Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f737152-27d8-48df-b2de-038c747dd786/a1c63a5d625843f3b1beabaa4b6e7298b78a89a7.roa
File: a1c63a5d625843f3b1beabaa4b6e7298b78a89a7.roa (raw, json)
Hash identifier: /Q2azSbGgnFJ3WKOS9j7XaCQxiDC+y/zdesCnseKhx8=
Subject key identifier: 54:2E:D2:2B:BD:47:79:AE:AD:A1:C0:5C:ED:53:06:D7:1C:A7:DB:D0
Certificate issuer: /CN=ddc87dab64fa190dbee15f240971902c2972f198
Certificate serial: 0AF9C7
Authority key identifier: AA:8E:D4:43:9E:18:23:59:0C:8A:9E:73:4F:29:4A:4B:82:9D:7B:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ddc87dab64fa190dbee15f240971902c2972f198.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9f737152-27d8-48df-b2de-038c747dd786/a1c63a5d625843f3b1beabaa4b6e7298b78a89a7.roa
Signing time: Wed 24 Mar 2021 14:33:07 +0000
ROA not before: Wed 24 Mar 2021 14:33:07 +0000
ROA not after: Tue 24 Mar 2026 14:33:07 +0000
asID: 64113
IP address blocks: 200.10.167.0/24 maxlen: 24
200.10.168.0/22 maxlen: 24
200.10.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719303 (0xaf9c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc87dab64fa190dbee15f240971902c2972f198
Validity
Not Before: Mar 24 14:33:07 2021 GMT
Not After : Mar 24 14:33:07 2026 GMT
Subject: CN=a1c63a5d625843f3b1beabaa4b6e7298b78a89a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:e1:16:b7:dc:6e:ac:1a:4d:4d:57:22:ac:
cd:c9:46:ea:7e:92:b8:5d:0e:a2:9b:1a:24:2f:c4:
6d:f8:32:09:51:a5:d8:3b:61:7d:76:b7:fc:a9:d0:
73:fb:7c:ad:cc:ff:bc:1d:88:8b:58:b1:e5:3c:7e:
1f:af:04:34:79:4d:a6:25:17:40:f4:50:36:cc:a2:
b6:31:a6:70:68:ba:69:87:4a:e8:72:14:a9:27:be:
17:25:84:e6:cc:4b:05:9f:69:fe:20:ec:a6:90:28:
ce:4d:5e:8b:c3:2f:c9:4c:d2:04:db:e4:84:be:30:
7a:17:b5:b0:6c:93:b2:e8:e0:18:9c:68:73:0f:cf:
e7:ab:2b:0a:4b:1b:20:6b:56:8a:ad:fb:67:6f:58:
e8:c5:3c:24:ef:9f:23:9f:ce:48:95:c0:85:c6:18:
27:52:ab:12:fe:a3:c0:98:06:ac:fd:0b:6b:8a:28:
e6:d4:97:62:a8:73:4b:e1:c2:15:c2:ed:4c:92:d2:
7a:6b:cf:ff:c7:09:d2:f3:f7:d8:a1:12:96:48:be:
ac:d8:70:c1:69:3a:cc:c5:c7:99:59:b0:18:3f:98:
92:48:b2:08:e4:69:bc:ca:a5:62:ad:d4:5d:fa:2e:
73:f5:53:a6:dd:d6:c0:18:d1:f1:a5:1f:6e:2c:6f:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2E:D2:2B:BD:47:79:AE:AD:A1:C0:5C:ED:53:06:D7:1C:A7:DB:D0
X509v3 Authority Key Identifier:
keyid:AA:8E:D4:43:9E:18:23:59:0C:8A:9E:73:4F:29:4A:4B:82:9D:7B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ddc87dab64fa190dbee15f240971902c2972f198.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f737152-27d8-48df-b2de-038c747dd786/a1c63a5d625843f3b1beabaa4b6e7298b78a89a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9f737152-27d8-48df-b2de-038c747dd786/ddc87dab64fa190dbee15f240971902c2972f198.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.167.0-200.10.172.255
Signature Algorithm: sha256WithRSAEncryption
0f:a2:1c:4a:3e:e3:52:ac:7c:71:1d:0c:00:7d:0e:21:cc:35:
e2:ca:e7:cc:2a:72:14:71:9c:e3:d6:5a:b4:d4:8e:13:c6:de:
54:ba:bd:ba:5c:b6:f8:12:19:6f:e8:ad:bc:1a:1d:d5:2f:1b:
9d:7e:c1:23:82:28:aa:6f:b0:ce:61:a4:bd:33:02:31:4b:bd:
ae:f9:3d:ae:48:b5:0e:6c:bc:e3:67:ec:56:55:d0:47:c1:2a:
6e:65:e4:e1:0d:17:35:e0:58:d3:c4:25:7f:d7:f9:4a:5c:18:
e0:ed:1e:61:63:65:47:e5:8f:e6:47:bf:1d:b0:b1:e1:3a:34:
68:8f:88:c4:49:e6:bc:e2:68:7c:ba:6f:6b:48:6b:ed:18:f7:
f4:57:dd:c4:0f:9c:6a:80:5d:8e:dd:a3:14:c3:33:df:a0:a5:
1b:75:c0:b9:c6:cd:00:2e:fa:61:4e:0b:bc:b1:5f:2a:ca:62:
7e:c5:d5:69:33:43:4b:6e:5e:a3:14:d8:88:e0:92:63:6d:fe:
f0:f2:52:aa:63:73:3a:75:d1:4f:90:fd:df:52:5c:a8:ff:fd:
0b:59:0d:c0:9c:da:d5:96:2f:d7:9e:0c:ba:60:41:59:7d:c7:
ba:5f:2b:e3:2d:36:30:2d:f5:f4:51:55:4f:4f:d8:1d:d3:c7:
2d:ec:30:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org