Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/340dbbad-1922-47db-89fd-e69c8f5f3e62/18aa850f24821e8705697f04417c71049805ef0a.roa
File: 18aa850f24821e8705697f04417c71049805ef0a.roa (raw, json)
Hash identifier: B0ruY/Xapq7msdKhA4NZd3UscivdMS7kGHLxJr4f8BA=
Subject key identifier: 30:01:26:E5:AB:FC:C5:4A:3E:BD:00:8C:69:52:2F:A5:FA:A2:83:3F
Certificate issuer: /CN=fcfdf1d6c55d4bb157af7c46678c6b0722dd3793
Certificate serial: 25AC
Authority key identifier: 51:C7:2C:1D:9D:BC:43:92:CB:27:02:1A:88:CD:11:98:70:EA:25:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcfdf1d6c55d4bb157af7c46678c6b0722dd3793.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/340dbbad-1922-47db-89fd-e69c8f5f3e62/18aa850f24821e8705697f04417c71049805ef0a.roa
Signing time: Mon 10 Apr 2023 20:36:48 +0000
ROA not before: Sun 09 Apr 2023 20:33:20 +0000
ROA not after: Thu 10 Apr 2025 20:33:20 +0000
asID: 3496
IP address blocks: 200.1.168.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9644 (0x25ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfdf1d6c55d4bb157af7c46678c6b0722dd3793
Validity
Not Before: Apr 9 20:33:20 2023 GMT
Not After : Apr 10 20:33:20 2025 GMT
Subject: CN=18aa850f24821e8705697f04417c71049805ef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:ec:10:7c:4a:5f:57:f3:f0:fe:e0:73:79:
d8:a9:6c:3c:71:8c:17:73:73:3f:5e:54:00:8f:3f:
1d:9f:23:cd:a0:a5:ad:06:34:c0:00:14:9a:79:a6:
86:71:43:34:37:f9:89:bf:35:92:34:cc:2c:46:e2:
45:46:97:23:32:0c:f6:2c:0d:6d:be:6b:fd:55:19:
c0:da:06:a0:49:63:02:d9:4c:fe:a4:03:10:3d:a1:
a3:3d:4e:1b:2e:f3:cb:c4:b8:e5:d4:5f:2c:b1:bf:
ee:57:e2:e6:a1:4b:e1:da:1f:3a:45:de:00:49:de:
5e:d8:0c:18:50:db:e8:47:61:a2:b4:36:e3:86:84:
e0:68:70:fc:12:ce:df:cf:6a:62:a7:8f:ea:91:72:
e7:df:1d:b3:b4:0f:2e:7c:fd:d0:38:8e:2e:4a:b8:
a0:49:68:3d:4a:5e:b2:21:3e:7a:3c:7a:ac:6d:ad:
d4:39:28:ed:04:00:f2:c2:12:60:10:cc:ad:b6:c4:
b2:b6:89:b7:36:1c:99:0f:7f:57:18:5a:2e:24:1d:
8f:2a:dc:b2:80:0b:69:3b:d1:c1:f5:c3:c0:3b:67:
ae:2f:cc:08:3d:7e:ba:cd:a4:1e:dc:de:96:77:dd:
cf:6a:30:f2:95:0f:97:fa:f4:96:1f:b2:b4:e9:92:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:01:26:E5:AB:FC:C5:4A:3E:BD:00:8C:69:52:2F:A5:FA:A2:83:3F
X509v3 Authority Key Identifier:
keyid:51:C7:2C:1D:9D:BC:43:92:CB:27:02:1A:88:CD:11:98:70:EA:25:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcfdf1d6c55d4bb157af7c46678c6b0722dd3793.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/340dbbad-1922-47db-89fd-e69c8f5f3e62/18aa850f24821e8705697f04417c71049805ef0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/340dbbad-1922-47db-89fd-e69c8f5f3e62/fcfdf1d6c55d4bb157af7c46678c6b0722dd3793.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.1.168.0/22
Signature Algorithm: sha256WithRSAEncryption
22:bb:e8:ac:ee:04:da:0a:8c:8b:9a:93:da:19:a7:6c:c9:18:
c5:a6:7b:11:7b:c1:f2:0e:06:0e:a9:ce:41:a4:ac:fd:fa:2c:
f4:2c:0c:f3:6d:2f:fa:eb:f0:56:9c:fb:35:a9:00:d4:3f:23:
74:b3:1c:55:60:76:f7:a1:91:3a:b6:d0:74:cb:24:5d:47:c9:
c0:5d:bf:ac:85:be:f8:f7:e4:5b:1f:89:40:7c:f3:05:4c:37:
e8:00:4a:e7:89:aa:ac:c8:54:05:89:77:d1:12:e0:00:aa:ad:
6a:72:2b:36:11:32:59:4e:7e:f3:c8:e6:a9:07:54:b7:a5:8d:
33:0a:85:4a:86:29:1f:fe:66:4a:0d:46:fa:a6:90:d5:c7:10:
80:61:17:30:34:46:00:46:9c:89:9c:33:05:e7:33:38:7d:93:
77:92:c6:08:c7:97:93:b1:a6:59:87:7d:9c:3a:a7:42:d8:9a:
c4:f0:33:c9:cf:2e:78:18:94:33:d7:66:49:1e:56:65:76:51:
0d:1a:ba:1d:29:08:ed:36:a0:56:5d:c2:26:6c:29:d9:fd:27:
be:6a:30:3a:42:8d:ce:2b:5c:29:8e:bb:d6:c6:5a:dd:73:84:
84:2a:11:d9:e5:76:1b:93:cc:03:ad:ef:9f:c5:aa:ae:26:61:
3c:ba:29:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-ams.rpki-client.org