Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/276f59c1ba126c5bbae6a47c6ace1efc51b807b5.roa
File: 276f59c1ba126c5bbae6a47c6ace1efc51b807b5.roa (raw, json)
Hash identifier: hU8cBTdv1TYUOPUCO6l0EtYgGtr+Mwu1hkiLRpursXI=
Subject key identifier: 05:A0:B8:DC:DB:3E:1A:0E:30:C5:A7:70:FA:4F:C1:65:37:4B:11:24
Certificate issuer: /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial: 1E7B64
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/276f59c1ba126c5bbae6a47c6ace1efc51b807b5.roa
Signing time: Fri 27 Jan 2023 13:07:26 +0000
ROA not before: Thu 26 Jan 2023 13:06:55 +0000
ROA not after: Thu 27 Jan 2028 13:06:55 +0000
asID: 27692
IP address blocks: 200.123.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1997668 (0x1e7b64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Validity
Not Before: Jan 26 13:06:55 2023 GMT
Not After : Jan 27 13:06:55 2028 GMT
Subject: CN=276f59c1ba126c5bbae6a47c6ace1efc51b807b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8c:6b:55:df:dc:45:ab:a0:6e:4b:f7:71:f6:
36:62:8e:22:eb:3c:94:15:f6:c4:47:16:6a:f1:53:
03:ee:2a:01:81:c9:9a:54:18:74:70:0d:e0:40:e5:
53:b6:cf:51:7c:ff:0a:8f:34:f3:ca:df:ac:a1:f9:
64:8f:ef:2a:4f:11:56:ab:e2:c1:2a:c8:d6:bb:4c:
6b:9d:ba:70:fe:ea:b4:31:69:3c:9e:76:38:0c:11:
e2:8e:a6:3f:a4:1d:17:e5:28:b0:c4:a3:9b:5e:b7:
9f:6b:75:82:78:bb:e9:53:59:39:7c:5b:e7:61:49:
c9:c0:22:34:a4:cc:5f:af:41:4b:22:61:fc:0c:80:
cc:87:98:1f:43:1b:87:28:b6:74:6a:4e:fa:21:c9:
96:98:c7:0c:9b:79:3c:00:5b:d6:27:96:99:6d:cb:
df:31:c8:ea:c6:1d:13:6e:73:d7:1b:78:c9:77:a6:
92:97:50:bc:b9:69:bd:c6:bf:ae:61:17:41:57:d9:
a0:8c:77:03:cf:f8:99:73:bf:96:e3:45:96:d2:3d:
86:6b:7b:e0:63:6a:8a:61:0a:9e:28:b3:68:5d:a2:
5e:eb:74:6d:47:7e:b2:d9:b1:6d:61:fc:01:47:29:
d9:f6:b6:c0:e9:1c:14:df:03:e1:46:f9:57:ed:32:
1b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A0:B8:DC:DB:3E:1A:0E:30:C5:A7:70:FA:4F:C1:65:37:4B:11:24
X509v3 Authority Key Identifier:
keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/276f59c1ba126c5bbae6a47c6ace1efc51b807b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.144.0/24
Signature Algorithm: sha256WithRSAEncryption
07:95:4b:f7:ea:29:e9:67:52:dd:35:fb:38:91:79:8b:bd:d5:
d8:63:35:f3:10:8d:31:8e:af:ad:1a:82:a0:6c:ab:78:a9:81:
ec:ff:39:f0:c3:4b:d2:4f:b3:4b:f0:b1:5f:f5:ca:2e:4b:ba:
c4:86:e4:4a:00:df:f9:d0:0c:1a:46:a1:30:95:3e:61:e7:1d:
db:56:1f:06:c3:cd:7d:88:fa:a2:9a:11:7e:f8:62:a8:ff:c8:
82:4c:cf:4e:ee:f0:40:4d:8f:d4:e6:fb:a4:3d:aa:ee:2f:fa:
bb:68:73:db:dc:60:4b:84:d7:b5:9a:88:b5:80:47:29:a8:9d:
0f:8a:5e:62:65:4a:12:82:bb:34:13:30:f8:7c:96:76:3f:db:
27:4e:3a:53:84:4f:c3:56:a3:9d:34:a8:c1:e9:2b:17:9d:a1:
67:0f:ec:aa:2b:17:65:42:ae:ed:a6:6a:54:d6:e2:34:d0:65:
e9:ad:b8:e3:c4:10:04:fa:05:50:39:49:b8:06:dc:85:33:29:
70:d7:6b:cd:f9:d7:d4:a6:53:61:3d:bf:6a:b2:fc:9f:3d:76:
92:5c:8f:fb:8d:39:f3:c0:0f:c3:01:b6:31:9b:3d:32:14:40:
18:60:66:d3:87:9b:eb:6b:fd:45:e1:01:93:03:be:37:ff:cb:
d0:e4:2b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org