Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/4a5254f9481b094e72b624db1a34e5fe386d21f5.roa
File: 4a5254f9481b094e72b624db1a34e5fe386d21f5.roa (raw, json)
Hash identifier: 8iFuH6qVOJo64hQlB1Wqtmgxq4sAuWCkcijD/kUWrSg=
Subject key identifier: 04:04:F9:87:2C:9B:B8:6F:15:E3:4A:A9:4A:B6:E8:78:B0:6E:E7:C1
Certificate issuer: /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial: 0E09F6
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/4a5254f9481b094e72b624db1a34e5fe386d21f5.roa
Signing time: Wed 24 Mar 2021 14:31:36 +0000
ROA not before: Wed 24 Mar 2021 14:31:34 +0000
ROA not after: Tue 24 Mar 2026 14:31:34 +0000
asID: 15274
IP address blocks: 200.61.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 920054 (0xe09f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Validity
Not Before: Mar 24 14:31:34 2021 GMT
Not After : Mar 24 14:31:34 2026 GMT
Subject: CN=4a5254f9481b094e72b624db1a34e5fe386d21f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:de:34:15:14:63:0c:07:86:6c:2b:4b:85:c5:
45:16:ab:f7:94:a4:65:9d:81:ed:c3:6d:bf:7f:8a:
64:a0:0a:9e:ed:6e:14:3a:5f:09:22:50:29:26:9d:
d1:5b:36:ac:d4:86:bb:e3:9d:af:5c:3f:45:f1:99:
81:fa:fa:03:dd:69:93:e9:5a:83:fb:7a:45:5f:ad:
cc:29:42:b8:47:eb:04:e0:cc:0a:00:72:63:43:5a:
f2:fb:b9:6d:b9:98:a6:b8:16:0f:31:8c:53:66:8b:
e5:58:f0:4d:5c:d4:50:79:aa:75:96:bb:e5:02:3e:
9f:83:f6:81:75:86:6f:a7:f3:59:5b:d6:47:93:6d:
b3:f6:17:b5:1e:6b:6b:36:63:0a:0c:9f:d0:2d:69:
ad:18:5e:1a:b8:72:7c:c6:33:4d:a0:0b:61:6f:bb:
d2:18:e1:98:54:50:58:6f:c9:55:63:fe:d6:2b:84:
64:4e:04:f3:b4:96:a4:c3:b2:a9:39:fd:40:88:a0:
9e:e8:8b:71:73:46:fa:a3:74:17:32:61:7b:d3:1d:
77:8a:32:e5:53:b3:c6:57:5b:84:6a:fa:44:cd:36:
9b:3a:c8:ae:52:c4:be:e2:cc:12:fa:2e:8b:f3:f4:
2b:40:ec:95:82:82:f2:6c:22:62:9e:d0:6f:0d:44:
25:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:04:F9:87:2C:9B:B8:6F:15:E3:4A:A9:4A:B6:E8:78:B0:6E:E7:C1
X509v3 Authority Key Identifier:
keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/4a5254f9481b094e72b624db1a34e5fe386d21f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.61.177.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:91:ab:01:1b:e6:35:8f:4e:85:4b:a4:f8:29:ba:fa:06:f9:
68:9d:c3:f5:f4:03:5a:da:08:a1:ae:9f:de:f8:c7:fb:2d:25:
65:f3:69:1e:d2:76:07:4d:e5:73:f2:57:04:d8:6b:fe:54:5c:
29:64:d3:7b:5d:95:33:00:72:3d:4c:64:5c:69:c8:a8:57:da:
8a:d9:c7:95:9c:80:5d:90:d1:d5:10:db:ea:d3:3e:5d:b6:15:
b4:e0:01:24:d6:ac:57:4a:a2:6d:6f:58:10:61:0d:43:6d:a3:
c8:08:f4:4b:cf:2b:c5:47:5c:f3:96:43:01:3e:d4:20:a4:a7:
b6:32:93:23:ce:2f:c5:c0:ef:49:91:75:dc:34:89:53:21:60:
61:08:0b:b6:42:9f:88:1d:b8:60:29:e6:1d:47:2e:90:87:1c:
cf:2d:a1:10:87:73:87:ee:a6:ed:dd:96:53:82:41:e5:28:80:
fc:cd:6a:f2:56:fd:21:ab:19:7a:f9:3e:ab:26:71:0b:01:ed:
1c:3a:c4:0c:5c:15:a6:52:89:7f:ce:22:5b:c5:87:81:99:70:
80:80:e3:4a:bb:3b:d9:c0:40:a8:cd:db:c5:28:c7:77:c0:1a:
66:2b:bc:e6:b4:c4:3a:25:dd:b6:f2:e4:f9:98:99:0e:d0:b6:
b1:d7:89:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org