Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/d0bb80b42d334521ab992e19a129440f6272362c.roa
File: d0bb80b42d334521ab992e19a129440f6272362c.roa (raw, json)
Hash identifier: yOAQNloW+mmzZNwoIjxN7jaERVrSYcVhjvvK/3xu994=
Subject key identifier: 26:ED:B3:2C:CB:98:0D:3B:7B:0F:EF:FB:83:0F:7D:CA:5A:1A:D2:4C
Certificate issuer: /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial: 230BBA
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/d0bb80b42d334521ab992e19a129440f6272362c.roa
Signing time: Tue 22 Aug 2023 19:14:00 +0000
ROA not before: Mon 21 Aug 2023 19:14:00 +0000
ROA not after: Fri 22 Aug 2025 19:14:00 +0000
asID: 264806
IP address blocks: 200.31.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296762 (0x230bba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Validity
Not Before: Aug 21 19:14:00 2023 GMT
Not After : Aug 22 19:14:00 2025 GMT
Subject: CN=d0bb80b42d334521ab992e19a129440f6272362c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:16:54:f9:6e:20:44:18:e8:77:00:6a:05:b1:
6a:c6:3f:88:62:ab:17:6d:55:6d:fd:8f:2f:e6:04:
5e:cf:4a:9b:77:91:dd:f4:4e:76:76:b6:9b:4a:55:
ca:12:d8:c4:13:3f:3e:84:53:cb:72:81:63:7e:4e:
d6:63:86:11:cc:8e:b6:27:6f:9e:9f:a0:31:a1:78:
1b:92:cb:d9:b9:33:cf:f9:6f:e5:00:ee:c0:c5:58:
72:a0:e2:33:1b:0e:6f:8a:2d:b2:86:92:26:6e:08:
80:2a:9d:2d:de:d4:4d:fd:ae:a0:b2:e9:b7:03:7f:
ef:23:a6:3b:a9:99:58:0f:c2:5b:0c:58:b4:22:4a:
74:ea:44:98:50:31:e9:b1:28:be:ae:0e:2e:1b:4f:
01:3d:03:ca:9c:80:09:71:cc:2a:5c:83:4c:ce:af:
33:5e:ab:f2:17:ff:19:10:b8:19:6d:8c:c1:9e:f2:
5f:99:fc:ca:af:69:34:0a:67:e1:bc:bd:0b:cf:47:
60:62:10:b3:17:7c:a3:9a:0d:19:86:29:49:47:a1:
c8:5b:e9:4f:c5:37:4f:35:40:a1:b5:e5:10:50:64:
b5:72:01:ab:7c:e3:be:a5:38:a5:da:3d:bd:84:93:
e9:cc:c7:f2:a2:bb:a1:63:14:fd:88:51:f5:70:4c:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:ED:B3:2C:CB:98:0D:3B:7B:0F:EF:FB:83:0F:7D:CA:5A:1A:D2:4C
X509v3 Authority Key Identifier:
keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/d0bb80b42d334521ab992e19a129440f6272362c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.31.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ea:d5:c7:79:56:a6:3e:b5:3d:45:01:aa:3d:7d:43:6e:b5:
82:37:95:f2:ed:84:0c:05:d2:8e:44:ef:b1:47:07:e5:bf:da:
bf:89:42:5b:2a:78:4e:0c:8b:4b:71:61:78:40:2a:24:15:00:
9e:df:c3:d1:27:2b:d7:f3:60:0c:71:9b:f8:98:fd:84:9c:cf:
d3:d7:b4:77:c6:ee:db:77:ff:1c:73:bf:8d:c8:83:3d:ec:45:
00:91:97:90:d9:01:7a:77:a2:d8:c6:bb:37:87:66:75:45:fd:
df:a0:b0:96:e2:63:18:68:3b:f9:55:28:7e:69:3a:23:6f:a2:
8c:32:b8:7f:ab:f8:b7:7e:c4:97:42:c0:26:bb:ff:01:2a:f3:
d4:8d:bf:b3:f4:ed:d7:21:6c:f5:50:5d:18:ff:04:c1:8f:4d:
76:aa:8d:a3:03:59:39:5e:32:09:f3:3a:ee:cc:83:06:94:27:
d1:ff:4e:34:6a:0a:02:2c:05:63:1c:4b:0c:28:85:63:59:55:
33:d2:39:ff:a8:44:5b:59:7c:f8:80:98:18:5c:f5:d9:76:e9:
f4:90:af:57:28:91:b3:0e:7e:6a:30:3b:47:5f:c3:23:4b:78:
2a:b8:98:1b:25:b5:61:29:d3:e0:58:a6:57:90:79:63:5f:53:
49:ac:72:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 19:55:09 2023 by rpki-client on console-fra.rpki-client.org