Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58d3d163-a739-40b5-9b27-f1b47377cdbd/31fe3710d503f6c3c88420befb94fff6befafbcd.roa
File: 31fe3710d503f6c3c88420befb94fff6befafbcd.roa (raw, json)
Hash identifier: PfUxN1m4TVqgQSjvP8I2HU+l6TkGTsLzLBA4jyOjIGE=
Subject key identifier: 6C:C2:BF:EC:22:E6:49:C1:7D:76:1D:1E:0A:F8:DC:91:B5:C8:23:4D
Certificate issuer: /CN=8d08412c92e8d5501e7998fc5a31502fa8932a9e
Certificate serial: 0567B5
Authority key identifier: 0E:AF:EA:93:3B:30:D4:7F:74:93:FD:41:6C:EE:45:60:0D:D1:DB:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d08412c92e8d5501e7998fc5a31502fa8932a9e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58d3d163-a739-40b5-9b27-f1b47377cdbd/31fe3710d503f6c3c88420befb94fff6befafbcd.roa
Signing time: Wed 24 Mar 2021 14:41:18 +0000
ROA not before: Wed 24 Mar 2021 14:41:18 +0000
ROA not after: Tue 24 Mar 2026 14:41:18 +0000
asID: 270074
IP address blocks: 200.1.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 14:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354229 (0x567b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d08412c92e8d5501e7998fc5a31502fa8932a9e
Validity
Not Before: Mar 24 14:41:18 2021 GMT
Not After : Mar 24 14:41:18 2026 GMT
Subject: CN=31fe3710d503f6c3c88420befb94fff6befafbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:50:55:29:84:5c:61:83:0b:2e:ba:ab:58:fe:
f7:1b:74:d6:81:f7:17:35:e8:d3:94:aa:f2:fd:2f:
1b:04:5c:0c:12:4d:1b:3b:d6:3d:5d:a0:05:e4:c8:
41:7b:89:f1:63:68:5c:6c:54:5f:5d:cc:61:06:3e:
f4:11:50:69:35:43:71:b8:6d:34:69:09:83:35:c5:
25:f5:43:f8:a2:60:9c:cb:46:6f:bd:ca:33:74:1a:
14:ac:34:0d:7b:14:eb:37:65:6b:b8:1b:fd:cb:1d:
6a:0d:f4:36:97:f2:d5:b5:35:88:db:6f:c2:e2:26:
6d:32:5c:dd:90:3d:92:8d:58:54:24:af:f7:3e:47:
8d:52:d1:6a:61:40:9c:eb:d1:76:f2:f6:f0:f2:e1:
69:0e:30:30:cf:1b:97:7a:af:83:5b:0f:56:30:91:
11:74:fd:5f:b6:7e:42:94:60:af:51:9f:2e:e3:11:
42:4f:ff:9b:75:00:6c:96:de:c2:42:c2:6d:3f:de:
8a:4d:e2:34:43:78:19:1b:cd:25:96:8b:85:82:74:
ff:9b:8f:71:55:87:9e:ed:9a:14:3c:1f:ec:b2:3a:
4b:2f:e5:a9:c2:3a:9e:73:01:0c:ac:fa:4a:5a:18:
fe:e9:a0:d0:db:6a:7d:ee:d6:e3:60:c8:be:92:61:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C2:BF:EC:22:E6:49:C1:7D:76:1D:1E:0A:F8:DC:91:B5:C8:23:4D
X509v3 Authority Key Identifier:
keyid:0E:AF:EA:93:3B:30:D4:7F:74:93:FD:41:6C:EE:45:60:0D:D1:DB:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d08412c92e8d5501e7998fc5a31502fa8932a9e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58d3d163-a739-40b5-9b27-f1b47377cdbd/31fe3710d503f6c3c88420befb94fff6befafbcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58d3d163-a739-40b5-9b27-f1b47377cdbd/8d08412c92e8d5501e7998fc5a31502fa8932a9e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.1.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:47:85:92:76:90:76:79:c8:3b:65:de:3b:64:5d:c2:fa:55:
7e:bb:8b:9c:c4:87:64:37:a7:ae:71:16:b2:38:6b:b1:43:41:
bf:c8:d3:82:5e:15:dd:2e:54:a8:5e:3c:a3:37:76:a8:d1:dc:
29:b9:08:7d:e1:77:33:3e:89:c4:4d:0e:99:2d:6e:e3:e3:6e:
26:45:85:73:8d:1a:76:d2:fa:2e:30:4b:9b:5e:5e:c6:f2:ab:
30:29:d2:33:5a:12:35:78:5b:c1:13:0d:86:e0:bf:72:f3:79:
e5:37:b7:ab:be:4a:38:f7:73:97:3d:59:61:67:05:76:0a:be:
ee:d5:84:fa:64:88:e4:91:52:f6:7d:42:23:81:00:05:c4:67:
ef:ec:b7:6d:68:b6:35:5b:5e:af:56:cb:16:71:a7:76:ba:89:
55:e3:8c:c9:fa:9b:db:76:93:f9:c5:e8:ea:85:74:c6:cd:f9:
f4:4e:d2:5c:8d:f9:dc:e5:48:ac:6b:d7:cb:d6:28:5f:b3:cc:
9a:f9:27:06:d1:74:87:60:48:e5:92:6b:b2:c5:1b:0c:62:ff:
15:02:0c:cd:62:00:b7:f8:d6:89:37:cd:33:22:44:0d:55:10:
a4:47:1a:86:31:22:b7:73:88:2e:cb:4c:95:44:a2:77:bc:be:
6d:3d:b4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 18:32:33 2024 by rpki-client on console-fra.rpki-client.org