Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d2fe8309b2b435441b1049ba646273a22e2e2515.roa
File: d2fe8309b2b435441b1049ba646273a22e2e2515.roa (raw, json)
Hash identifier: miV9pI5gvgQolvO1V8dkvP/3sn9Z1XUX3l/kiUTI6wM=
Subject key identifier: 86:22:D3:C8:6D:7E:B1:57:18:9F:F9:C2:FB:86:80:9F:F5:39:82:DE
Certificate issuer: /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial: 0DAC99
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d2fe8309b2b435441b1049ba646273a22e2e2515.roa
Signing time: Wed 24 Mar 2021 14:40:23 +0000
ROA not before: Wed 24 Mar 2021 14:40:23 +0000
ROA not after: Tue 24 Mar 2026 14:40:23 +0000
asID: 23487
IP address blocks: 200.7.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896153 (0xdac99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Validity
Not Before: Mar 24 14:40:23 2021 GMT
Not After : Mar 24 14:40:23 2026 GMT
Subject: CN=d2fe8309b2b435441b1049ba646273a22e2e2515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:64:18:d2:75:2a:e8:3c:03:70:ce:e7:de:
6f:63:83:0a:ba:b9:2a:e5:ee:3f:ff:3b:0d:d7:17:
53:f5:01:66:f7:ec:69:2a:f0:bb:f9:76:90:1d:cd:
2d:ed:06:e3:95:41:dc:53:3a:d1:21:6b:9e:35:f6:
0e:b5:61:79:d6:af:04:ce:a0:a6:23:25:52:71:c3:
0a:82:83:c4:6f:dc:83:80:9a:e0:99:c6:3f:14:ee:
3a:74:b8:a9:6d:1c:59:4b:61:84:63:51:d2:77:b1:
c0:ec:2b:82:bc:de:1b:9f:4f:43:41:73:63:01:f6:
74:c4:1b:a7:7f:05:8b:3a:89:a4:36:ee:5b:1f:ab:
72:b0:95:39:99:a5:5a:6c:13:81:d9:0b:34:61:7a:
44:2a:a1:89:3a:38:3b:2f:f1:5c:9d:09:27:25:bd:
5f:37:d2:6b:3c:16:b8:4e:30:e8:42:ce:94:e7:75:
19:e9:d9:1a:8f:be:66:0f:d9:0e:54:8a:61:a5:3b:
15:79:3b:a3:be:d0:1a:6c:45:82:d6:36:6a:30:53:
54:9e:e8:65:7a:02:b1:5b:6d:a7:e7:d2:ed:6c:1d:
4d:b2:8c:69:9d:51:7f:68:dd:76:86:3c:39:07:61:
a5:c6:9c:5c:72:6d:e2:0e:d8:62:c7:d6:fa:77:f2:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:22:D3:C8:6D:7E:B1:57:18:9F:F9:C2:FB:86:80:9F:F5:39:82:DE
X509v3 Authority Key Identifier:
keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d2fe8309b2b435441b1049ba646273a22e2e2515.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.221.0/24
Signature Algorithm: sha256WithRSAEncryption
18:68:0a:06:d1:10:8f:29:2b:3a:2e:6a:a8:3c:11:18:c3:0c:
1d:22:bb:9d:a0:c9:6b:8f:de:56:24:f3:3e:f2:8d:dd:9e:73:
a2:58:3e:7e:3c:e5:e2:94:ff:56:fe:39:7d:46:ff:2c:b8:0b:
9d:91:70:95:f3:76:ce:bd:54:33:37:82:23:96:79:cb:8e:5e:
6e:01:f6:82:73:eb:10:2d:d4:a6:d9:28:f0:6c:bd:d3:7d:e6:
c6:43:f6:b4:5a:11:24:87:5d:94:9f:ec:70:47:88:27:5c:a4:
f0:3e:b7:95:80:80:0b:f7:59:de:a3:62:e9:8a:53:5d:5a:f6:
5a:55:dc:00:76:19:09:72:a4:57:1e:6d:62:8e:3b:e9:d2:21:
b2:45:16:21:2b:78:f2:d5:4e:2d:6d:fc:a4:be:61:06:2b:1f:
cb:27:91:94:f2:85:7e:45:b7:28:f8:94:5e:6a:51:e3:37:b6:
a2:ab:f1:d5:db:4f:ee:1e:08:81:19:29:04:84:a1:85:46:6a:
a2:ee:37:0c:a8:cf:cf:96:ac:85:9f:9d:6f:d8:fd:46:18:86:
d6:6d:1c:45:15:18:70:24:eb:cb:e1:b0:a8:16:13:0f:1d:6a:
c4:75:35:f4:54:7f:79:0c:fd:6a:42:f4:eb:33:ca:e0:0f:58:
13:29:0b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:20 2023 by rpki-client on console-fra.rpki-client.org