Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/73ff31b3bb360105faba9abbbfba2e127c8d1d1e.roa
File: 73ff31b3bb360105faba9abbbfba2e127c8d1d1e.roa (raw, json)
Hash identifier: PInvBCN0lXQA4w/nk41/FUWorTQwpzwRxWtbnVTVtkk=
Subject key identifier: 60:EE:43:E0:C4:CA:7E:C6:83:76:03:8E:25:84:5A:53:FB:09:F3:CC
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 0CF731
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/73ff31b3bb360105faba9abbbfba2e127c8d1d1e.roa
Signing time: Wed 24 Mar 2021 14:29:19 +0000
ROA not before: Wed 24 Mar 2021 14:29:18 +0000
ROA not after: Tue 24 Mar 2026 14:29:18 +0000
asID: 52500
IP address blocks: 201.182.142.0/24 maxlen: 24
200.115.84.0/24 maxlen: 24
2001:13c7:6014::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 849713 (0xcf731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Mar 24 14:29:18 2021 GMT
Not After : Mar 24 14:29:18 2026 GMT
Subject: CN=73ff31b3bb360105faba9abbbfba2e127c8d1d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:eb:1a:ae:c0:f5:d0:49:f5:40:b9:a0:06:bc:
99:9a:90:bc:d7:ac:68:60:f0:f4:e9:1d:59:d6:d9:
01:15:07:39:3d:00:b1:7f:56:a3:64:6c:51:89:08:
a3:6f:da:02:b3:4d:08:fd:f5:0e:08:8a:12:87:f5:
61:ae:14:33:c5:cf:d0:e1:25:57:3e:c4:cf:ef:2e:
1f:57:04:16:6f:02:9e:0d:c2:0a:7b:22:06:77:e5:
2e:0b:41:8f:64:8d:2b:6b:37:2e:2a:b6:bb:66:fb:
e8:b6:18:ec:a8:f2:01:48:f1:0c:60:f2:06:b3:2c:
ad:8a:35:61:49:b4:75:1a:aa:d9:93:d4:7e:df:ee:
57:ca:55:54:33:af:9e:2d:bd:65:a4:ec:66:b0:58:
42:52:3a:5a:ac:9b:f4:f2:81:df:5a:ba:c3:d0:95:
c2:b4:fc:21:0e:48:89:a4:6a:6f:40:97:0f:b9:87:
5e:db:a2:b7:eb:37:3e:75:2e:b5:d5:26:1a:74:82:
56:ee:1c:39:6e:7f:70:3d:12:62:0a:63:cb:31:e4:
ef:42:db:ee:2f:31:56:02:07:b0:7f:47:70:9f:1f:
f3:b8:f0:5a:92:a0:2f:5a:b6:54:71:bc:fb:cd:3d:
91:44:75:48:0b:74:d5:63:28:44:6b:cf:2e:d2:40:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EE:43:E0:C4:CA:7E:C6:83:76:03:8E:25:84:5A:53:FB:09:F3:CC
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/73ff31b3bb360105faba9abbbfba2e127c8d1d1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.84.0/24
201.182.142.0/24
IPv6:
2001:13c7:6014::/48
Signature Algorithm: sha256WithRSAEncryption
6a:e9:db:62:6b:14:c1:59:4a:fb:54:31:23:73:1c:ac:4f:4d:
a5:38:c4:6e:a8:54:31:0f:d0:b3:51:20:fd:fc:96:72:43:ff:
8d:db:fe:31:d7:58:54:8b:b5:85:b1:08:d9:06:26:ec:55:69:
d8:11:96:49:47:aa:53:1b:ee:d6:40:12:9c:97:45:00:74:d1:
41:0c:5b:cb:f4:4b:5e:09:6f:c0:4d:b4:9a:ef:f1:b7:eb:e3:
f2:d2:f8:42:c1:6b:b6:06:c5:bc:4a:cc:b6:f1:b5:f1:e4:72:
01:25:45:80:f6:4c:73:08:07:6e:df:83:19:f8:f3:9f:3f:6d:
c4:ff:a1:f1:5e:b5:36:00:87:fe:f9:90:a7:af:9f:be:72:a8:
60:06:dd:ad:c1:c0:f9:ec:5b:26:48:83:69:a4:0a:00:00:01:
70:9f:a9:7d:22:c4:f4:bf:4c:05:06:85:46:76:45:a2:39:dd:
c2:3f:f9:d1:11:d4:8f:7f:fd:9f:9e:56:59:d7:49:c6:92:4b:
ea:cc:e6:00:8b:c0:8f:f9:4f:95:14:aa:2d:22:a8:79:33:c1:
f4:b8:9a:b2:8a:29:ac:9d:d1:d8:8d:78:59:6a:14:0a:c2:60:
26:c7:6b:57:e2:c6:99:4d:77:5b:35:cd:bb:0b:12:6a:55:7e:
c2:78:3a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 12:36:31 2023 by rpki-client on console-ams.rpki-client.org