Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/2c3da2db85a440d50284982660651422d424facd.roa
File: 2c3da2db85a440d50284982660651422d424facd.roa (raw, json)
Hash identifier: oVEAh2aSIVZvqNFeTTvTxihRHu4EVcC0GqOF9wDrAWI=
Subject key identifier: BB:DE:B7:C9:9D:0C:05:4B:99:2D:31:62:C2:68:98:7B:81:32:13:90
Certificate issuer: /CN=5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6
Certificate serial: 1ADF33
Authority key identifier: C7:2D:2C:D5:1B:CD:5C:88:93:F0:A0:DD:4C:63:E7:86:FC:CF:41:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/2c3da2db85a440d50284982660651422d424facd.roa
Signing time: Fri 03 Mar 2023 21:05:26 +0000
ROA not before: Mon 31 Jan 2022 03:00:00 +0000
ROA not after: Fri 02 Feb 2024 03:00:00 +0000
asID: 272832
IP address blocks: 200.115.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761075 (0x1adf33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6
Validity
Not Before: Jan 31 03:00:00 2022 GMT
Not After : Feb 2 03:00:00 2024 GMT
Subject: CN=2c3da2db85a440d50284982660651422d424facd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:5d:2a:0e:97:cf:aa:b4:7b:9d:85:bc:fc:
ed:04:3a:ba:a7:ca:46:73:3a:da:2a:fe:9e:a6:3a:
41:7c:3e:46:ef:82:4a:e0:37:20:c6:c8:59:2a:ff:
7d:9e:99:3d:3c:e4:ff:10:99:aa:b1:3b:52:b3:43:
40:27:1c:8a:b9:42:7a:59:87:71:38:69:be:d4:e8:
27:82:b4:46:d1:22:0e:5f:42:88:39:69:c3:d0:0c:
e1:12:2b:d6:c2:3c:1a:ce:c9:66:68:68:f4:70:a9:
db:b7:3e:e8:24:c5:4d:45:20:46:34:a8:9e:fe:5a:
57:cf:e7:e6:13:96:b5:49:ac:c7:f8:47:28:6e:90:
d8:a2:6a:a6:7a:8b:f2:9b:ef:41:91:68:8b:94:21:
74:ad:08:14:5a:c1:38:18:9d:63:b6:a5:1d:29:59:
08:43:70:ba:94:eb:5b:22:16:86:50:eb:02:d8:88:
85:c9:77:78:88:be:d6:8f:fa:b9:f0:83:dc:bf:87:
c2:ab:72:17:9c:f5:2e:80:47:ef:6f:34:9a:a6:92:
55:bf:ae:59:2a:15:39:d4:68:c5:6e:62:ca:7a:27:
68:72:fb:47:c6:55:bf:84:8e:14:7b:a9:f5:24:f0:
e1:95:e5:95:aa:2c:27:5e:4d:5d:4a:02:39:06:77:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DE:B7:C9:9D:0C:05:4B:99:2D:31:62:C2:68:98:7B:81:32:13:90
X509v3 Authority Key Identifier:
keyid:C7:2D:2C:D5:1B:CD:5C:88:93:F0:A0:DD:4C:63:E7:86:FC:CF:41:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/2c3da2db85a440d50284982660651422d424facd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.120.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:04:7b:87:f4:58:6e:b5:f2:aa:8f:5a:44:ea:64:5b:84:35:
2c:cd:cd:d1:71:8b:0c:c6:8d:b4:3f:ab:ff:08:04:af:47:75:
