Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/c7375a3fc95d10c0d4470391f0ef0f1eef36efdf.roa
File: c7375a3fc95d10c0d4470391f0ef0f1eef36efdf.roa (raw, json)
Hash identifier: QzAbKwFXwPgviSjeHVrDuFxdIETbgPKNkHvdORbutZA=
Subject key identifier: 9A:E6:30:A5:9F:6D:38:89:F8:76:B1:AB:3E:E8:71:F7:04:BA:51:D3
Certificate issuer: /CN=665130a1c940d46872c6be287d312bbd14fb8bd7
Certificate serial: 0DF7DA
Authority key identifier: 46:0E:34:67:31:F8:0B:24:98:6C:DE:01:D4:60:13:3A:B0:2D:60:65
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/665130a1c940d46872c6be287d312bbd14fb8bd7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/c7375a3fc95d10c0d4470391f0ef0f1eef36efdf.roa
Signing time: Wed 24 Mar 2021 14:30:16 +0000
ROA not before: Wed 24 Mar 2021 14:30:16 +0000
ROA not after: Tue 24 Mar 2026 14:30:16 +0000
asID: 52419
IP address blocks: 200.31.240.0/22 maxlen: 24
200.31.244.0/24 maxlen: 24
200.31.245.0/24 maxlen: 24
200.31.246.0/24 maxlen: 24
200.31.247.0/24 maxlen: 24
200.31.248.0/24 maxlen: 24
200.31.249.0/24 maxlen: 24
200.31.250.0/24 maxlen: 24
200.31.251.0/24 maxlen: 24
200.31.252.0/24 maxlen: 24
200.31.253.0/24 maxlen: 24
200.31.254.0/24 maxlen: 24
200.31.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915418 (0xdf7da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665130a1c940d46872c6be287d312bbd14fb8bd7
Validity
Not Before: Mar 24 14:30:16 2021 GMT
Not After : Mar 24 14:30:16 2026 GMT
Subject: CN=c7375a3fc95d10c0d4470391f0ef0f1eef36efdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:67:62:60:9a:47:54:3c:4a:f9:51:49:cd:0f:
3b:ee:f0:73:88:c1:fa:8c:d3:8a:6b:78:da:3d:bc:
68:c4:f5:d5:ef:09:bd:e0:a5:99:18:3c:32:99:10:
22:65:0e:36:f2:ef:73:6a:e3:5d:9c:6d:12:5a:67:
32:31:48:78:45:19:d6:59:32:54:69:91:01:7e:6f:
0b:66:dd:84:8b:44:45:83:3a:de:f9:c0:5a:06:d2:
d7:bd:d3:bf:01:06:2c:ba:63:56:63:b8:88:03:67:
58:58:cd:d3:a9:40:20:89:bd:14:d6:c4:71:5c:21:
8a:08:33:e8:ed:3a:e6:62:26:7c:78:8b:96:7e:53:
81:be:61:f5:67:69:aa:70:a2:ba:b9:a0:cd:61:0e:
2a:3d:b1:da:39:a1:1f:d1:ae:40:82:8f:ab:55:79:
81:98:f2:61:eb:ca:e5:51:fc:56:52:5f:6a:34:59:
46:fe:15:ea:36:fa:15:e2:46:2c:de:e1:99:22:7f:
7b:a7:97:36:33:43:08:27:6a:a9:1b:bd:a4:76:e5:
e4:bd:08:f6:66:66:41:28:76:cf:90:1e:2d:1f:ba:
74:30:69:fa:96:93:be:36:6b:b5:08:4e:11:26:dd:
78:05:f8:d5:b4:99:0c:ce:2c:d6:92:88:79:67:53:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E6:30:A5:9F:6D:38:89:F8:76:B1:AB:3E:E8:71:F7:04:BA:51:D3
X509v3 Authority Key Identifier:
keyid:46:0E:34:67:31:F8:0B:24:98:6C:DE:01:D4:60:13:3A:B0:2D:60:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/665130a1c940d46872c6be287d312bbd14fb8bd7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/c7375a3fc95d10c0d4470391f0ef0f1eef36efdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/665130a1c940d46872c6be287d312bbd14fb8bd7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.31.240.0/20
Signature Algorithm: sha256WithRSAEncryption
58:78:88:7c:fb:84:99:0a:3e:b2:c7:82:67:f4:e5:8e:2f:bd:
e1:6d:17:16:82:25:0b:0e:5e:f5:c2:2d:96:55:ea:32:58:04:
cc:8a:c8:d9:c5:0f:6d:4e:19:95:a3:49:1a:3e:e6:5d:9f:9a:
e0:ba:5b:52:24:fb:34:ef:71:ab:1b:2b:61:1d:56:22:01:89:
e6:09:a9:ec:69:9f:96:37:8b:6e:ef:d3:da:b6:6d:22:a0:07:
32:0f:24:ab:23:72:ab:6d:66:d6:1c:12:d3:33:8b:48:58:1c:
df:d2:ab:8a:b9:60:a7:f6:88:73:58:f3:77:96:de:9e:dd:cd:
ad:1c:31:05:fe:34:3c:b5:78:61:06:f6:e0:ea:ec:cd:cd:5d:
96:a0:ce:54:3f:b2:fa:bc:67:ea:d4:0e:73:62:9f:9f:de:be:
4b:4d:5b:bc:9f:9e:b4:80:0b:e8:81:61:25:0a:50:98:47:0f:
ed:93:9b:c6:f7:75:7f:4e:42:25:21:0a:1b:98:a8:5c:19:32:
7c:21:b5:78:fc:5f:ed:6f:28:fe:1d:22:7a:93:76:ce:71:56:
bd:2e:d8:97:43:71:00:9b:ae:67:b2:e5:c6:3d:3a:f8:78:18:
95:1a:51:80:e2:84:7c:a0:84:9b:84:1a:7c:cc:1e:c2:ba:74:
4a:03:63:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-fra.rpki-client.org