Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/2f5213ac036d59a29a1b338a9876607fb70cd62d.roa
File: 2f5213ac036d59a29a1b338a9876607fb70cd62d.roa (raw, json)
Hash identifier: 7BOn1WH+N7Uu1+9WlnGo8hNmjvw7ofFSVF2AkX7HFvs=
Subject key identifier: B4:F1:DF:3E:A4:71:28:28:D1:A0:CF:70:AD:ED:42:37:F1:31:EF:FC
Certificate issuer: /CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Certificate serial: 0B9BA1
Authority key identifier: 2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/2f5213ac036d59a29a1b338a9876607fb70cd62d.roa
Signing time: Sat 16 Oct 2021 00:16:49 +0000
ROA not before: Fri 15 Oct 2021 03:00:00 +0000
ROA not after: Sun 15 Oct 2023 03:00:00 +0000
asID: 263812
IP address blocks: 200.107.204.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 760737 (0xb9ba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Validity
Not Before: Oct 15 03:00:00 2021 GMT
Not After : Oct 15 03:00:00 2023 GMT
Subject: CN=2f5213ac036d59a29a1b338a9876607fb70cd62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:be:80:10:7d:a2:12:33:48:aa:bb:90:1f:a8:
f6:8e:a1:e0:28:be:eb:c5:ac:1f:6e:57:81:0e:b2:
2a:12:c2:18:a8:4a:20:8b:3e:e5:19:a4:1d:01:08:
9b:5b:6c:bc:99:2f:d8:37:52:35:8d:5b:84:1f:2a:
fb:74:fc:a9:86:3a:71:8e:40:a1:0f:73:8f:01:27:
7c:e5:1f:bb:50:92:3c:d9:6b:b1:cb:86:11:92:25:
ac:c5:a8:86:1d:b8:46:23:ee:1b:83:d2:ae:a3:76:
5f:03:c2:df:c7:04:27:35:08:cb:f4:17:6b:61:a5:
d1:0b:a8:d5:3e:0b:fe:d8:db:40:a5:3f:33:0d:2d:
71:ed:9d:92:4e:18:0a:2a:49:6a:6d:de:3e:08:c6:
70:d9:5a:d7:f8:76:4a:95:df:9c:8a:3a:f1:50:47:
12:d7:08:fc:80:23:6e:4e:f5:11:65:97:0f:43:a6:
9d:e2:49:14:22:06:5b:bd:45:56:88:c7:2e:18:b3:
fe:fd:7f:13:46:69:5c:e2:13:f1:fd:aa:fc:93:15:
48:11:f0:ed:21:12:cc:13:55:d1:e2:ad:c8:7c:21:
b9:db:e1:9f:e1:98:32:0d:9e:34:cf:4a:ea:bf:6d:
2f:20:28:1a:f2:34:b8:0b:a1:7a:39:b8:db:93:e4:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F1:DF:3E:A4:71:28:28:D1:A0:CF:70:AD:ED:42:37:F1:31:EF:FC
X509v3 Authority Key Identifier:
keyid:2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/2f5213ac036d59a29a1b338a9876607fb70cd62d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.107.204.0/22
Signature Algorithm: sha256WithRSAEncryption
04:81:23:70:96:7a:39:18:b4:c2:95:c7:5b:31:8a:33:5a:d5:
7e:47:84:66:ed:e1:c4:5c:29:e5:82:87:54:9d:28:0e:0d:37:
8c:dc:29:f9:d5:6d:5b:5c:35:ed:96:b9:67:e3:4e:9b:dc:9a:
29:8d:62:ff:58:f5:8c:8d:62:42:65:10:1d:cf:5d:1f:a2:df:
f5:60:c6:b4:7a:85:d7:a3:53:95:f9:19:08:11:a9:38:74:ac:
8c:87:71:50:cd:12:0f:cd:2a:6d:62:c9:64:53:03:9e:fc:5a:
04:a9:b4:a9:77:1e:b2:33:5c:00:d1:d2:90:09:75:a9:51:2e:
30:ca:0c:1c:07:7b:bc:f0:fa:53:f1:44:5f:a0:67:e8:aa:70:
3c:4c:b2:4a:ee:a0:17:68:a0:9b:04:d2:47:70:b4:fe:bd:12:
99:bb:3e:87:ed:45:11:9b:14:19:07:c5:19:db:4a:dc:cf:3f:
40:31:dd:d0:ba:0b:37:20:ac:dc:88:d5:8f:2d:22:b4:16:34:
e0:42:70:44:84:07:67:88:ba:43:c4:8f:0d:0e:48:43:98:43:
71:6e:95:6a:40:e7:7d:a1:5f:2a:91:02:09:86:97:d9:60:69:
f1:57:3c:0a:74:bb:74:68:68:0f:43:21:de:04:4d:e6:85:ec:
df:5a:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 15:43:09 2023 by rpki-client on console-ams.rpki-client.org