a2:7d:5d:44:1c:0d:b1:3b:c8:5b:6a:59:2b:8f:23:23:f2:e1:
4c:a3:69:66:4b:0f:d6:d6:31:fd:72:57:a4:a1:b1:90:c9:f7:
6d:2d:43:78:e6:e7:f9:60:14:58:2f:b1:c8:8e:2a:93:9d:5d:
d4:3c:0d:e5:f4:7a:0b:a0:c4:87:26:58:c3:f2:c1:6f:12:20:
4a:5e:13:96:fb:43:b9:41:61:4f:82:4f:71:63:64:21:d6:2c:
82:4e:df:c4:59:8e:8b:20:7e:e7:f1:a4:17:14:2a:17:22:fb:
ce:5b:52:60:ad:a5:8c:bd:59:d2:08:55:e6:64:5e:83:2b:0b:
1b:1d:9c:38:33:59:ab:c5:8c:95:8d:34:38:ae:22:65:61:69:
3f:3a:96:c9:d6:23:5f:66:43:9a:b2:aa:ea:f4:66:5a:dd:88:
06:e0:ea:7a:e9:d2:af:31:6a:ec:f6:e9:54:a6:4d:9c:83:53:
2e:cf:aa:6a:13:5c:aa:fc:57:4f:34:44:d7:b4:24:a0:75:54:
82:77:81:a8:0b:61:9d:33:97:f0:56:5c:3c:d7:87:ce:4e:f9:
a1:eb:49:69
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGt8zMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVl
MWFhN2ZmNjRmOWIzMDIxYmIwZTNjNjBhZGEyNWE1YWFiMDQ4ZDYwHhcNMjIwMTMx
MDMwMDAwWhcNMjQwMjAyMDMwMDAwWjAzMTEwLwYDVQQDEygyYzNkYTJkYjg1YTQ0
MGQ1MDI4NDk4MjY2MDY1MTQyMmQ0MjRmYWNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqCJdKg6Xz6q0e52FvPztBDq6p8pGczraKv6epjpBfD5G74JK
4DcgxshZKv99npk9POT/EJmqsTtSs0NAJxyKuUJ6WYdxOGm+1OgngrRG0SIOX0KI
OWnD0AzhEivWwjwazslmaGj0cKnbtz7oJMVNRSBGNKie/lpXz+fmE5a1SazH+Eco
bpDYomqmeovym+9BkWiLlCF0rQgUWsE4GJ1jtqUdKVkIQ3C6lOtbIhaGUOsC2IiF
yXd4iL7Wj/q58IPcv4fCq3IXnPUugEfvbzSappJVv65ZKhU51GjFbmLKeidocvtH
xlW/hI4Ue6n1JPDhleWVqiwnXk1dSgI5BncsTwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLvet8mdDAVLmS0xYsJomHuBMhOQMB8GA1UdIwQYMBaAFMctLNUbzVyIk/Cg
3Uxj54b8z0HbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWUxYWE3
ZmY2NGY5YjMwMjFiYjBlM2M2MGFkYTI1YTVhYWIwNDhkNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjY2OGVhZjQtMzRhOC00YzVlLWJmOGItMGI3NjJi
ZTQwZTljLzJjM2RhMmRiODVhNDQwZDUwMjg0OTgyNjYwNjUxNDIyZDQyNGZhY2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NjY4ZWFmNC0zNGE4LTRjNWUtYmY4Yi0wYjc2
MmJlNDBlOWMvNWUxYWE3ZmY2NGY5YjMwMjFiYjBlM2M2MGFkYTI1YTVhYWIwNDhk
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMhzeDANBgkqhkiG9w0BAQsFAAOCAQEAtAR7h/RYbrXyqo9a
ROpkW4Q1LM3N0XGLDMaNtD+r/wgEr0d1on1dRBwNsTvIW2pZK48jI/LhTKNpZksP
1tYx/XJXpKGxkMn3bS1DeObn+WAUWC+xyI4qk51d1DwN5fR6C6DEhyZYw/LBbxIg
Sl4TlvtDuUFhT4JPcWNkIdYsgk7fxFmOiyB+5/GkFxQqFyL7zltSYK2ljL1Z0ghV
5mRegysLGx2cODNZq8WMlY00OK4iZWFpPzqWydYjX2ZDmrKq6vRmWt2IBuDqeunS
rzFq7PbpVKZNnINTLs+qahNcqvxXTzRE17QkoHVUgneBqAthnTOX8FZcPNeHzk75
oetJaQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org