Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/83baaca1ccaeb241ee7c47a9a906454619dec733.roa
File: 83baaca1ccaeb241ee7c47a9a906454619dec733.roa (raw, json)
Hash identifier: bER+K2tRMUh7YoR0x2aiUaG6Hnm/WxGThT4Ib2K7VTw=
Subject key identifier: B3:F3:D6:C5:A1:BE:3B:46:A8:26:CA:18:02:44:C0:19:65:3B:73:84
Certificate issuer: /CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
Certificate serial: 0DE43C
Authority key identifier: A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/83baaca1ccaeb241ee7c47a9a906454619dec733.roa
Signing time: Wed 24 Mar 2021 14:37:26 +0000
ROA not before: Wed 24 Mar 2021 14:37:25 +0000
ROA not after: Tue 24 Mar 2026 14:37:25 +0000
asID: 52468
IP address blocks: 200.229.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910396 (0xde43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
Validity
Not Before: Mar 24 14:37:25 2021 GMT
Not After : Mar 24 14:37:25 2026 GMT
Subject: CN=83baaca1ccaeb241ee7c47a9a906454619dec733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:1b:c6:73:5a:33:59:c2:48:32:b7:61:89:
07:87:b8:6e:ff:2e:01:95:6e:69:0e:d0:08:74:e6:
9c:3c:8a:38:95:43:f5:7f:30:20:ea:fa:79:16:ae:
6f:51:f6:6d:47:38:16:2d:04:72:8c:ee:63:76:f6:
9d:8d:ea:74:8b:a3:2f:14:78:9a:a7:13:fb:cb:9a:
a3:f7:fd:74:77:a4:e7:4c:ee:c9:e8:e1:ac:2d:e1:
8d:d2:25:b5:40:0e:cb:86:31:fc:ff:15:7d:c9:c0:
49:74:81:49:77:0c:95:20:1c:e1:18:3a:5e:68:a1:
3c:e5:08:f0:56:00:67:20:91:dd:8e:dc:b3:0f:eb:
48:ff:f7:16:7d:26:c0:8e:e7:54:ef:48:10:48:03:
4e:19:5f:0c:7e:00:cd:c1:db:b3:76:a6:7f:c5:0f:
66:5e:23:ec:5d:ce:46:2a:64:3d:2b:e7:ba:2b:d5:
d3:f5:71:5f:1e:ab:96:fd:e5:90:d0:c0:fd:98:1e:
6d:f5:23:49:59:6b:49:51:27:78:77:74:4a:3f:88:
45:86:c1:70:15:05:d5:82:70:3b:86:47:93:c5:9a:
c6:06:55:3e:4a:bc:06:ff:79:bf:de:5a:e9:3c:e5:
6e:e8:7e:bc:a9:99:d4:4a:87:b0:e3:d1:61:a6:6c:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F3:D6:C5:A1:BE:3B:46:A8:26:CA:18:02:44:C0:19:65:3B:73:84
X509v3 Authority Key Identifier:
keyid:A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/83baaca1ccaeb241ee7c47a9a906454619dec733.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.144.0/24
Signature Algorithm: sha256WithRSAEncryption
48:aa:9f:51:45:4b:e7:e2:c1:86:67:ff:13:04:85:7d:14:62:
1b:68:af:33:07:7c:a5:86:62:9e:ce:ad:ab:dc:ac:85:26:27:
65:77:77:bb:9e:28:f0:03:8d:97:15:42:8f:90:59:b8:7d:fd:
55:b5:ee:9d:5f:15:d3:5b:3c:e6:98:0d:dc:2f:23:c5:6f:04:
b8:da:ce:7e:26:ec:09:98:bc:7e:6e:6e:68:6b:c6:9a:b7:39:
20:b5:27:1c:3f:06:b2:c2:72:d7:19:34:35:e5:ec:ee:9b:6e:
33:c0:8e:5c:28:b4:04:cb:e8:4e:3f:10:6e:72:31:3a:ce:07:
1e:d8:72:a4:33:84:56:d4:75:f9:8e:d4:bf:e5:39:3b:6c:02:
87:05:2b:37:eb:22:6d:0e:5d:c7:3b:ee:3b:f9:df:8f:37:c2:
b9:96:dd:86:c6:3a:16:80:41:44:a1:c7:c1:66:4c:60:42:41:
54:a9:8c:81:7d:b1:ad:5f:fa:eb:74:f3:60:5c:a9:95:3d:5f:
94:8f:77:a6:01:9d:69:5a:c7:24:fb:88:ee:b0:0c:3d:38:b0:
43:84:23:f4:f3:0c:7f:98:11:ff:23:03:3c:c7:a3:a2:42:24:
71:e6:f8:41:cb:37:b3:7d:4a:97:55:7a:29:fe:e8:07:d2:bd:
a6:cb:fd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org