Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/5f2e50b72385a61df638e998f777b3b2d4a34361.roa
File: 5f2e50b72385a61df638e998f777b3b2d4a34361.roa (raw, json)
Hash identifier: W//Rbwf5qpXBlznPdE8Fl6LJyfMVufXQ/IllPEAjSFs=
Subject key identifier: 2A:0B:7F:AB:17:C8:61:16:41:87:43:90:96:42:44:68:E4:FA:30:99
Certificate issuer: /CN=8b93ccfac824196843701fdd92655044ac70189f
Certificate serial: 070152
Authority key identifier: 9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/5f2e50b72385a61df638e998f777b3b2d4a34361.roa
Signing time: Tue 15 Mar 2022 19:05:27 +0000
ROA not before: Tue 15 Mar 2022 03:00:00 +0000
ROA not after: Fri 15 Mar 2024 03:00:00 +0000
asID: 203
IP address blocks: 200.1.175.0/24 maxlen: 24
201.221.124.0/24 maxlen: 24
201.221.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459090 (0x70152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93ccfac824196843701fdd92655044ac70189f
Validity
Not Before: Mar 15 03:00:00 2022 GMT
Not After : Mar 15 03:00:00 2024 GMT
Subject: CN=5f2e50b72385a61df638e998f777b3b2d4a34361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c9:ce:ff:76:d9:7a:4c:24:c1:47:7d:ca:d7:
ca:40:77:49:5c:79:95:20:f2:d9:a1:7f:6a:f0:ec:
7b:61:b3:20:0e:f7:96:68:ff:97:40:ba:62:1d:cb:
27:c3:cc:2e:84:80:4a:cb:21:93:16:21:75:b1:65:
22:a8:18:e0:b3:a2:32:18:8f:39:01:c4:89:68:53:
a1:2f:47:10:a6:23:03:3e:7f:69:b7:fa:7b:f8:27:
62:c6:ad:d3:f7:59:53:e4:b8:1e:cb:03:6f:ef:bd:
7b:39:3e:e0:18:72:47:19:41:7a:c5:93:11:5a:93:
31:cb:70:43:c7:34:d7:84:4d:a6:0e:d6:47:9c:46:
98:98:de:5e:e4:68:be:fd:6a:6e:a8:79:29:51:e2:
e5:ae:93:7c:17:07:30:58:62:98:d8:16:0d:a0:31:
43:ee:0a:55:89:f7:72:40:30:ba:6c:f3:1b:7d:f3:
5a:b4:cc:a9:4a:a9:82:bb:b4:57:0a:c2:cf:60:4e:
81:78:9b:20:80:fe:b7:6f:1a:00:de:eb:95:71:34:
29:8a:ee:e0:d6:db:21:95:1e:dd:81:16:1a:df:e2:
c3:3a:46:0a:67:51:b3:fc:b2:37:0b:d1:55:6d:01:
a2:e7:1c:ce:9f:4a:01:80:c8:a9:25:65:ed:92:37:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0B:7F:AB:17:C8:61:16:41:87:43:90:96:42:44:68:E4:FA:30:99
X509v3 Authority Key Identifier:
keyid:9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/5f2e50b72385a61df638e998f777b3b2d4a34361.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/8b93ccfac824196843701fdd92655044ac70189f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.1.175.0/24
201.221.124.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:b1:7e:69:6c:1e:e1:40:77:af:59:d2:c6:81:59:ec:ee:34:
87:98:92:dd:a7:5b:aa:99:06:25:f8:fb:25:fb:c4:35:08:ab:
ff:50:4d:c6:24:17:2d:fd:a8:6e:39:42:d4:57:46:af:22:c7:
bf:3d:cd:9f:1b:11:b3:d9:24:4d:0e:e5:42:ed:8f:72:92:97:
88:7b:cd:50:e5:d3:ee:3c:43:91:24:3f:ca:14:1c:c7:a8:aa:
9f:f9:55:75:c8:82:02:88:96:ea:1f:4b:8f:3b:63:fb:7c:f3:
08:75:c3:da:ff:32:2b:b7:3a:23:a4:7c:d9:a1:fd:a2:45:fc:
7f:37:0f:8c:ed:c6:eb:d6:7e:40:42:ae:52:3f:0f:7e:20:1f:
8a:8c:6a:2c:ca:da:a6:19:8e:15:34:ae:a1:9e:21:fd:a5:4c:
41:b1:bb:74:7c:d9:bb:66:4a:9f:b5:09:d2:e6:53:e9:dd:f8:
02:c5:75:14:ed:b7:49:bf:48:d3:19:5f:48:83:00:a1:2d:44:
64:c5:e9:da:cc:a1:ec:9e:e7:5b:e9:8d:25:62:cc:e4:97:fb:
bb:69:49:fd:6c:10:d5:e8:8e:fe:dd:d3:e9:35:6c:9d:8f:ef:
cf:c6:b9:87:74:44:6a:17:e2:3c:2b:fa:34:08:91:13:81:66:
ab:80:e7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:13 2023 by rpki-client on console-fra.rpki-client.org