Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/e7a9743aa1d82b695fda51150a9526b413fdb94c.roa
File: e7a9743aa1d82b695fda51150a9526b413fdb94c.roa (raw, json)
Hash identifier: zl83ddhN96DRv1Av1L+Ue/npvML0V1aszpsUju8R8kI=
Subject key identifier: 72:B4:06:4C:42:D0:EB:C1:65:28:71:D0:A3:31:FB:88:90:EA:40:8D
Certificate issuer: /CN=36904f0e1d851da537ad771f7dc44fa5a2018601
Certificate serial: 06E341
Authority key identifier: 77:CD:C0:A6:15:29:B3:A8:FC:C8:12:18:34:7E:0E:C1:AE:93:01:9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36904f0e1d851da537ad771f7dc44fa5a2018601.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/e7a9743aa1d82b695fda51150a9526b413fdb94c.roa
Signing time: Wed 05 Jan 2022 20:23:59 +0000
ROA not before: Tue 04 Jan 2022 03:00:00 +0000
ROA not after: Thu 04 Jan 2024 03:00:00 +0000
asID: 52283
IP address blocks: 200.108.112.0/24 maxlen: 24
200.108.113.0/24 maxlen: 24
200.108.114.0/23 maxlen: 24
200.108.115.0/24 maxlen: 24
200.108.116.0/22 maxlen: 24
200.108.117.0/24 maxlen: 24
200.108.118.0/24 maxlen: 24
200.108.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451393 (0x6e341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36904f0e1d851da537ad771f7dc44fa5a2018601
Validity
Not Before: Jan 4 03:00:00 2022 GMT
Not After : Jan 4 03:00:00 2024 GMT
Subject: CN=e7a9743aa1d82b695fda51150a9526b413fdb94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e4:e5:35:2c:82:fe:9f:4f:fa:70:69:71:3e:
cb:e1:bf:ca:e1:9b:3a:3e:03:5a:35:18:7c:f3:67:
44:7d:a2:b0:73:ac:a2:e9:2f:78:69:38:3a:e9:88:
60:93:f9:c7:d4:3f:18:78:9f:ef:0b:90:97:c9:e0:
6b:39:c4:9d:58:d2:b5:db:ac:e9:de:80:50:a1:51:
b1:48:c5:9b:3e:e4:a8:73:cd:0c:86:24:6e:ff:7f:
56:b7:ed:f9:10:5d:2a:7a:b5:64:75:4d:e7:c6:f7:
22:e5:3d:e7:8c:89:68:28:4e:25:bf:84:26:62:76:
b8:d0:9f:4c:27:ef:4e:93:77:b3:87:e3:fd:be:07:
36:ac:39:02:ae:3d:08:6a:1d:5b:c0:e5:6a:a2:d6:
69:eb:0d:00:cf:40:0e:14:b9:43:5d:ba:bc:ca:06:
ff:ef:e5:70:1f:36:4b:bd:09:32:1f:0a:29:f1:0c:
ce:3a:79:73:13:11:c5:7c:00:5c:79:99:d8:b3:b1:
d3:b8:0f:99:3b:65:1c:19:f6:86:1e:8f:21:09:c3:
6a:d5:34:c8:ba:5a:a3:6f:a2:84:d6:81:e2:a8:e6:
41:40:39:2e:af:e7:a9:89:b9:8a:4c:74:02:e8:f3:
6f:47:26:44:b2:dc:9a:b7:06:cc:cc:90:08:87:67:
d5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:06:4C:42:D0:EB:C1:65:28:71:D0:A3:31:FB:88:90:EA:40:8D
X509v3 Authority Key Identifier:
keyid:77:CD:C0:A6:15:29:B3:A8:FC:C8:12:18:34:7E:0E:C1:AE:93:01:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36904f0e1d851da537ad771f7dc44fa5a2018601.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/e7a9743aa1d82b695fda51150a9526b413fdb94c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/36904f0e1d851da537ad771f7dc44fa5a2018601.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.112.0/21
Signature Algorithm: sha256WithRSAEncryption
71:41:da:bd:85:5d:12:14:b2:37:25:d7:ee:86:25:d8:eb:d3:
6f:c0:cc:98:1f:16:86:e5:d2:a5:23:e0:fe:60:33:90:c1:e5:
90:92:c8:5b:b4:c2:74:8d:f3:d1:18:fc:c4:79:78:07:68:5d:
60:ee:37:4a:cf:1c:73:2e:72:72:a7:7e:fa:52:5e:98:52:c9:
47:31:22:9d:50:d3:d1:29:63:9d:e8:46:8f:1a:eb:a0:0c:09:
9d:b4:04:a5:72:02:23:2b:e0:39:16:a3:04:98:37:eb:73:f7:
8e:a4:9f:e6:48:3d:8c:35:b6:20:2f:02:97:49:11:3b:28:b0:
a6:fc:3e:a7:65:e7:3e:a2:48:0f:00:b8:e0:68:f8:29:41:a9:
eb:e4:d1:8d:a8:b4:43:b0:d7:6a:54:b7:8a:9f:57:09:1b:98:
87:ba:5c:83:86:3a:4c:4e:d1:52:c9:13:09:cf:57:cf:2d:2d:
d1:75:27:93:28:95:ce:84:29:65:cb:79:c0:1a:3f:2d:da:ea:
a0:5b:5b:6d:b6:3f:07:0b:65:cb:91:34:fe:22:a6:28:5c:a4:
7c:34:45:1d:c5:a4:79:ce:5b:dc:2c:bb:e2:bc:2b:74:a8:fa:
5a:a5:27:ee:a4:f3:79:e7:92:90:d1:3d:a6:0e:91:14:bd:df:
70:9d:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-fra.rpki-client.org