Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ab8d2f9f-a83d-457c-8023-ba9fc483b7f7/95cfab34bcdeabaf5ee38bc8e7eda162788a37f4.roa
File: 95cfab34bcdeabaf5ee38bc8e7eda162788a37f4.roa (raw, json)
Hash identifier: L+g1jdkAlaAkPujBexnkbX6ro6xFnccB4MEu1Al2xPg=
Subject key identifier: E9:E1:85:F5:B3:D9:D1:72:26:9A:D3:DB:3B:62:04:4E:55:12:86:25
Certificate issuer: /CN=cdc3a1d7964d31e604c144ed17901836bf736fd3
Certificate serial: 0253
Authority key identifier: 12:75:E4:BD:74:8E:75:0A:FB:32:39:82:3F:20:0D:A6:4F:9C:BD:C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdc3a1d7964d31e604c144ed17901836bf736fd3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ab8d2f9f-a83d-457c-8023-ba9fc483b7f7/95cfab34bcdeabaf5ee38bc8e7eda162788a37f4.roa
Signing time: Thu 21 Jul 2022 19:48:57 +0000
ROA not before: Thu 21 Jul 2022 03:00:00 +0000
ROA not after: Sun 21 Jul 2024 03:00:00 +0000
asID: 264671
IP address blocks: 200.9.97.0/24 maxlen: 24
200.9.98.0/23 maxlen: 23
200.9.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc3a1d7964d31e604c144ed17901836bf736fd3
Validity
Not Before: Jul 21 03:00:00 2022 GMT
Not After : Jul 21 03:00:00 2024 GMT
Subject: CN=95cfab34bcdeabaf5ee38bc8e7eda162788a37f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:43:2b:ac:1a:75:99:69:45:68:3c:0e:6c:
70:9c:3c:33:38:7d:89:f0:a6:cb:86:eb:ba:d3:ec:
45:d0:f8:bd:3d:24:4b:cf:bf:36:fc:1a:e2:63:d3:
ec:73:96:cb:59:83:48:95:c0:08:91:f5:f1:17:89:
ab:af:5e:bb:66:f5:3a:a6:6c:ba:30:ec:42:4f:2f:
08:54:13:60:96:88:19:5a:3a:bf:7a:7d:a8:09:2a:
2e:2e:67:17:d2:8a:d1:7f:1b:18:a1:d0:55:c3:05:
19:40:e5:21:b0:f6:71:1d:ad:e3:a7:7d:b1:8f:3c:
89:f4:a2:9e:39:ea:7b:b3:30:78:7a:29:d1:1f:55:
d4:06:fa:e5:61:e2:9d:63:74:57:27:96:a7:98:21:
08:1a:bd:2d:6d:57:b8:18:c5:e2:97:dc:2a:55:81:
5c:d0:97:e2:03:f8:14:6a:5e:a9:c6:95:be:9e:c3:
2f:7d:7d:53:91:62:6f:eb:46:8e:89:7e:04:80:98:
1e:64:8e:52:22:1d:88:e0:48:6c:ad:e6:04:e7:14:
e7:1c:4e:cb:63:03:f9:fc:5b:22:c8:bb:ce:1f:89:
4b:29:f1:70:20:75:ad:74:90:f1:a8:23:34:3b:c6:
25:01:e9:a3:dc:8d:24:81:24:b7:c0:dc:51:cc:32:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E1:85:F5:B3:D9:D1:72:26:9A:D3:DB:3B:62:04:4E:55:12:86:25
X509v3 Authority Key Identifier:
keyid:12:75:E4:BD:74:8E:75:0A:FB:32:39:82:3F:20:0D:A6:4F:9C:BD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdc3a1d7964d31e604c144ed17901836bf736fd3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ab8d2f9f-a83d-457c-8023-ba9fc483b7f7/95cfab34bcdeabaf5ee38bc8e7eda162788a37f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ab8d2f9f-a83d-457c-8023-ba9fc483b7f7/cdc3a1d7964d31e604c144ed17901836bf736fd3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.97.0-200.9.100.255
Signature Algorithm: sha256WithRSAEncryption
38:c2:90:2a:76:99:b8:90:78:f2:8a:0c:18:e4:9d:09:c0:65:
a8:6a:6c:08:42:03:52:c4:c6:f4:d0:a8:f4:84:84:96:e9:bc:
a0:de:30:a8:de:34:a2:df:84:a1:75:b4:2f:77:bf:19:48:80:
7c:6a:2e:0c:14:1a:33:14:55:1f:76:bf:34:45:89:22:51:a2:
3c:69:dc:e5:c4:aa:39:c5:22:de:7d:73:3c:a1:ec:4a:a3:8f:
38:0d:f4:fd:ec:34:a2:8d:d5:49:0b:19:2c:ed:8e:a2:60:19:
da:ac:51:40:d0:be:a6:d4:f6:dd:05:f3:47:dd:80:e2:d0:3e:
ee:6f:64:b1:97:55:9e:45:fd:b1:18:69:63:e2:19:ec:34:e3:
c5:37:a8:7a:c7:b6:4b:47:79:a3:ad:f6:48:93:ac:f7:f4:24:
78:c1:42:b4:da:3a:ee:5b:0b:89:2b:c4:8b:c9:b8:de:8b:a6:
ad:04:78:42:8a:63:7d:da:17:20:28:63:73:58:da:8f:bf:bc:
4c:cd:ca:bc:b3:b8:53:3b:2d:07:ab:25:3e:c9:ff:9c:db:a1:
ee:e9:da:a4:dd:ed:15:37:45:59:1c:f6:71:40:cd:8b:fa:f7:
98:f5:38:a5:01:c1:bd:95:66:d2:d7:e8:d6:c1:ce:7d:8b:23:
de:0b:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org