Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/9538e787a90eed1d2ede525824a11f18f0fe08bb.roa
File: 9538e787a90eed1d2ede525824a11f18f0fe08bb.roa (raw, json)
Hash identifier: fBhmCtd7XF6zWFpGKFeR1pTN0iMhI2jQxU6xU+nDVgk=
Subject key identifier: 3B:C9:CC:6E:49:CF:FC:39:18:21:AF:DE:0F:D6:D5:41:16:19:38:6A
Certificate issuer: /CN=5494bd71484d106b75c5bedf4263f48281a4e409
Certificate serial: 1BC3C5
Authority key identifier: 4C:B6:BE:C7:78:41:99:EC:CA:F0:31:13:8A:C9:9A:2E:66:AB:83:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5494bd71484d106b75c5bedf4263f48281a4e409.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/9538e787a90eed1d2ede525824a11f18f0fe08bb.roa
Signing time: Wed 26 Oct 2022 19:49:16 +0000
ROA not before: Tue 25 Oct 2022 19:46:55 +0000
ROA not after: Sat 26 Oct 2024 19:46:55 +0000
asID: 20940
IP address blocks: 200.60.190.0/24 maxlen: 24
200.60.136.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1819589 (0x1bc3c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5494bd71484d106b75c5bedf4263f48281a4e409
Validity
Not Before: Oct 25 19:46:55 2022 GMT
Not After : Oct 26 19:46:55 2024 GMT
Subject: CN=9538e787a90eed1d2ede525824a11f18f0fe08bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:d8:f6:3f:12:28:a5:ef:40:76:a1:80:b4:
c1:3a:a5:9b:81:bd:ae:ab:48:42:76:b8:f9:03:61:
a8:82:50:b3:c4:22:31:99:10:ba:0b:da:e8:68:e2:
d3:93:f0:8d:27:12:9c:5b:8a:1f:ce:e8:d7:98:33:
f4:90:d3:73:a1:51:77:9e:d1:30:c0:0c:60:d2:03:
30:8d:ce:a4:35:2e:67:f8:ec:8f:9a:ad:f0:22:4b:
c0:14:af:7a:c0:fb:08:1c:64:80:ef:dd:e0:c5:64:
93:c8:2b:24:57:27:1e:c5:f7:fb:ee:6b:2b:25:8d:
47:bb:90:3c:50:97:dc:c5:a8:22:b1:ba:e9:cf:a9:
a4:a0:3b:44:c8:8f:e4:ad:4c:d0:34:4e:d0:2f:d7:
93:ca:14:4c:21:0d:4a:80:4e:c5:a9:86:93:f8:35:
e3:93:0f:28:0d:73:dc:65:ea:d1:84:46:52:d0:97:
d3:c4:2f:64:b7:93:37:6d:80:4a:d9:85:7d:b9:4e:
3d:82:9b:b4:f3:32:3a:24:3b:ec:0f:3f:35:64:71:
41:66:50:30:36:3f:4f:e4:3f:cc:14:90:8a:c5:41:
bd:d7:d9:a4:eb:c9:ed:2b:30:ae:0b:55:66:2d:ea:
cb:b7:4b:60:28:49:76:b2:f7:37:c1:a9:af:0c:47:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C9:CC:6E:49:CF:FC:39:18:21:AF:DE:0F:D6:D5:41:16:19:38:6A
X509v3 Authority Key Identifier:
keyid:4C:B6:BE:C7:78:41:99:EC:CA:F0:31:13:8A:C9:9A:2E:66:AB:83:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5494bd71484d106b75c5bedf4263f48281a4e409.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/9538e787a90eed1d2ede525824a11f18f0fe08bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2797b2f0-e5da-416c-a8d6-a61dc102a441/5494bd71484d106b75c5bedf4263f48281a4e409.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.60.136.0/23
200.60.190.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b6:ba:17:5b:16:de:7d:95:d9:3f:43:f6:00:dc:30:14:e2:
63:c0:d5:00:17:51:44:de:64:77:9a:6b:d0:5a:2f:6a:e9:69:
19:48:1c:66:58:ab:c9:2a:6c:72:18:d2:91:40:6c:7e:22:bb:
a5:8d:a4:07:8a:6b:d3:2f:95:8b:f1:ef:f1:4f:e8:7f:71:0f:
7e:45:0f:99:34:c6:81:28:10:d3:d0:b1:83:01:7e:27:d8:e7:
f4:29:10:69:a7:46:c2:f4:bc:7a:d2:c5:cd:dd:06:a7:4d:cb:
65:4d:e0:a4:0f:0b:8b:99:e0:58:3a:1c:23:b0:21:61:5b:70:
91:75:82:6a:00:95:15:84:ff:e6:1b:c9:03:d0:c2:d2:af:24:
ea:d9:79:c4:b6:d5:29:ca:cf:6f:cf:84:b8:aa:ab:8c:9e:e5:
76:27:00:83:4f:e9:ac:ec:4e:65:e3:b9:6d:95:c1:b3:b6:73:
80:71:9f:cc:6b:32:99:f1:9d:84:0e:cf:52:01:a7:98:40:b1:
33:eb:2d:ac:86:e9:fe:e2:3b:cd:e2:bc:2f:6e:fa:0f:03:da:
0c:c2:5b:8d:d4:ff:14:d1:ac:cf:be:f9:fe:cc:14:70:00:2e:
67:ed:5f:f6:47:03:e1:db:27:b2:41:91:43:ba:46:83:10:09:
ca:49:c4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 17:41:26 2023 by rpki-client on console-ams.rpki-client.org