Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e36382e3139312e302f32342d3234203d3e203238343033.roa
File: 3230302e36382e3139312e302f32342d3234203d3e203238343033.roa (raw, json)
Hash identifier: mfKsHtjeRvL5QEtCQ6GIMtcv29i+kesMehHR1DsPZuM=
Subject key identifier: B7:7A:D0:B0:FA:79:8E:F4:28:2F:AC:1A:F3:D6:7E:12:27:CC:DF:CA
Certificate issuer: /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial: 47DBC865E65BA722985D63310C7A507FFE015B71
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e36382e3139312e302f32342d3234203d3e203238343033.roa
Signing time: Wed 09 Oct 2024 18:05:00 +0000
ROA not before: Wed 09 Oct 2024 18:00:00 +0000
ROA not after: Wed 08 Oct 2025 18:05:00 +0000
asID: 28403
IP address blocks: 200.68.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 20:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:db:c8:65:e6:5b:a7:22:98:5d:63:31:0c:7a:50:7f:fe:01:5b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Validity
Not Before: Oct 9 18:00:00 2024 GMT
Not After : Oct 8 18:05:00 2025 GMT
Subject: CN=B77AD0B0FA798EF4282FAC1AF3D67E1227CCDFCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4f:87:82:60:78:a7:f4:f0:98:55:d5:13:43:
fd:dd:0c:be:36:ef:47:d0:5b:2e:5d:73:38:17:9b:
90:cf:6b:1e:06:11:dd:c4:bc:59:10:e5:9b:6d:a4:
da:be:ac:f5:66:9e:73:95:80:6e:ad:74:2e:53:77:
4c:a6:ad:2e:86:b3:da:16:bd:a8:f6:80:7b:7a:cf:
eb:cf:cb:bd:9f:17:30:85:89:b2:8e:ff:66:c8:62:
88:22:92:ed:2b:76:51:c5:59:8e:f4:de:30:70:d4:
60:f5:05:37:6b:84:ef:0d:4f:03:df:89:e0:c6:97:
98:2e:0d:95:03:aa:bc:e8:b3:a3:c3:a2:c3:09:3f:
1a:b4:84:67:e2:fc:c3:42:54:05:a1:9f:f8:94:7b:
8e:77:d4:78:30:7e:b8:92:da:5c:6e:f4:50:9e:13:
c0:a2:94:72:8c:01:80:7b:11:2d:47:4a:c1:44:e3:
09:b9:39:37:70:41:1d:e6:ef:d4:17:36:f5:c5:57:
be:bb:b8:e3:59:18:1a:70:35:9a:fc:c2:d0:84:02:
c0:27:fd:69:ec:c5:1c:d0:7e:65:df:53:bc:55:2e:
76:17:82:26:42:cc:02:bb:e8:28:62:f0:44:24:0b:
79:df:7f:e3:06:38:86:eb:00:c4:f0:cd:f6:40:50:
b8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7A:D0:B0:FA:79:8E:F4:28:2F:AC:1A:F3:D6:7E:12:27:CC:DF:CA
X509v3 Authority Key Identifier:
keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/3230302e36382e3139312e302f32342d3234203d3e203238343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.68.191.0/24
Signature Algorithm: sha256WithRSAEncryption
83:90:53:78:b1:36:6a:f0:ac:41:56:d3:43:1c:28:4b:ec:ef:
9d:54:12:cc:17:71:a4:b4:cd:6d:e7:5a:2a:23:df:09:27:4c:
d9:79:da:9c:b8:7e:39:9a:46:ae:e3:87:a6:10:e8:37:01:b0:
0a:50:e1:01:37:3f:7d:2e:fb:5a:7d:e3:d2:3b:90:74:a4:86:
b3:3a:68:8a:66:22:26:45:10:80:ed:6c:5b:02:7d:a3:93:f6:
1d:d1:18:64:7d:b7:29:76:c3:1e:53:4b:e6:8b:d2:a0:68:de:
47:49:1b:a4:1a:81:74:f7:60:0a:f7:20:d8:95:0a:9c:bc:03:
b8:73:7c:2d:71:f8:08:46:b8:f0:0a:bc:c8:5e:a3:d0:3c:f3:
cc:ba:27:ca:12:b1:8a:37:fc:af:11:e0:74:19:9f:0c:48:dc:
64:17:79:7e:15:11:41:75:91:41:b2:c8:5c:b5:76:4b:7a:ec:
52:74:5a:cd:05:9a:70:1c:ce:07:1f:7d:66:72:0f:88:78:62:
e6:f1:45:1f:d5:f4:c2:6f:95:a8:55:51:c7:85:75:e0:89:cf:
13:30:3a:b2:e1:43:c6:7a:3d:5d:b8:ae:f2:b9:3a:fc:d3:c5:
52:75:dd:be:a0:d8:bf:26:b4:bb:20:16:fa:74:c8:08:ea:ec:
08:07:7c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 22:40:02 2024 by rpki-client on console-fra.rpki-client.org