d297420fc6be25ec8799745c2d6eec9e.roa
Signing time: Wed 24 Mar 2021 14:45:13 +0000
ROA not before: Wed 24 Mar 2021 14:45:09 +0000
ROA not after: Tue 24 Mar 2026 14:45:09 +0000
asID: 28064
IP address blocks: 201.218.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941353 (0xe5d29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Mar 24 14:45:09 2021 GMT
Not After : Mar 24 14:45:09 2026 GMT
Subject: CN=a27aa316d297420fc6be25ec8799745c2d6eec9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:75:ee:83:e0:9f:dc:5d:61:63:ca:09:a7:ce:
fe:bb:1e:b2:c9:5b:6a:4c:28:7c:d7:ac:04:7f:35:
77:d7:dd:46:39:9b:9d:37:ae:ca:58:ef:96:a0:af:
00:8e:cb:3a:6c:07:f3:ad:0a:87:0d:4c:43:50:61:
37:d5:cd:01:ab:8d:3c:f5:0c:26:34:d7:ed:bd:c7:
e3:1b:a1:3c:c5:9d:eb:30:cf:3b:a5:22:80:06:bf:
a3:4c:fb:8b:e6:4d:08:54:13:24:d5:82:c0:7b:8b:
e3:87:75:d9:55:b0:2e:1e:d9:f6:1e:f9:c2:59:1c:
82:29:dc:f4:12:a8:a6:22:52:a6:55:d4:8f:ae:a2:
0e:62:a6:82:7e:37:b6:57:4b:7d:3b:36:58:f4:16:
e0:b0:74:9a:e9:76:53:01:66:3f:4d:75:1c:c7:ca:
44:7a:e8:f6:7b:52:c1:1f:41:b2:9d:14:1a:33:4e:
bc:e8:92:2a:9c:68:b5:dc:13:db:09:38:05:68:7f:
30:44:ee:6c:88:47:12:26:e1:c9:5f:3b:e9:1c:7d:
b7:8d:c5:98:93:bd:9c:60:cc:93:7a:c9:f7:ec:89:
14:c1:98:ca:5c:07:df:db:c6:51:ff:7f:2e:9a:16:
75:44:01:3e:53:4e:84:8d:98:8f:5e:81:13:36:e0:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7A:AD:F3:8A:0F:0A:8A:93:65:AF:B5:7A:8D:C3:24:51:C0:C0:03
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a27aa316d297420fc6be25ec8799745c2d6eec9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.244.0/24
Signature Algorithm: sha256WithRSAEncryption
82:da:e4:0a:20:94:93:19:92:66:4d:8f:23:f7:01:67:fe:b4:
bc:c2:43:ad:b9:b7:d6:57:12:9b:4a:c4:46:e6:79:12:f9:76:
20:27:3c:82:ac:b5:0b:a6:31:20:ca:a2:06:13:bd:a2:1b:44:
69:b6:f0:0f:fd:ec:1a:48:b7:0f:1e:2d:97:fb:99:e0:4c:94:
ad:01:65:c7:c8:7f:b9:a8:91:7d:09:d4:15:45:e6:ad:5d:06:
b8:b6:e3:25:e9:12:a3:20:d7:e1:32:d5:35:60:41:65:2d:9f:
18:38:64:6b:88:17:3d:8a:a3:ad:fb:35:9a:a1:96:51:a4:96:
b6:79:96:0b:cf:1a:93:91:26:4b:44:cc:83:b1:cf:98:12:7d:
b3:42:0a:7e:03:cb:6a:cf:e2:10:92:cf:5f:63:e8:63:73:fc:
b8:1e:db:7b:00:8d:b3:1c:40:16:3e:c1:f0:eb:04:81:db:9d:
16:e3:a9:47:ea:94:77:59:1a:bb:29:51:b0:33:71:de:7c:ed:
0f:b9:cf:f3:44:af:6c:e4:c5:e7:92:ba:20:65:2e:ad:ae:1c:
de:12:81:91:c4:cc:e6:3b:cd:86:4a:2a:97:93:dc:32:26:96:
9e:b8:d9:8e:3f:e0:7d:99:b1:16:21:e2:ca:d4:f9:d5:7c:f8:
b9:20:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org