Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/7920c63710635654e8338891cdfc5b4e63ad7abc.roa
File: 7920c63710635654e8338891cdfc5b4e63ad7abc.roa (raw, json)
Hash identifier: tgJauzlE8oPHa9jmSCjapl6185hDjNyKNwy0/tilens=
Subject key identifier: AB:78:EE:3C:D3:3F:08:86:0A:4C:77:E2:80:91:06:98:30:0D:85:31
Certificate issuer: /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial: 1A28
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/7920c63710635654e8338891cdfc5b4e63ad7abc.roa
Signing time: Wed 21 Sep 2022 20:50:33 +0000
ROA not before: Wed 21 Sep 2022 20:48:46 +0000
ROA not after: Sat 21 Sep 2024 20:48:46 +0000
asID: 8163
IP address blocks: 200.89.96.0/24 maxlen: 24
200.89.97.0/24 maxlen: 24
200.89.98.0/24 maxlen: 24
200.89.99.0/24 maxlen: 24
200.89.101.0/24 maxlen: 24
200.89.102.0/24 maxlen: 24
200.89.103.0/24 maxlen: 24
200.89.104.0/24 maxlen: 24
200.89.105.0/24 maxlen: 24
200.89.106.0/24 maxlen: 24
200.89.107.0/24 maxlen: 24
200.89.108.0/24 maxlen: 24
200.89.109.0/24 maxlen: 24
200.89.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6696 (0x1a28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Validity
Not Before: Sep 21 20:48:46 2022 GMT
Not After : Sep 21 20:48:46 2024 GMT
Subject: CN=7920c63710635654e8338891cdfc5b4e63ad7abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:21:52:e2:9b:71:90:25:77:c7:d4:7f:98:
f3:02:a9:d1:84:0a:03:51:70:3b:91:a0:27:0b:31:
bc:7c:1d:f0:0d:29:a6:bc:eb:e6:d4:26:15:8a:42:
b0:12:73:3c:cc:44:07:e3:c4:05:b4:8e:ce:cb:ca:
46:05:a2:92:67:0f:4f:39:c1:5a:7d:db:75:02:05:
c9:94:b8:ea:98:8d:bb:d4:75:29:37:eb:8b:5a:6b:
29:17:a4:c0:07:83:ec:19:3a:ce:c1:67:a4:e6:bb:
9c:39:8d:24:a2:65:69:9e:f5:f0:9e:a7:71:b2:93:
b0:7d:dc:8b:fa:3d:2c:cb:88:64:89:83:f8:57:ce:
9f:af:c3:ec:ec:ec:d6:3a:be:5e:42:15:97:54:92:
9a:42:79:8e:36:21:6c:69:36:2d:f6:7b:9d:1b:7f:
7b:f4:be:d1:99:43:61:66:07:25:f5:0a:5f:08:a5:
f9:50:24:f6:ff:bf:ee:f7:2f:c3:b7:01:c2:16:a4:
1c:2d:31:1c:a6:e5:c9:07:44:87:f7:bf:7f:e3:d5:
54:cc:cb:6c:dc:21:86:73:8c:da:ef:ca:ff:9a:2f:
b0:45:d1:77:91:a3:71:51:08:ad:8d:52:c1:4c:da:
38:ac:63:c6:fd:31:99:51:9f:95:73:ac:46:0e:1d:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:78:EE:3C:D3:3F:08:86:0A:4C:77:E2:80:91:06:98:30:0D:85:31
X509v3 Authority Key Identifier:
keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/7920c63710635654e8338891cdfc5b4e63ad7abc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.89.96.0/22
200.89.101.0-200.89.110.255
Signature Algorithm: sha256WithRSAEncryption
77:4a:ce:ca:11:67:c3:2e:f8:17:b4:24:cd:8d:6d:33:b5:11:
85:f4:3e:09:c6:d5:07:fc:90:5d:09:9b:c0:4b:3d:d2:5d:ee:
d8:f2:61:fd:14:84:a6:00:0e:8a:bd:b0:ff:f3:e3:35:0b:20:
49:4f:82:10:f0:75:30:65:dd:f1:02:c6:bf:fb:bc:44:21:98:
92:7e:ae:74:b3:58:8e:d9:99:f3:37:0d:b5:d7:19:95:69:c9:
b7:74:3c:cc:af:30:e7:d7:97:55:fd:dc:95:dd:38:47:c9:d8:
1a:ac:33:e1:e7:d5:a8:67:0b:5a:cd:fe:28:ab:be:89:b7:bc:
93:7d:21:ae:c3:0e:27:c9:f2:0c:3e:93:22:68:c4:4d:1a:51:
ff:1d:5e:0f:d3:44:00:bf:19:0a:fb:62:b2:ec:60:2d:ee:f2:
7e:40:71:f8:c3:56:35:89:f1:1e:9c:dd:4e:03:79:48:e8:fd:
4b:18:6c:81:ba:25:a3:fb:98:e7:6a:5b:e3:f3:f0:e3:0c:94:
d7:18:2f:77:95:86:29:7c:b4:45:02:35:1e:0f:c9:2d:4d:4e:
55:58:6a:68:45:04:ac:e6:0e:0e:00:e1:d9:4c:ef:9a:2c:e3:
1a:f7:37:c1:47:58:f8:8a:f7:67:be:88:3e:27:7f:a8:71:94:
8b:e6:e8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org