Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/e82f2ce1d233c0b05ed6e609edc523311cd7bbf1.roa
File: e82f2ce1d233c0b05ed6e609edc523311cd7bbf1.roa (raw, json)
Hash identifier: Z1hl9/sysOLjrxmsZ2gZz9L4ADj88e0NMjrMt1qlJpU=
Subject key identifier: E8:EB:64:60:AF:5A:E0:1C:34:2E:41:02:64:B9:D3:31:94:0D:72:17
Certificate issuer: /CN=8b93ccfac824196843701fdd92655044ac70189f
Certificate serial: 0704E5
Authority key identifier: 9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/e82f2ce1d233c0b05ed6e609edc523311cd7bbf1.roa
Signing time: Tue 15 Mar 2022 19:06:54 +0000
ROA not before: Tue 15 Mar 2022 03:00:00 +0000
ROA not after: Fri 15 Mar 2024 03:00:00 +0000
asID: 202
IP address blocks: 200.1.175.0/24 maxlen: 24
201.221.124.0/24 maxlen: 24
201.221.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460005 (0x704e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93ccfac824196843701fdd92655044ac70189f
Validity
Not Before: Mar 15 03:00:00 2022 GMT
Not After : Mar 15 03:00:00 2024 GMT
Subject: CN=e82f2ce1d233c0b05ed6e609edc523311cd7bbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:09:f9:31:f6:2b:5d:a6:04:ba:74:8b:40:
c1:8a:3c:c2:51:1a:b1:72:f4:06:d1:2d:f9:b8:4d:
71:30:3d:d2:aa:20:8c:fd:2e:bb:95:22:6e:7b:bd:
a8:7c:b0:b4:77:5e:47:79:62:48:22:73:bf:5a:8c:
c5:12:f3:24:af:a3:84:ef:d0:21:04:dd:d3:11:83:
eb:c5:c5:a5:c6:a3:ac:0f:d1:71:d6:0e:ff:af:2d:
ef:6c:dd:1e:4d:76:4c:53:9e:a4:aa:15:e9:8e:a7:
b8:c7:60:f7:ad:3f:7a:ec:a0:e2:dd:fa:9e:40:3e:
6f:93:07:06:19:f2:aa:1b:13:49:a6:55:c7:34:7a:
d6:09:be:f0:9c:57:fd:8c:c1:5d:11:68:e5:e5:ba:
7f:72:20:42:15:09:ba:28:15:aa:24:5c:ee:24:eb:
c3:ba:73:d8:fa:1a:fe:0c:04:3f:dd:de:1a:92:30:
3d:a1:4c:3a:6f:44:c5:5f:73:8d:00:b5:37:a3:be:
75:90:af:e0:99:a8:b6:d3:e4:80:1b:e2:d9:8b:05:
18:73:93:90:ca:46:48:83:3c:ee:d2:dc:20:bb:2c:
5f:64:4b:9b:16:2b:b8:6b:ea:6c:0b:ee:46:1b:3f:
d4:47:10:5f:80:88:a7:2a:49:20:f6:64:ca:74:2e:
e1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EB:64:60:AF:5A:E0:1C:34:2E:41:02:64:B9:D3:31:94:0D:72:17
X509v3 Authority Key Identifier:
keyid:9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/e82f2ce1d233c0b05ed6e609edc523311cd7bbf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/8b93ccfac824196843701fdd92655044ac70189f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.1.175.0/24
201.221.124.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:97:87:78:e2:a2:e4:cf:9e:27:46:88:ff:b7:dd:5d:21:f8:
97:90:35:c4:fa:f2:32:6e:74:9c:8e:9b:d1:ce:5c:56:4b:b7:
92:40:4d:d3:08:be:d7:ad:21:10:2b:8c:f1:ae:5e:98:27:22:
92:33:75:27:62:ce:3c:83:34:e8:52:1e:21:ef:ee:8f:07:8e:
db:73:c4:0a:27:fc:8b:bd:55:43:27:f7:f8:f3:f9:89:63:3c:
cc:8a:16:a3:bb:79:5e:00:a1:3d:e9:b8:40:67:74:73:09:06:
b4:fc:e3:b2:8a:5c:2b:24:de:08:ec:9f:b4:44:a1:83:93:14:
07:51:c6:6e:74:4b:b2:d6:c1:be:4a:73:eb:28:10:ef:2b:ce:
5c:43:c4:9b:82:0b:2f:6b:18:ab:da:74:a5:f4:63:19:98:c9:
c4:4d:0a:b5:b1:10:02:e1:5a:c0:3b:9a:66:91:35:74:74:5e:
04:94:6e:01:dc:ab:46:fe:a3:fb:34:3c:0a:4d:2a:f2:06:47:
79:8b:62:c3:ef:29:55:63:e1:25:a4:1b:6a:82:97:2c:ce:32:
4f:bb:e6:a2:c9:28:9d:fa:4d:52:1c:02:6b:67:50:ac:89:94:
f3:5c:4a:04:e3:46:46:ad:9d:44:bc:61:7f:7b:64:2d:52:6d:
e7:0a:b3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:13 2023 by rpki-client on console-fra.rpki-client.org