Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/6ce3cbf5b8133b3017ae1555f31f0200b746239b.roa
File: 6ce3cbf5b8133b3017ae1555f31f0200b746239b.roa (raw, json)
Hash identifier: L+2+PhJhqjtdTNHat+BL2e6f6vwLUCioxKNZ2c/BE8M=
Subject key identifier: D7:8E:D7:37:81:A2:BC:F7:81:76:30:97:70:EF:F4:B9:2B:47:AC:5B
Certificate issuer: /CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Certificate serial: 1D04B0
Authority key identifier: 2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/6ce3cbf5b8133b3017ae1555f31f0200b746239b.roa
Signing time: Thu 07 Sep 2023 16:42:06 +0000
ROA not before: Wed 06 Sep 2023 16:42:06 +0000
ROA not after: Sun 07 Sep 2025 16:42:06 +0000
asID: 9009
IP address blocks: 200.107.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1901744 (0x1d04b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Validity
Not Before: Sep 6 16:42:06 2023 GMT
Not After : Sep 7 16:42:06 2025 GMT
Subject: CN=6ce3cbf5b8133b3017ae1555f31f0200b746239b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:d3:48:4e:47:53:87:b2:bb:aa:6e:f2:32:
8e:8e:21:1e:58:4e:3c:e4:eb:cf:96:b1:52:fd:9b:
ea:9e:84:b4:83:91:13:79:49:60:93:5f:1c:f8:e1:
e0:f4:ec:3f:97:11:2f:32:47:57:3f:38:39:9e:f3:
75:36:ed:3e:eb:81:2d:a5:95:6d:42:a5:5c:60:95:
b7:9a:a7:01:9b:8f:a9:22:30:41:f2:d2:b7:f5:4c:
b9:a5:75:8f:09:c0:6c:e0:12:de:ce:b6:49:d4:3e:
07:f4:3f:91:fc:dd:4c:fe:ce:2d:94:a7:7e:c1:ee:
47:c6:fc:ef:ac:30:aa:8e:c7:28:b0:e4:ff:25:da:
05:64:23:04:bb:3a:85:96:5b:f6:06:e9:e5:fc:ea:
d2:54:fa:bd:7b:67:00:2c:7d:67:83:16:c7:64:34:
be:c8:fe:72:da:e3:83:ea:ce:0f:4b:93:86:dd:bf:
f8:6e:59:27:4e:b5:b4:fb:79:52:41:b8:fb:e4:2f:
8e:67:f2:94:0c:e9:a7:48:25:c8:8c:87:97:a2:fa:
84:a7:12:44:f4:bf:c6:9f:df:32:74:e3:e3:36:32:
c4:f7:91:21:df:fd:16:fb:b8:7e:82:8a:2c:42:95:
cc:3f:a9:2d:3d:fa:3f:a4:6b:7d:d2:26:7e:70:dc:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8E:D7:37:81:A2:BC:F7:81:76:30:97:70:EF:F4:B9:2B:47:AC:5B
X509v3 Authority Key Identifier:
keyid:2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/6ce3cbf5b8133b3017ae1555f31f0200b746239b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.107.205.0/24
Signature Algorithm: sha256WithRSAEncryption
65:27:9a:bb:6b:72:ed:ff:0a:09:02:b9:68:6b:02:e8:2b:0a:
34:f7:00:dc:f8:49:f8:5a:38:e8:11:e4:4b:96:27:1f:3f:95:
60:95:26:3f:de:99:bf:15:15:4f:2a:b7:cf:ea:3f:6d:da:86:
3b:d9:33:ff:c2:a7:df:03:46:87:7a:66:ef:65:d3:a1:64:a9:
da:92:32:1e:7a:f4:80:05:d3:67:eb:81:d3:d0:a2:d1:d5:78:
28:22:9f:45:23:50:54:c8:c8:ef:2d:33:64:2b:9a:47:8e:f4:
3b:92:a4:f6:51:8e:19:41:ea:2a:18:a6:60:28:87:5a:04:b0:
3c:e4:ed:75:e5:4c:9a:90:5f:29:74:1b:30:36:79:8c:f0:0f:
bc:92:cc:b3:e9:a0:22:c5:dd:e3:91:27:04:a2:48:a3:cb:61:
4d:9f:53:87:b2:cf:ce:a9:9a:e3:05:a4:ba:8e:f3:ef:ed:83:
00:9c:00:69:0a:be:44:dc:6e:56:78:e7:ac:20:a8:a1:1e:e3:
77:f1:ca:38:4c:98:28:5d:82:26:2f:40:cb:6b:d4:74:36:83:
dd:d5:25:01:95:35:74:7f:d6:8d:57:d4:2e:78:e6:ed:ca:b3:
bd:8c:fa:18:3e:fd:7e:b5:a1:8e:2f:3a:59:e1:6d:e4:db:f4:
ce:d5:b4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 20:46:03 2023 by rpki-client on console-ams.rpki-client.org