Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e36382e3134342e302f32342d3234203d3e203238343033.roa
File: 3230302e36382e3134342e302f32342d3234203d3e203238343033.roa (raw, json)
Hash identifier: E/OxRSH+NyyPwQ+4ZQagszuBKm9k1SQZzPR947nXBQM=
Subject key identifier: 62:B4:D7:96:CD:F6:1C:90:27:6D:60:7B:F5:30:2E:53:0F:6A:C5:A5
Certificate issuer: /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial: 4D6F1ABB55ED283DC59D151B7DBA74B7F94B18B6
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e36382e3134342e302f32342d3234203d3e203238343033.roa
Signing time: Wed 09 Oct 2024 17:55:00 +0000
ROA not before: Wed 09 Oct 2024 17:50:00 +0000
ROA not after: Wed 08 Oct 2025 17:55:00 +0000
asID: 28403
IP address blocks: 200.68.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 20:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6f:1a:bb:55:ed:28:3d:c5:9d:15:1b:7d:ba:74:b7:f9:4b:18:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Validity
Not Before: Oct 9 17:50:00 2024 GMT
Not After : Oct 8 17:55:00 2025 GMT
Subject: CN=62B4D796CDF61C90276D607BF5302E530F6AC5A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:03:7d:f7:af:e5:9c:b9:22:49:d7:5e:69:
47:f4:23:e7:14:9b:be:0a:81:60:77:58:24:d1:db:
4a:41:93:cf:58:a8:93:82:8a:87:f7:30:7e:43:12:
3c:fb:84:5e:69:93:07:66:8c:b7:b9:74:74:83:a3:
25:71:f6:49:95:e6:52:3f:b1:f6:a6:1c:6a:30:4e:
11:66:e5:0b:86:33:55:60:87:09:96:ed:3b:db:77:
38:fc:b6:f2:e2:a6:35:98:9c:ca:b2:24:95:2f:7b:
c7:38:d6:34:9a:c7:19:e6:0a:b6:ad:db:73:cf:62:
19:0b:74:63:2a:83:05:75:2b:74:b9:d2:39:48:4f:
d6:95:ef:05:3e:01:a6:a0:b6:d0:44:4d:28:05:ea:
64:b7:e4:91:55:de:b5:cc:95:52:72:ed:ee:36:4f:
cb:22:3e:f7:b6:51:fb:05:d0:f2:90:17:33:c3:16:
6a:68:38:75:62:3b:1b:f2:a2:fc:a0:f0:7e:eb:29:
71:05:1d:43:8f:f4:79:40:8e:40:2d:73:5f:5c:1d:
44:67:4c:18:a9:c9:bb:ec:b8:16:92:d4:09:40:d0:
2f:e3:97:3d:2c:40:a1:56:12:d6:25:59:7d:12:3d:
82:2f:2a:08:ad:1b:e5:87:df:6d:fb:20:46:a3:99:
47:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B4:D7:96:CD:F6:1C:90:27:6D:60:7B:F5:30:2E:53:0F:6A:C5:A5
X509v3 Authority Key Identifier:
keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e36382e3134342e302f32342d3234203d3e203238343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.68.144.0/24
Signature Algorithm: sha256WithRSAEncryption
31:83:88:5a:52:41:0f:6c:3e:fd:d4:e6:13:d1:79:e6:80:1d:
e7:7c:1d:cf:b2:0a:0d:9f:09:8a:b8:ae:f8:11:00:14:34:4c:
f2:9d:e2:07:3c:ef:da:3a:31:75:64:30:ce:c3:1d:33:a4:60:
9a:c4:ef:02:a9:a3:6a:5d:af:c8:0b:5d:fc:22:46:65:8b:39:
fb:9c:60:99:26:3c:c7:f4:00:36:d0:7b:95:f8:b2:6d:fe:c7:
61:15:68:22:ed:76:4e:89:0c:77:c9:3c:09:2c:c8:d0:03:7a:
da:ea:88:43:e8:d2:d5:21:c7:90:b5:23:d4:2f:79:06:eb:37:
37:03:cb:c7:79:ae:18:8f:6d:06:47:d8:45:44:fd:9d:42:f5:
da:29:b2:da:be:bc:6b:9e:bf:3c:65:82:9e:b6:99:15:2e:2e:
bb:a5:84:7a:07:46:4d:97:7a:df:a8:ed:e8:6a:d7:fe:dc:04:
0f:52:b1:7c:36:2c:ad:b5:1b:a8:cd:79:7f:e9:35:21:4d:40:
e5:a2:74:65:32:ca:e3:be:0f:e3:ae:ec:cd:e4:e6:a3:b8:9e:
d4:76:a3:da:5f:15:16:eb:6f:a9:b6:63:02:e4:c3:70:b0:d0:
b5:7f:0c:26:58:56:32:a9:0e:03:10:32:86:aa:26:f0:c9:a1:
bf:d2:f5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 22:45:49 2024 by rpki-client on console-ams.rpki-client.org