Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/3230302e3231352e3234382e302f32322d3234203d3e20313938393830.roa
File: 3230302e3231352e3234382e302f32322d3234203d3e20313938393830.roa (raw, json)
Hash identifier: +gsf1o9fJyFlZEQMyTUpH3sa3RWR3YZ0ZQqIr2iM//8=
Subject key identifier: 07:12:61:43:6C:CE:C0:0B:CB:AE:D3:A0:B8:1B:4D:68:80:13:A8:87
Certificate issuer: /CN=9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487
Certificate serial: 6ED2DCD71F8D9921CD92FBEC1401712463744DAB
Authority key identifier: 9C:1B:E4:94:43:F8:D1:EC:B7:AC:8A:8E:6C:57:9C:54:80:C1:74:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/3230302e3231352e3234382e302f32322d3234203d3e20313938393830.roa
Signing time: Fri 05 Jul 2024 19:15:00 +0000
ROA not before: Fri 05 Jul 2024 19:10:00 +0000
ROA not after: Fri 04 Jul 2025 19:15:00 +0000
asID: 198980
IP address blocks: 200.215.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 20:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d2:dc:d7:1f:8d:99:21:cd:92:fb:ec:14:01:71:24:63:74:4d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487
Validity
Not Before: Jul 5 19:10:00 2024 GMT
Not After : Jul 4 19:15:00 2025 GMT
Subject: CN=071261436CCEC00BCBAED3A0B81B4D688013A887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:66:a6:22:bc:8c:9d:00:cd:06:a6:03:12:c0:
7b:56:5b:dd:71:4e:19:b2:7a:24:ea:04:fa:12:e4:
e3:4e:15:5b:4d:f1:39:4b:9b:67:cc:92:76:a6:28:
6c:59:e0:a6:7b:33:25:2d:87:20:be:36:02:8a:2e:
04:b2:44:5c:0e:32:06:aa:bf:54:91:20:cd:ca:96:
9e:a1:e4:81:71:30:02:e9:bd:99:2b:5b:87:fb:9f:
b2:86:6f:2b:dd:3a:e2:bb:93:b4:8c:5f:46:9a:c1:
dc:46:b8:20:c7:01:4e:62:1e:50:39:d9:cd:fc:f9:
7b:90:ba:92:1e:ea:4a:0c:7a:03:09:c5:cc:bd:08:
1b:26:11:2a:e4:e1:be:ae:19:93:b3:a8:3c:9d:29:
cd:0e:fb:aa:1f:3a:6d:13:99:ff:a6:4b:9f:75:ae:
bb:1d:21:f7:10:71:75:4a:93:f4:42:f2:e3:c7:92:
53:9c:3b:e9:a0:b1:fc:85:a6:55:34:4b:a8:3b:92:
c2:e5:0d:ec:03:f9:43:6d:65:5c:69:63:59:6c:9e:
e9:eb:e4:74:87:cf:1d:33:e6:70:a0:49:c4:54:ab:
d8:79:a7:8d:40:46:e5:a3:9b:eb:99:76:57:16:57:
2a:59:eb:16:1c:b7:c7:4d:88:5b:81:03:4d:b0:47:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:12:61:43:6C:CE:C0:0B:CB:AE:D3:A0:B8:1B:4D:68:80:13:A8:87
X509v3 Authority Key Identifier:
keyid:9C:1B:E4:94:43:F8:D1:EC:B7:AC:8A:8E:6C:57:9C:54:80:C1:74:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C1BE49443F8D1ECB7AC8A8E6C579C5480C17487.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E5DB84A11B4CCD67F1C22F2BDCED965FB3DF4D7D7CFE0545B3C65CCB9F43A83/0/3230302e3231352e3234382e302f32322d3234203d3e20313938393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.215.248.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:69:22:c2:90:cf:70:ed:97:b3:2d:66:86:f8:ef:4c:03:ce:
fc:c3:b9:34:1e:68:1c:2e:3b:d1:5d:c5:7c:91:74:22:fb:c5:
10:0d:fb:6b:c9:1b:60:91:e6:fc:17:8f:d7:da:55:ce:10:fd:
01:dc:1c:c7:fb:3e:1f:c0:4d:8e:a2:e3:d9:46:73:e9:b4:3b:
85:f2:3a:e6:36:46:67:58:6c:81:b8:1d:3b:b7:03:d0:fd:63:
34:03:e2:b4:aa:42:21:48:be:73:97:d2:60:b2:09:22:bb:9c:
46:6e:a6:bc:ee:f8:c4:22:95:60:0f:11:c9:21:38:03:cd:2a:
f4:af:be:46:d2:a8:87:04:91:42:77:5c:83:39:c4:20:5b:a9:
f6:ad:c7:ce:b7:05:09:17:79:31:56:a4:c1:09:b7:3c:b1:86:
7b:03:3f:35:c1:39:59:19:08:d3:c4:89:6a:7b:0d:56:11:5b:
df:e0:48:89:94:ef:50:32:e9:fd:08:a3:5a:60:24:64:fe:d6:
ff:9e:1e:a2:8c:32:a2:5f:ad:80:e7:3d:5b:46:03:0c:9a:26:
2e:08:87:bd:b2:3d:60:39:62:60:94:f2:49:53:96:8b:dd:3a:
56:e5:ae:50:d2:a3:df:dd:f9:6a:17:1f:f1:bb:ef:83:cb:6c:
d0:16:94:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 21:30:40 2024 by rpki-client on console-fra.rpki-client.org