Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/214589ba8b2eb2c2aab0b0be5c773a8b8d5fbf0b.roa
File: 214589ba8b2eb2c2aab0b0be5c773a8b8d5fbf0b.roa (raw, json)
Hash identifier: gjhpX1SFKSb1G4mpJ8ZnTGEv0aSXLH3gsuR7Qfgp1Og=
Subject key identifier: 23:F0:C0:34:64:CE:62:2C:CB:E0:87:46:7B:A4:C0:69:2A:D3:4B:D3
Certificate issuer: /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial: 1BF387
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/214589ba8b2eb2c2aab0b0be5c773a8b8d5fbf0b.roa
Signing time: Wed 28 Sep 2022 03:41:55 +0000
ROA not before: Wed 24 Mar 2021 14:40:23 +0000
ROA not after: Tue 24 Mar 2026 14:40:23 +0000
asID: 27947
IP address blocks: 200.7.211.0/24 maxlen: 24
200.7.212.0/24 maxlen: 24
200.7.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1831815 (0x1bf387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Validity
Not Before: Mar 24 14:40:23 2021 GMT
Not After : Mar 24 14:40:23 2026 GMT
Subject: CN=214589ba8b2eb2c2aab0b0be5c773a8b8d5fbf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:21:46:30:98:8d:ba:a1:64:64:14:5a:31:ce:
2e:9a:0d:24:de:20:6b:64:7d:07:a7:57:ad:77:3b:
bb:68:c4:b8:a4:65:db:19:24:fb:94:a0:f0:a4:57:
51:d3:4c:53:03:ae:7c:79:3a:45:69:5c:7c:29:f7:
5a:8f:45:8b:df:12:ef:aa:b3:4f:54:b4:93:a0:56:
a6:ec:5e:51:fb:d7:fc:c8:fd:41:32:23:96:25:d7:
52:95:70:be:82:f2:18:e9:47:00:cb:e7:dd:ab:01:
fe:75:7e:b8:89:dd:7a:48:53:82:e2:4a:5f:28:04:
18:bd:ef:43:c6:50:8b:50:78:fc:ab:d7:9d:a8:4e:
38:4f:77:2d:e5:a3:f1:35:eb:3f:26:09:a6:34:24:
d3:40:84:79:00:6e:62:43:27:1e:ae:28:4f:f4:72:
eb:c8:bc:a7:df:08:19:b8:a7:e8:e4:ce:26:c2:ec:
28:da:ec:51:f2:05:fb:aa:e0:23:20:d6:42:39:22:
95:02:68:50:a2:3a:94:ca:93:32:52:98:f4:9d:cf:
d2:cd:f7:59:69:9e:40:30:d6:e8:8f:96:ef:6c:0b:
24:20:29:38:ba:15:f7:1a:26:8e:89:9f:48:62:64:
bc:f6:82:42:4c:13:31:c7:5c:bc:45:7c:a1:04:5e:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F0:C0:34:64:CE:62:2C:CB:E0:87:46:7B:A4:C0:69:2A:D3:4B:D3
X509v3 Authority Key Identifier:
keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/214589ba8b2eb2c2aab0b0be5c773a8b8d5fbf0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.209.0/24
200.7.211.0-200.7.212.255
Signature Algorithm: sha256WithRSAEncryption
62:4a:ab:8f:68:45:aa:fd:8c:d6:01:77:40:26:34:02:59:61:
64:a3:90:65:8c:37:3a:2f:6d:03:cc:a5:1a:5f:11:3b:61:d3:
8a:ae:a5:7a:1b:96:78:68:b7:0f:bb:8e:95:48:36:50:4e:ab:
61:18:86:d8:0e:9b:0a:e7:53:90:45:82:25:cf:f2:82:26:59:
cd:0c:ac:72:93:3a:01:c9:62:d4:99:af:2d:66:74:ae:31:08:
5a:09:5f:e2:41:d8:19:d9:1b:bb:63:36:b2:26:d5:b6:65:39:
10:f4:1c:24:51:dd:db:b6:47:2b:4a:9e:32:c7:38:39:30:e4:
82:a2:44:de:db:3b:07:00:53:b3:f3:2f:04:a2:48:e0:cd:41:
39:97:db:26:a8:38:d9:1c:f3:38:db:6f:5a:cf:fb:79:62:28:
f2:2c:b5:3b:4e:ef:8d:f1:5e:eb:c8:a4:3f:d3:c8:16:f0:05:
cc:5f:f6:9b:ed:07:c3:bf:69:8c:45:ea:f2:b6:88:e1:a7:2a:
e3:9d:bf:05:ea:d7:15:4f:34:50:32:10:f0:60:ba:c8:38:db:
5f:08:fb:e7:67:af:c5:e5:4f:56:fa:6f:6a:6d:d4:e2:63:8b:
59:bf:e8:a0:74:78:1b:36:38:de:89:86:3d:73:1b:d5:9a:ae:
06:3a:6f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org