Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/fafaf024df608da815ed7450e1bba01f14fe871b.roa
File: fafaf024df608da815ed7450e1bba01f14fe871b.roa (raw, json)
Hash identifier: kMsEKZKBIMJcEZhiIgyC843uaYC8KQw0qilUw04hc08=
Subject key identifier: 96:C8:CA:E0:B4:09:0C:DD:CC:CD:82:65:6F:88:60:3A:34:77:AB:53
Certificate issuer: /CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Certificate serial: 040D
Authority key identifier: 8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/fafaf024df608da815ed7450e1bba01f14fe871b.roa
Signing time: Thu 27 Jan 2022 12:53:26 +0000
ROA not before: Thu 27 Jan 2022 03:00:00 +0000
ROA not after: Sat 27 Jan 2024 03:00:00 +0000
asID: 11315
IP address blocks: 186.100.0.0/16 maxlen: 24
200.49.192.0/19 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 07:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1037 (0x40d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Validity
Not Before: Jan 27 03:00:00 2022 GMT
Not After : Jan 27 03:00:00 2024 GMT
Subject: CN=fafaf024df608da815ed7450e1bba01f14fe871b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:04:49:a1:cd:0d:f4:30:8b:b3:99:9a:ea:
6d:7f:a8:7f:37:ea:da:9f:c1:01:09:a8:db:f3:ca:
a2:6c:b0:97:23:cc:35:ef:1b:1f:d2:bb:89:63:8c:
f4:5c:ae:61:7e:a0:a6:36:aa:43:fb:91:da:11:83:
4b:ac:8f:04:fb:a0:25:e0:86:71:9c:47:af:3c:77:
d3:a1:da:42:f1:d0:e0:b3:3c:b2:ff:f5:03:d9:92:
06:70:d2:30:fe:22:a0:5b:e8:14:ff:57:83:a6:58:
9f:3f:1b:ac:90:c4:ca:82:a4:c7:7b:73:ba:95:d1:
82:dd:fb:de:ef:b3:ce:ad:4c:07:59:48:71:cc:54:
c0:38:39:2c:cf:87:23:7f:60:bf:cf:f7:03:bf:20:
e1:92:9c:d7:ba:35:17:4a:19:e1:48:88:3c:2d:34:
ef:79:a4:cd:fc:a2:3d:ed:0a:66:50:90:0f:81:02:
58:7e:3b:96:69:e0:94:ae:8d:a5:3f:9d:06:d4:40:
4c:f3:e4:c2:bb:85:a4:45:a0:e4:d1:84:99:6c:62:
78:a8:9d:0d:a2:02:a6:37:24:11:1d:f4:47:13:9b:
f5:fe:0f:9e:64:8c:1e:4e:19:b4:16:ee:84:15:f3:
53:c1:d2:c3:d5:64:f3:d0:33:bf:29:d2:fb:82:a6:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C8:CA:E0:B4:09:0C:DD:CC:CD:82:65:6F:88:60:3A:34:77:AB:53
X509v3 Authority Key Identifier:
keyid:8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/fafaf024df608da815ed7450e1bba01f14fe871b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.100.0.0/16
200.49.192.0/19
Signature Algorithm: sha256WithRSAEncryption
7f:89:af:2e:69:c7:d6:a7:09:60:c8:e7:cc:2d:1f:e8:a7:2e:
b1:1a:0b:43:c2:38:2d:53:a1:1f:51:24:cd:bb:51:a9:84:c4:
e7:70:93:81:d9:6f:4e:6b:f0:37:30:7b:61:26:f0:6d:aa:06:
1c:2d:6f:3c:2a:57:a8:9f:c4:49:09:ae:1f:01:2e:06:92:27:
81:ae:c2:f6:4d:10:64:0a:bf:6e:83:7d:f2:cf:b6:dd:6a:75:
72:6c:1f:1d:59:84:ec:b3:69:30:80:2a:dd:ba:d8:fa:42:0a:
65:3b:b2:32:6d:f0:cc:fb:05:0b:48:71:6f:74:12:fc:4c:9b:
67:57:78:f7:36:55:08:cf:f9:06:80:66:d1:23:a8:b1:f3:6d:
f4:42:a6:77:f6:e4:ac:ae:7a:98:7f:85:c8:1b:a7:1c:8b:65:
68:6d:2d:af:77:3c:41:7f:e1:93:3e:c1:0d:5c:54:36:35:24:
41:15:3b:73:f0:04:fb:75:60:6e:30:47:75:96:f3:85:3e:67:
d6:c4:ae:47:d4:1c:0e:d1:cc:9c:b3:06:9b:d3:0e:76:8f:92:
07:f9:3e:03:df:54:9a:eb:c8:21:1c:f8:f6:e0:55:53:2c:aa:
88:f7:44:28:85:6e:35:d4:27:2e:93:a4:90:e7:1f:8c:9b:a5:
8b:f1:17:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 10:11:27 2024 by rpki-client on console-fra.rpki-client.org