Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/785473e3f43195c768e88b7d3a3d4643bc995ace.roa
File: 785473e3f43195c768e88b7d3a3d4643bc995ace.roa (raw, json)
Hash identifier: 5RYu9CvCcHihQs3PGVaTY2vJbJkAdQYAoutOTyYVsgI=
Subject key identifier: E1:69:2D:53:EE:CD:C7:9B:1A:1F:1F:FD:C1:16:80:F1:85:01:48:1E
Certificate issuer: /CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Certificate serial: 1FC2E6
Authority key identifier: C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/785473e3f43195c768e88b7d3a3d4643bc995ace.roa
Signing time: Wed 19 Apr 2023 16:44:12 +0000
ROA not before: Tue 18 Apr 2023 16:44:12 +0000
ROA not after: Sat 19 Apr 2025 16:44:12 +0000
asID: 12684
IP address blocks: 200.115.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 21:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081510 (0x1fc2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Validity
Not Before: Apr 18 16:44:12 2023 GMT
Not After : Apr 19 16:44:12 2025 GMT
Subject: CN=785473e3f43195c768e88b7d3a3d4643bc995ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:8b:eb:ef:85:58:1d:0a:2e:84:17:8a:6d:
8a:06:af:dd:99:3a:1f:34:01:b8:35:6b:66:ec:c0:
1c:0a:52:59:85:b5:42:09:e6:f6:d6:0d:22:5d:1c:
74:67:d6:69:82:19:82:92:ef:3a:42:73:89:79:23:
5a:99:05:56:b2:9a:25:cc:05:22:e2:f7:d9:ba:95:
7a:d8:15:f1:4a:14:64:70:30:d9:89:46:cf:3f:6d:
72:bf:ed:4f:d4:dd:c9:a3:6e:2d:35:82:d3:ca:bf:
b2:73:6b:ec:86:50:2e:77:2a:c0:ee:37:3f:f6:c9:
e8:7b:b7:c8:43:09:ad:fc:9d:86:30:8f:d2:5e:3d:
7a:9d:76:8e:b6:da:51:0c:e9:84:0a:cc:10:27:c2:
72:2a:73:c2:0e:34:34:dc:d3:7d:a8:98:53:35:41:
6b:13:74:df:01:97:a5:54:2c:82:9a:e7:00:60:49:
d3:e7:d1:95:82:d3:3e:30:90:e1:fe:df:9b:81:ac:
35:f7:9e:e4:d6:72:c1:aa:56:33:b2:49:36:ff:9a:
19:bd:c0:14:58:03:78:79:82:4c:c7:a3:76:db:95:
85:6c:54:55:f6:90:54:39:98:e7:7c:d7:19:5d:7e:
4e:73:56:a2:6b:c2:36:02:6d:a8:4a:d3:83:c8:49:
c1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:69:2D:53:EE:CD:C7:9B:1A:1F:1F:FD:C1:16:80:F1:85:01:48:1E
X509v3 Authority Key Identifier:
keyid:C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/785473e3f43195c768e88b7d3a3d4643bc995ace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.22.0/24
Signature Algorithm: sha256WithRSAEncryption
52:29:1a:6a:27:da:76:46:9c:65:71:9f:d4:05:16:b6:da:a4:
af:3e:6d:d8:25:2c:1f:3e:a6:9f:23:e0:53:a1:59:fa:4f:a1:
bf:35:8d:cb:74:57:1c:5d:4b:30:59:3d:c2:c7:e7:f2:96:56:
d7:d2:79:d9:d6:a3:5f:76:af:13:65:b8:9b:a7:26:d1:0d:64:
d6:21:a0:20:ec:a9:20:fd:70:c3:68:37:85:af:9b:9b:b6:3e:
96:88:5e:d3:cc:90:28:46:a8:90:05:fb:72:f0:3b:a2:76:9c:
98:bc:4b:dc:9d:c1:f3:9a:a4:c9:c0:a0:55:d0:50:43:f6:52:
38:dc:df:74:1f:6b:f5:be:b5:d8:66:d6:64:1a:d4:51:c2:3e:
47:dd:c3:17:e8:9c:ba:96:4b:01:df:b2:da:14:2f:39:d7:61:
92:13:7a:ac:97:69:27:ed:27:0e:af:17:76:01:c1:de:0c:1d:
50:2f:83:74:8e:c4:c0:46:82:eb:17:78:24:06:f2:96:4e:1b:
20:c4:8a:e5:2a:b2:b5:bb:a4:d8:52:4d:c4:ae:82:bf:f9:d8:
f0:d5:a0:f3:fb:8b:e1:2f:50:a7:c1:ab:7d:e0:ba:3f:e7:02:
7e:f5:cc:e8:c1:16:fb:5a:ad:b8:34:bd:d4:92:2f:8a:1f:63:
f1:42:57:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 01:01:13 2024 by rpki-client on console-fra.rpki-client.org