Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/6f6422a669ca4e34e0bc6ec20830a738d1cee5b7.roa
File: 6f6422a669ca4e34e0bc6ec20830a738d1cee5b7.roa (raw, json)
Hash identifier: 1XdtUe2eYbtJ10IZ94bwRPZGvGPs+VU0feD6B7001KU=
Subject key identifier: 9E:69:AE:7C:C4:E6:DB:03:61:17:26:91:08:6C:96:00:3B:F8:23:2C
Certificate issuer: /CN=36904f0e1d851da537ad771f7dc44fa5a2018601
Certificate serial: 0C1462
Authority key identifier: 77:CD:C0:A6:15:29:B3:A8:FC:C8:12:18:34:7E:0E:C1:AE:93:01:9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36904f0e1d851da537ad771f7dc44fa5a2018601.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/6f6422a669ca4e34e0bc6ec20830a738d1cee5b7.roa
Signing time: Fri 05 Aug 2022 16:40:33 +0000
ROA not before: Tue 04 Jan 2022 03:00:00 +0000
ROA not after: Thu 04 Jan 2024 03:00:00 +0000
asID: 52283
IP address blocks: 200.108.112.0/24 maxlen: 24
200.108.113.0/24 maxlen: 24
200.108.114.0/24 maxlen: 24
200.108.115.0/24 maxlen: 24
200.108.116.0/24 maxlen: 24
200.108.117.0/24 maxlen: 24
200.108.118.0/24 maxlen: 24
200.108.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 791650 (0xc1462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36904f0e1d851da537ad771f7dc44fa5a2018601
Validity
Not Before: Jan 4 03:00:00 2022 GMT
Not After : Jan 4 03:00:00 2024 GMT
Subject: CN=6f6422a669ca4e34e0bc6ec20830a738d1cee5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:df:a8:0d:05:8d:60:07:34:d0:56:db:fb:bf:
5d:fa:01:3c:f1:de:54:44:7c:ec:80:e1:34:b5:74:
bb:3a:e8:74:04:50:62:bf:05:5a:dd:30:66:85:11:
84:3b:0a:35:ff:0c:16:be:04:78:5f:af:8a:88:db:
3d:ac:40:a5:52:3c:d1:bf:6b:dc:52:3b:d8:2e:37:
dc:91:18:5d:68:a3:10:b4:7d:27:7f:9a:24:05:04:
a9:54:a5:a2:cc:3b:a3:e7:0d:f3:9c:63:06:6c:49:
47:4b:ad:f6:ef:ac:b8:99:f7:3c:86:25:2a:8a:2b:
d4:e7:6a:76:69:3b:4e:12:2c:23:43:68:bb:d3:d6:
db:d8:7f:52:97:5b:8e:bf:29:8b:ad:8b:42:81:b2:
8f:ca:b1:df:58:dc:1b:48:91:a7:32:7c:05:6d:e8:
80:54:e8:5c:f4:ec:4a:50:3d:82:63:f1:aa:87:2a:
08:1d:16:96:c7:8f:43:f8:48:9c:25:3e:a7:37:e9:
c9:8a:e8:7c:f0:a5:cb:d3:0a:fc:10:99:f3:16:b1:
08:8b:99:e5:2a:e7:a4:c3:a3:82:f5:5a:ca:9b:30:
cb:a6:36:17:ae:fa:87:52:a6:12:90:29:a3:00:52:
44:20:d5:06:82:60:d7:e2:93:0d:d1:af:ba:e0:3c:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:69:AE:7C:C4:E6:DB:03:61:17:26:91:08:6C:96:00:3B:F8:23:2C
X509v3 Authority Key Identifier:
keyid:77:CD:C0:A6:15:29:B3:A8:FC:C8:12:18:34:7E:0E:C1:AE:93:01:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36904f0e1d851da537ad771f7dc44fa5a2018601.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/6f6422a669ca4e34e0bc6ec20830a738d1cee5b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/36904f0e1d851da537ad771f7dc44fa5a2018601.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.112.0/21
Signature Algorithm: sha256WithRSAEncryption
19:2b:c2:d5:db:4d:8d:45:77:71:c9:94:32:7a:07:ef:8d:05:
92:11:ae:a6:70:2b:28:a6:1a:d1:83:ea:1f:0a:f6:e6:b6:84:
48:37:33:67:3f:29:9a:4b:bf:83:f3:43:00:28:e9:40:6d:fb:
4b:d7:76:f1:e7:41:1e:df:50:30:54:f4:77:7c:bf:5c:64:ee:
59:64:52:47:f9:58:b7:15:fd:eb:52:e1:4a:89:19:54:13:57:
21:2f:52:6c:2d:4d:06:ba:df:e4:cc:98:e8:de:93:1d:ee:79:
c5:7c:7c:66:8e:5c:2f:9e:32:f7:0a:00:5d:35:81:d1:62:f5:
39:a2:2a:bf:12:5b:2d:6d:91:45:ef:16:dc:a2:93:59:a7:a7:
be:6b:99:88:cd:5b:fa:ed:59:71:b2:b3:fb:ca:9c:f9:46:2d:
bb:53:cc:c8:15:d0:c7:8e:13:fe:01:1f:65:4a:1e:26:36:ac:
61:a2:26:9a:03:77:58:c8:6d:54:d1:bd:36:b3:b1:7d:2b:2c:
8b:5b:90:0c:e4:e2:d7:45:d3:89:6a:aa:3b:7c:f8:af:31:b9:
0b:29:f7:91:35:30:b6:14:9a:df:84:5f:15:8a:91:d5:c8:f9:
49:5b:4d:82:3c:77:d3:b7:32:a6:26:e4:fc:65:94:44:fb:1b:
e7:44:18:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 10:22:44 2024 by rpki-client on console-ams.rpki-client.org