Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/f4a65071e5f6646393dc11d0307ff5eac4a03d3d.roa
File: f4a65071e5f6646393dc11d0307ff5eac4a03d3d.roa (raw, json)
Hash identifier: Q2M/UwpB3DOSps+7MaJ57viCTzQOrfY3b78XU2o2BCg=
Subject key identifier: DC:D2:43:38:00:8D:F4:12:14:CF:46:30:B0:D8:73:60:58:30:6A:52
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 0E10B0
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/f4a65071e5f6646393dc11d0307ff5eac4a03d3d.roa
Signing time: Wed 24 Mar 2021 14:45:10 +0000
ROA not before: Wed 24 Mar 2021 14:45:09 +0000
ROA not after: Tue 24 Mar 2026 14:45:09 +0000
asID: 18809
IP address blocks: 200.46.20.0/24 maxlen: 24
200.46.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921776 (0xe10b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Mar 24 14:45:09 2021 GMT
Not After : Mar 24 14:45:09 2026 GMT
Subject: CN=f4a65071e5f6646393dc11d0307ff5eac4a03d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:93:a7:0b:ab:bc:21:e6:0f:4c:fd:52:2e:3f:
a8:a6:19:e8:19:6b:b2:aa:31:2b:40:d8:fe:2c:38:
42:f4:78:24:a2:d0:d4:df:a5:14:7c:87:9d:6c:d1:
07:d3:33:3c:3e:ac:33:4a:3f:e2:f6:af:10:13:5e:
98:db:54:e4:4b:bd:37:75:80:e8:af:ce:8a:96:10:
6c:d2:40:88:e9:19:3d:a2:09:cc:b8:86:18:b4:05:
3c:cf:2a:97:0b:60:73:1e:db:5d:80:7e:c9:e4:ae:
7f:6a:87:1c:35:a1:32:58:83:81:8b:b9:3b:75:9c:
31:b3:92:2a:62:67:98:7d:36:7a:df:27:3d:d5:99:
ff:b8:5e:ba:27:9f:39:3d:82:07:9b:31:19:2d:05:
b7:ed:51:39:7b:62:78:84:7f:b5:3a:3c:eb:86:24:
1a:c4:2c:f5:f3:1e:5b:23:99:cd:b1:be:83:49:c9:
27:1b:97:6a:02:fa:73:9d:f8:6f:b6:a7:8c:97:3b:
ab:3e:51:d2:3f:02:ae:7d:5b:d5:3d:87:65:d6:31:
68:31:68:de:bd:f9:08:f1:34:ba:6a:55:de:54:81:
10:2f:0e:68:54:9d:41:c7:41:49:33:2f:b1:e9:9c:
9f:2e:15:30:28:95:15:3a:77:ed:d9:41:d6:ff:d8:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D2:43:38:00:8D:F4:12:14:CF:46:30:B0:D8:73:60:58:30:6A:52
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/f4a65071e5f6646393dc11d0307ff5eac4a03d3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.46.20.0/24
200.46.72.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ab:79:b6:d7:bb:f6:c9:62:8f:9c:af:d1:dd:d1:d8:25:d9:
8b:e7:8c:0b:30:36:bd:b5:7d:0b:2a:9e:2d:ff:01:54:ed:85:
42:05:59:12:55:20:6a:de:a0:c1:8a:ca:06:0b:fe:15:96:22:
39:df:ea:b5:a5:85:29:bf:e8:d8:5f:87:ca:0b:3e:ad:f5:23:
17:4c:9b:c5:c1:88:7c:cf:68:25:8c:91:6d:e5:58:ab:78:b7:
2f:7a:b1:27:9a:da:79:a8:7d:20:1d:be:df:be:aa:eb:5b:f9:
6c:ca:b9:e9:f0:2e:a8:0e:6b:b9:0c:d3:c8:3d:df:32:19:b3:
4c:7e:a0:4b:97:91:57:76:b9:73:e4:b9:d0:7a:29:a7:73:95:
a4:1f:49:e3:17:20:f4:d8:13:de:84:27:59:93:cc:fc:4f:5a:
73:5d:4d:1b:cf:2d:1b:dc:ad:3d:ea:1c:63:fe:c7:4b:8e:06:
41:db:5b:56:41:e7:03:10:cd:52:2e:fc:a2:88:32:d8:3c:f3:
b5:30:86:59:33:4e:fe:8a:12:80:c6:8b:21:f3:1f:e9:f2:12:
61:b8:79:3c:6f:2a:35:31:9f:78:c1:8c:6b:64:f8:2f:72:c2:
4a:94:bb:4a:ab:2f:e9:5a:87:a6:7a:21:45:df:84:5c:f8:86:
ff:11:c4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org