Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/40458d95bfa13733e1e930e830400216c88c30f3.roa
File: 40458d95bfa13733e1e930e830400216c88c30f3.roa (raw, json)
Hash identifier: X2JrGneVPUq++ocGJ2B/Me0oJTTGFjCRvRwf09i53To=
Subject key identifier: A4:72:ED:53:65:46:CE:9E:C0:77:4E:B5:E9:9F:3F:9B:3E:1C:58:41
Certificate issuer: /CN=ea7028769533b4ca1a1bb8492dcfde9795a18ca2
Certificate serial: 204B32
Authority key identifier: 83:82:FD:78:F2:44:81:2B:A0:DB:7C:4E:FE:41:D2:1E:DA:BA:17:A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/40458d95bfa13733e1e930e830400216c88c30f3.roa
Signing time: Wed 10 May 2023 11:08:52 +0000
ROA not before: Tue 09 May 2023 11:08:52 +0000
ROA not after: Sat 10 May 2025 11:08:52 +0000
asID: 27940
IP address blocks: 200.110.192.0/21 maxlen: 24
190.122.64.0/20 maxlen: 24
131.100.100.0/22 maxlen: 24
2803:4b80::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2116402 (0x204b32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7028769533b4ca1a1bb8492dcfde9795a18ca2
Validity
Not Before: May 9 11:08:52 2023 GMT
Not After : May 10 11:08:52 2025 GMT
Subject: CN=40458d95bfa13733e1e930e830400216c88c30f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:eb:72:a9:7a:ba:df:51:01:e2:36:50:26:
10:7b:55:18:87:e8:cd:d9:10:e9:6b:cd:c5:59:10:
34:2e:6c:a7:9f:b9:4e:c7:37:3c:35:fe:50:74:d9:
32:11:75:2a:3f:a0:b0:52:00:89:84:b5:89:8f:d7:
ee:38:3d:c2:a8:6b:c4:92:31:f9:4f:f9:ee:34:03:
17:bc:6c:22:8e:69:eb:ab:71:79:06:30:1d:a3:a1:
72:49:b0:94:b0:1e:ab:cf:36:e4:1e:6e:34:3f:67:
4b:65:a1:ac:7e:54:12:a0:46:73:87:f2:62:ae:34:
ef:47:2d:8a:dc:a8:26:1a:39:ec:e9:b4:6b:5f:29:
8e:15:b0:a6:0e:65:49:fe:3e:8d:b6:32:ac:fa:e1:
7f:fd:b6:e7:5b:e4:e7:bd:dd:7f:af:79:06:57:ad:
7a:78:56:76:b8:95:16:3a:e0:76:4f:18:bc:64:23:
58:75:99:42:ef:97:9d:41:8b:36:42:0d:e2:72:93:
69:ab:3d:d0:4e:5c:73:c1:fe:ae:5d:de:f4:c2:5b:
91:67:c9:74:69:ce:16:e9:8f:8f:40:b4:37:06:62:
8e:74:10:bf:f4:b0:24:a4:a0:13:b7:ae:d7:55:6a:
5e:84:3f:68:d4:8c:2e:b4:14:e1:55:68:3d:90:f7:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:72:ED:53:65:46:CE:9E:C0:77:4E:B5:E9:9F:3F:9B:3E:1C:58:41
X509v3 Authority Key Identifier:
keyid:83:82:FD:78:F2:44:81:2B:A0:DB:7C:4E:FE:41:D2:1E:DA:BA:17:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/40458d95bfa13733e1e930e830400216c88c30f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/62438d72-ab5f-4606-baaf-ab3d60cf77dd/ea7028769533b4ca1a1bb8492dcfde9795a18ca2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.100.0/22
190.122.64.0/20
200.110.192.0/21
IPv6:
2803:4b80::/32
Signature Algorithm: sha256WithRSAEncryption
9f:5f:00:7c:88:d2:97:70:52:cf:37:a3:60:3b:a6:4c:5f:19:
36:59:67:62:18:d0:7f:58:c7:5d:69:77:19:c0:19:fe:f2:90:
7c:78:aa:43:5d:db:3a:16:ff:e0:16:37:df:98:e2:81:78:ec:
fd:a5:1a:de:c2:f9:f1:e6:95:1d:b7:c6:44:71:07:7a:af:84:
16:6c:35:92:99:67:03:b5:49:2a:f2:cf:f8:14:79:09:4a:09:
b7:1a:e9:a8:3b:e1:52:a2:11:d6:58:6b:f2:11:25:3d:b1:24:
16:e6:1b:db:33:f9:59:4d:9b:e7:71:2b:d7:19:a7:ba:46:3b:
8a:38:08:25:e1:1c:f9:91:60:95:14:51:2b:38:6d:72:82:9b:
71:d9:4d:f6:8a:c6:f0:28:4a:20:97:69:c6:ae:96:a1:b5:fc:
c0:29:fc:3c:03:25:ab:d5:3d:e4:23:69:93:83:80:0e:d4:18:
9f:c0:4f:b9:a7:13:6f:5e:d2:de:3b:3c:52:19:cc:00:7b:9e:
9e:d7:96:13:5c:90:3c:0c:69:89:99:f5:98:b4:2b:33:85:c3:
f5:ab:c6:76:a1:f5:74:3a:0d:7f:0f:88:bb:cd:2f:d5:32:e6:
0a:3b:f9:77:9c:46:5c:14:13:74:bc:02:35:9a:5d:90:7a:f8:
66:e7:7c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org