Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/d7febd38f99959b40396f483f77a5db317642677.roa
File: d7febd38f99959b40396f483f77a5db317642677.roa (raw, json)
Hash identifier: BWD1E7EaK0AUgTttrMs49UxL31sINHHk5bLUjST/6W8=
Subject key identifier: 2B:34:9A:D5:74:9B:42:8F:5E:DD:EC:8E:E1:40:A8:C6:83:F5:77:0D
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 0D18EC
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/d7febd38f99959b40396f483f77a5db317642677.roa
Signing time: Wed 24 Mar 2021 14:29:20 +0000
ROA not before: Wed 24 Mar 2021 14:29:18 +0000
ROA not after: Tue 24 Mar 2026 14:29:18 +0000
asID: 52294
IP address blocks: 200.115.93.0/24 maxlen: 24
200.0.19.0/24 maxlen: 24
2001:13c7:6007::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858348 (0xd18ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Mar 24 14:29:18 2021 GMT
Not After : Mar 24 14:29:18 2026 GMT
Subject: CN=d7febd38f99959b40396f483f77a5db317642677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:e2:df:19:b1:07:8a:22:ab:f8:c9:b6:5e:
23:e1:60:c2:63:3e:52:65:79:35:14:1b:1d:0e:13:
e8:58:74:4e:cc:d8:8e:3d:09:1d:4a:36:91:22:e5:
2c:d2:23:c8:e2:f9:da:20:b9:5e:7b:36:a4:7d:ea:
57:dd:c3:57:5d:d9:71:5a:19:bb:9c:77:9e:70:5b:
f2:ca:a5:9b:6d:b7:f1:b2:6b:62:f6:ff:41:66:c2:
18:e3:b5:1a:6a:aa:71:c1:25:7d:dd:8b:c9:fd:5e:
6f:08:4d:5d:a9:f7:a8:0e:35:fe:f5:e4:2a:53:de:
ee:cb:d2:5a:37:02:10:a2:0a:d9:e0:89:e8:ec:3c:
dd:dc:2c:dd:75:13:76:50:db:42:36:94:d4:17:d4:
aa:14:f7:52:6e:29:85:aa:82:c5:0b:46:80:9a:df:
58:b1:ca:45:56:dc:02:5d:dc:3d:f8:f8:41:11:cf:
de:8e:4e:29:81:33:62:96:0a:66:b0:c9:f6:42:45:
b1:61:4d:af:99:28:37:f8:43:9b:fd:6e:59:fe:97:
c0:10:22:78:7e:80:64:10:95:b1:00:aa:7c:c6:4a:
8a:a1:71:62:f1:63:c1:84:30:cc:50:1f:b3:86:ec:
fe:b1:dd:38:c8:ef:77:91:ab:c0:3c:33:32:86:d8:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:34:9A:D5:74:9B:42:8F:5E:DD:EC:8E:E1:40:A8:C6:83:F5:77:0D
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/d7febd38f99959b40396f483f77a5db317642677.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.19.0/24
200.115.93.0/24
IPv6:
2001:13c7:6007::/48
Signature Algorithm: sha256WithRSAEncryption
06:eb:60:14:7d:45:4c:6d:f9:98:4c:1a:8a:5d:d7:da:64:4b:
d3:51:91:d7:ad:f2:e0:3d:7e:9d:52:72:7b:b2:a3:61:d2:2c:
99:73:34:85:a1:77:ca:6f:09:79:4d:14:7e:99:eb:da:4f:0c:
81:c0:1c:99:f0:8f:47:43:7d:aa:50:e2:d5:d0:39:76:36:37:
41:78:8a:8f:0c:7c:53:23:22:96:0a:8a:c5:09:33:ef:8e:a1:
19:1d:bd:01:47:9f:c5:a4:17:4f:c7:e5:e8:7b:0b:03:2b:49:
2c:52:2b:87:83:5a:47:cd:e6:b3:a3:a9:97:e1:2f:ab:81:79:
34:fd:b2:7f:a6:6a:a1:78:8f:5e:c3:f6:7f:d6:30:87:62:31:
49:cc:eb:b3:a6:94:2b:1d:b2:5b:85:ae:6f:f5:77:c2:26:e9:
b5:c8:c4:28:06:75:a1:d1:a0:71:7c:a3:d2:4a:10:6a:26:a4:
2a:3d:7a:b2:8f:5c:a2:e9:79:62:3e:c3:af:94:dc:08:a5:2b:
a9:55:91:87:dd:4b:60:4d:64:b4:23:f0:16:b1:2b:51:df:a8:
42:ae:63:99:cd:86:2e:ab:3e:ed:18:09:db:c9:c0:f1:05:69:
8b:43:31:22:2d:95:32:1e:06:19:dd:68:ee:c0:c8:a2:32:99:
da:cb:d4:f4
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgIDDRjsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjEwMzI0
MTQyOTE4WhcNMjYwMzI0MTQyOTE4WjAzMTEwLwYDVQQDEyhkN2ZlYmQzOGY5OTk1
OWI0MDM5NmY0ODNmNzdhNWRiMzE3NjQyNjc3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvI/i3xmxB4oiq/jJtl4j4WDCYz5SZXk1FBsdDhPoWHROzNiO
PQkdSjaRIuUs0iPI4vnaILleezakfepX3cNXXdlxWhm7nHeecFvyyqWbbbfxsmti
9v9BZsIY47UaaqpxwSV93YvJ/V5vCE1dqfeoDjX+9eQqU97uy9JaNwIQogrZ4Ino
7Dzd3CzddRN2UNtCNpTUF9SqFPdSbimFqoLFC0aAmt9YscpFVtwCXdw9+PhBEc/e
jk4pgTNilgpmsMn2QkWxYU2vmSg3+EOb/W5Z/pfAECJ4foBkEJWxAKp8xkqKoXFi
8WPBhDDMUB+zhuz+sd04yO93kavAPDMyhthJPQIDAQABo4ICcjCCAm4wHQYDVR0O
BBYEFCs0mtV0m0KPXt3sjuFAqMaD9XcNMB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxL2Q3ZmViZDM4Zjk5OTU5YjQwMzk2ZjQ4M2Y3N2E1ZGIzMTc2NDI2Nzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQn
MCUwEgQCAAEwDAMEAMgAEwMEAMhzXTAPBAIAAjAJAwcAIAETx2AHMA0GCSqGSIb3
DQEBCwUAA4IBAQAG62AUfUVMbfmYTBqKXdfaZEvTUZHXrfLgPX6dUnJ7sqNh0iyZ
czSFoXfKbwl5TRR+mevaTwyBwByZ8I9HQ32qUOLV0Dl2NjdBeIqPDHxTIyKWCorF
CTPvjqEZHb0BR5/FpBdPx+XoewsDK0ksUiuHg1pHzeazo6mX4S+rgXk0/bJ/pmqh
eI9ew/Z/1jCHYjFJzOuzppQrHbJbha5v9XfCJum1yMQoBnWh0aBxfKPSShBqJqQq
PXqyj1yi6XliPsOvlNwIpSupVZGH3UtgTWS0I/AWsStR36hCrmOZzYYuqz7tGAnb
ycDxBWmLQzEiLZUyHgYZ3WjuwMiiMpnay9T0
-----END CERTIFICATE-----
Generated at Mon Oct 30 12:36:31 2023 by rpki-client on console-ams.rpki-client.org