Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e36382e3134322e302f32342d3234203d3e203238343033.roa
File: 3230302e36382e3134322e302f32342d3234203d3e203238343033.roa (raw, json)
Hash identifier: HK8JxK4ChoA0NPo8sy0+MazEAIkAZ5CdFPcSHbTb6MI=
Subject key identifier: E8:B4:2F:D8:E7:B5:49:1A:88:38:E4:10:0B:92:4A:65:24:F6:83:58
Certificate issuer: /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial: 6F00FDEDDB0175260B74210CD5A3BAFF65BDB171
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e36382e3134322e302f32342d3234203d3e203238343033.roa
Signing time: Wed 09 Oct 2024 17:55:00 +0000
ROA not before: Wed 09 Oct 2024 17:50:00 +0000
ROA not after: Wed 08 Oct 2025 17:55:00 +0000
asID: 28403
IP address blocks: 200.68.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 20:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:00:fd:ed:db:01:75:26:0b:74:21:0c:d5:a3:ba:ff:65:bd:b1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Validity
Not Before: Oct 9 17:50:00 2024 GMT
Not After : Oct 8 17:55:00 2025 GMT
Subject: CN=E8B42FD8E7B5491A8838E4100B924A6524F68358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:5b:94:26:cc:38:f3:09:b6:8d:42:5f:e1:
4d:58:8e:34:6d:e8:b8:bf:1e:d5:93:3c:4c:04:ea:
98:f7:6c:36:8b:73:5c:ed:90:5e:f1:1a:61:83:54:
7d:c6:20:a4:a1:f5:7f:7c:de:a8:21:f1:70:15:0c:
76:53:f4:b1:97:8c:39:e6:60:1b:f0:c7:4b:a6:29:
3f:1d:de:bf:45:10:88:46:b2:0e:97:72:16:d3:9d:
50:ca:49:66:0d:62:b5:05:5c:81:fb:5c:b0:55:5e:
e0:bb:c9:69:d4:a0:47:fb:11:a2:de:6f:e6:ba:a6:
3e:ac:cb:b7:65:eb:89:21:e4:3a:1a:e0:11:ed:5d:
1d:c7:7a:55:49:98:b9:a4:13:d2:19:c1:0f:68:32:
fd:7d:c5:eb:d6:df:e3:bb:4c:0a:c4:8b:9b:81:4e:
36:e7:52:df:41:a9:7e:24:61:16:88:77:91:21:a4:
8b:f8:e1:47:55:4b:d4:9d:b2:c2:b1:40:dc:67:f3:
ee:06:00:02:df:f4:80:de:03:76:d4:ab:84:82:5a:
27:96:4f:76:a9:12:45:ba:9b:aa:02:54:38:51:89:
a0:a1:f7:07:3e:cb:8c:c3:39:9d:0b:36:ae:a3:0f:
e4:0e:29:02:2b:49:1a:77:4a:fa:a4:92:c1:94:9e:
ff:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B4:2F:D8:E7:B5:49:1A:88:38:E4:10:0B:92:4A:65:24:F6:83:58
X509v3 Authority Key Identifier:
keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e36382e3134322e302f32342d3234203d3e203238343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.68.142.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4c:22:16:a2:d5:d6:83:bb:42:62:0a:62:e7:7f:e2:e7:0a:
75:8f:a4:c4:d7:0b:53:f9:cf:af:01:f0:c2:d8:67:3d:c4:59:
85:4f:f1:4d:98:b2:b6:4d:15:07:9c:87:17:a5:6d:2d:1c:25:
f8:2f:e3:bb:65:f9:1a:b7:cf:6a:d2:70:2a:88:3a:be:c4:3b:
cf:00:e7:78:d4:87:6e:7d:35:ca:f0:45:d1:42:80:96:31:bf:
df:35:85:b7:6c:93:7f:cb:83:89:25:b9:0a:e7:cc:7a:07:da:
bf:4a:95:d8:45:fc:53:21:94:cd:58:c1:dc:7d:7d:ae:1f:e0:
6f:1e:68:8e:7a:65:0e:b5:0f:4d:07:c4:5d:bf:d9:23:24:82:
98:4f:c1:07:48:fc:47:0e:be:d7:e7:bb:ab:97:5c:da:cc:c3:
b3:fb:39:bc:21:5b:9d:e2:a7:5d:dd:2c:a2:92:59:1d:3b:b8:
6c:0a:a5:77:55:d7:6b:b9:4d:f7:91:85:5f:18:cd:10:ed:6f:
ef:20:2e:ae:18:c6:f4:12:7e:50:94:26:6a:b7:1f:6f:6d:36:
12:80:9a:5b:f2:03:1f:ff:ee:f5:5a:94:96:dd:d7:d6:08:78:
79:9a:68:85:e2:45:f9:51:f2:37:2c:e2:2b:50:05:ee:89:c5:
8e:31:5f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 22:45:49 2024 by rpki-client on console-ams.rpki-client.org