Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/795240bdf60fe3f4cddf04a32ad990bceb83d434.roa
File: 795240bdf60fe3f4cddf04a32ad990bceb83d434.roa (raw, json)
Hash identifier: R6z030rnemO3i32Czko8Qd4YDa24EMce1qvp3oJGH38=
Subject key identifier: E4:05:5A:32:BF:FF:99:6E:BC:E6:C8:4C:ED:27:FF:71:84:7D:7F:9F
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 11CADC
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/795240bdf60fe3f4cddf04a32ad990bceb83d434.roa
Signing time: Fri 16 Apr 2021 01:42:40 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 52279
IP address blocks: 200.43.105.0/24 maxlen: 24
200.43.106.0/23 maxlen: 24
200.45.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1166044 (0x11cadc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=795240bdf60fe3f4cddf04a32ad990bceb83d434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:a8:06:a0:c8:7e:01:9e:b4:4a:cb:e1:cc:
95:ca:56:34:a8:3f:5b:41:ab:8c:a7:5d:9f:c8:d5:
b8:96:14:8c:b5:e6:25:21:b3:03:62:27:ff:c0:f1:
0b:b4:ff:4d:cd:23:23:e6:ac:9d:de:5c:05:8a:23:
00:f0:1e:87:e9:09:d6:b7:ef:ca:8a:f0:16:e1:85:
07:5d:e0:b4:88:5a:1d:31:50:5b:06:0c:64:1d:dd:
6d:45:47:23:5d:69:74:ea:86:1e:b1:dc:f2:62:6b:
54:ac:eb:bc:e9:c7:0c:a5:f9:6c:ed:eb:11:7d:20:
26:63:b2:de:e3:c7:71:29:91:cd:12:28:bd:7c:6b:
06:cb:83:df:a8:c1:de:6a:c5:bd:6e:83:05:2c:31:
d8:0e:2b:ee:20:64:1a:90:fa:4d:3f:df:06:42:19:
5b:aa:17:35:8e:76:5d:f7:94:71:2f:bd:eb:da:83:
83:37:27:a7:91:b0:f9:cb:8e:1e:a7:06:ac:dc:b5:
b4:0f:5f:e6:51:ab:85:3d:01:fd:40:e9:d5:c7:23:
03:ea:8a:3c:e3:ac:95:35:91:95:17:00:8f:52:36:
e7:40:19:40:7b:14:6d:71:05:03:c6:68:b9:0b:0d:
e0:12:01:80:d8:48:45:03:c3:6b:82:ef:39:3a:4e:
2b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:05:5A:32:BF:FF:99:6E:BC:E6:C8:4C:ED:27:FF:71:84:7D:7F:9F
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/795240bdf60fe3f4cddf04a32ad990bceb83d434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.43.105.0-200.43.107.255
200.45.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e2:fa:2a:4a:be:36:f2:a9:d1:21:88:65:e8:bc:2f:40:cc:
fe:f9:47:da:50:ab:a6:75:f5:5a:17:6f:bd:a6:68:d9:e0:6e:
a6:18:b0:5c:e5:11:32:88:cf:28:07:37:b6:c3:c6:16:5d:d5:
f5:35:8b:29:e0:4b:d3:95:e5:85:e5:aa:ce:31:28:dd:71:fe:
60:2b:4e:4c:8f:7d:4a:e4:22:41:6b:ed:35:fb:da:8a:49:ca:
48:6b:a7:ca:c3:9f:9f:50:71:12:1c:92:c0:97:be:12:06:74:
ae:ad:65:0c:1f:18:7d:d6:a3:02:af:0b:d3:5e:0e:c7:cd:e3:
0e:99:e3:9d:c8:85:51:46:e2:97:ca:90:c9:09:5c:e0:4e:3e:
e6:51:23:89:50:b5:97:f4:f6:bb:11:8e:3a:2e:a0:08:bb:6d:
1c:f5:a4:27:ce:c7:91:e6:7a:a7:15:9f:f9:f6:2e:55:5f:6b:
08:3c:f8:ab:6f:89:5f:76:c5:1f:ea:51:bd:5c:6c:16:b6:65:
11:11:eb:6a:3e:7b:09:e4:69:1a:89:23:35:38:35:38:84:76:
94:9d:89:e4:47:a8:dc:4e:7f:eb:e3:12:70:7d:e5:47:78:28:
76:5f:c6:3e:36:6f:eb:1b:b2:94:82:57:9a:fa:f3:eb:65:66:
60:f0:b6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org