Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/bc377be0077136a2299c80f70bed4e2f5c1cd82b.roa
File: bc377be0077136a2299c80f70bed4e2f5c1cd82b.roa (raw, json)
Hash identifier: MtCOcQt3N/kRJlxZlLM9BaSEZLpt2YU2gY8WSDax2v4=
Subject key identifier: EA:1F:21:07:CF:74:5E:4C:95:67:83:0F:98:8F:82:D1:C5:64:EA:36
Certificate issuer: /CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Certificate serial: 1C9030
Authority key identifier: 2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/bc377be0077136a2299c80f70bed4e2f5c1cd82b.roa
Signing time: Tue 22 Aug 2023 12:45:07 +0000
ROA not before: Mon 21 Aug 2023 12:45:07 +0000
ROA not after: Fri 22 Aug 2025 12:45:07 +0000
asID: 273007
IP address blocks: 200.107.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1871920 (0x1c9030)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f82c3ad9e5010fae8956f061f054fe6125c235c
Validity
Not Before: Aug 21 12:45:07 2023 GMT
Not After : Aug 22 12:45:07 2025 GMT
Subject: CN=bc377be0077136a2299c80f70bed4e2f5c1cd82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:19:30:7d:bd:ee:21:4e:75:9e:b2:5a:f6:4e:
71:91:6d:da:0f:ff:c0:b3:af:d7:76:bc:a8:3f:64:
49:51:39:59:0b:d0:0c:cb:79:97:4b:4c:cb:af:58:
01:bd:40:a6:9e:0e:08:7a:d1:6b:6a:27:41:33:ca:
96:93:39:32:25:d9:8b:5e:6b:69:24:26:cf:92:2c:
e2:91:7b:26:29:22:59:ec:ca:3b:b0:04:61:1b:43:
6d:fa:13:bd:43:91:fb:91:f7:21:e3:20:10:99:e1:
2a:03:f4:6e:c7:d1:cf:3b:e5:66:76:a7:a2:5a:12:
e1:74:19:3d:f6:95:b4:70:76:d6:4f:73:4a:2b:0e:
bf:33:43:b5:66:e4:41:99:96:79:bf:47:e1:c4:98:
9f:6f:ba:59:17:6b:ab:5d:e7:31:ac:15:a3:d7:90:
d2:20:32:5c:8d:d0:0b:a8:ff:97:9d:f0:47:ef:e0:
8b:e9:d6:2d:62:f3:c6:ac:e7:94:5a:5f:3c:f7:fe:
60:83:42:87:c3:b9:5f:a3:e1:d4:af:ca:cb:c1:7b:
3c:b6:0a:73:e4:b7:79:be:cb:f0:0d:be:60:e1:7b:
2d:e2:ea:6e:25:5c:e0:86:a8:ca:57:98:ec:7d:00:
a8:dc:b2:bf:1e:be:c3:9a:f7:17:cf:18:f0:8c:f1:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1F:21:07:CF:74:5E:4C:95:67:83:0F:98:8F:82:D1:C5:64:EA:36
X509v3 Authority Key Identifier:
keyid:2B:45:37:66:5F:9D:C8:57:E0:B5:E0:35:69:B2:E8:73:65:BD:BE:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f82c3ad9e5010fae8956f061f054fe6125c235c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/bc377be0077136a2299c80f70bed4e2f5c1cd82b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7e8dd036-9712-4313-8a26-ccc56f7cc02e/3f82c3ad9e5010fae8956f061f054fe6125c235c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.107.204.0/24
Signature Algorithm: sha256WithRSAEncryption
44:dc:9f:31:23:f1:ba:94:73:37:f9:cd:74:01:0f:22:a4:a6:
dc:7c:aa:bd:7b:56:13:e3:41:f6:76:48:86:d7:d1:3f:2b:8d:
3c:5e:58:b2:9c:23:0b:c0:90:40:5d:b3:b8:4e:14:7a:5a:59:
14:d9:db:e3:fc:3b:d5:20:d6:fe:34:53:cb:fd:6e:1e:cd:ee:
be:9e:6a:61:45:57:81:8d:9f:be:f4:a2:70:82:e4:88:2b:1c:
29:b4:2a:30:44:56:ea:7c:de:4f:05:69:2d:6d:c7:79:d2:98:
27:e4:92:34:fb:92:2b:47:84:aa:90:05:48:e2:83:92:58:7a:
e8:44:7e:34:71:a7:82:b0:85:5c:5d:b5:1e:6b:a3:ea:69:7f:
46:e5:d3:fb:e5:57:2a:85:cf:3d:a8:68:10:c2:9e:9a:18:45:
72:ae:d8:16:29:ac:d3:ba:1e:73:89:e6:e5:90:93:20:d4:49:
ed:79:3d:5c:bf:23:4b:52:8a:b6:6b:48:28:90:30:4c:c8:e0:
05:16:90:99:e7:ce:0a:c0:9a:a8:e1:9a:52:4c:5d:6a:78:8a:
a8:01:d7:2b:48:8d:2e:ad:c6:4e:63:0e:13:91:83:e8:af:f2:
23:71:7f:15:f6:5c:60:8a:48:64:93:55:2c:ad:62:29:3e:e7:
c7:3d:bf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 22:44:54 2023 by rpki-client on console-ams.rpki-client.org