Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/9af76f2a9dfaf8e951f52f6c2466a6c78faaf15a.roa
File: 9af76f2a9dfaf8e951f52f6c2466a6c78faaf15a.roa (raw, json)
Hash identifier: jqSRTmAJn8KCMHr2j3hexqVIGyCfjR4L5eVcODrvT8c=
Subject key identifier: 99:D1:E7:3C:77:26:26:A6:15:8B:C8:C7:94:09:8A:AA:56:A4:67:CB
Certificate issuer: /CN=44c0c42f2a746ed7ed4e4598104fe194814c0771
Certificate serial: 1D89
Authority key identifier: 3A:79:35:E7:19:90:82:85:A6:E3:77:90:02:EB:0D:E1:81:C4:DC:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c0c42f2a746ed7ed4e4598104fe194814c0771.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/9af76f2a9dfaf8e951f52f6c2466a6c78faaf15a.roa
Signing time: Tue 19 Apr 2022 20:06:02 +0000
ROA not before: Tue 19 Apr 2022 03:00:00 +0000
ROA not after: Fri 19 Apr 2024 03:00:00 +0000
asID: 270027
IP address blocks: 200.233.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7561 (0x1d89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0c42f2a746ed7ed4e4598104fe194814c0771
Validity
Not Before: Apr 19 03:00:00 2022 GMT
Not After : Apr 19 03:00:00 2024 GMT
Subject: CN=9af76f2a9dfaf8e951f52f6c2466a6c78faaf15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:ac:90:22:a7:63:65:c7:1c:b2:89:8e:1f:
12:0e:a2:8c:ad:4b:2e:b2:92:30:18:33:79:2d:99:
2a:5a:11:28:b3:4d:95:d8:57:69:09:ad:73:d3:b5:
c3:db:4a:58:99:4f:8b:90:ad:3a:40:49:d0:01:bc:
d8:95:dc:af:00:cb:25:9e:de:db:68:f0:f2:c8:fe:
21:11:4c:7b:9e:31:e1:1e:e4:60:15:8a:f8:dc:01:
2c:f0:a9:ed:78:73:95:98:76:d1:4d:d8:a7:3b:69:
8e:bd:c6:1e:89:9c:0c:c7:26:5c:aa:86:17:8c:bb:
fe:4a:1f:0b:5e:33:b1:4b:a5:12:fb:17:37:50:3c:
ee:68:f9:ff:dd:02:c5:51:8f:c4:94:7c:6e:cf:34:
c0:cd:ab:7e:bb:b6:0d:45:b7:56:72:15:ad:72:6c:
22:de:36:7c:fd:24:13:a0:31:7b:4b:7c:22:5a:de:
82:11:52:d7:d8:a9:53:55:7e:8c:2e:21:dd:94:9b:
1e:1b:a3:39:4e:08:7b:f0:0d:b9:44:39:de:23:60:
a7:c2:22:a3:09:75:6e:bc:53:18:b5:3a:cb:16:b7:
00:ca:75:0e:2f:61:e0:4b:84:4e:c8:c1:5c:33:37:
c4:50:0b:54:c7:06:ea:11:34:e8:cb:2d:78:d4:f1:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D1:E7:3C:77:26:26:A6:15:8B:C8:C7:94:09:8A:AA:56:A4:67:CB
X509v3 Authority Key Identifier:
keyid:3A:79:35:E7:19:90:82:85:A6:E3:77:90:02:EB:0D:E1:81:C4:DC:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c0c42f2a746ed7ed4e4598104fe194814c0771.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/9af76f2a9dfaf8e951f52f6c2466a6c78faaf15a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/44c0c42f2a746ed7ed4e4598104fe194814c0771.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.233.41.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f2:0d:7e:f5:83:bd:b1:fe:6f:de:bb:fe:04:1f:91:21:bc:
c5:c7:31:cc:4a:23:d4:33:e5:4d:9e:10:55:c8:c1:a6:52:d2:
4a:4b:67:6e:ef:ad:12:7f:85:a0:7c:85:82:45:2f:d3:40:cb:
50:40:f5:5b:9f:f8:56:e0:20:32:63:26:e3:34:c9:5c:f9:11:
e1:f4:f4:1d:ba:2e:0e:5c:f6:dc:61:25:7c:86:df:1d:04:2c:
b2:04:a7:18:e2:f7:78:a0:f0:3c:7e:59:50:e7:e5:22:03:b7:
4e:24:ba:71:18:8e:bd:de:21:71:c6:50:81:e8:b7:64:ac:af:
bf:35:bf:ec:82:0f:58:b8:70:3b:de:28:02:96:31:c0:8a:a2:
3b:01:6e:b9:88:2d:84:e6:be:ef:a4:9a:57:05:f3:13:72:ba:
91:ec:1b:30:bb:ca:41:8b:87:24:f0:9a:5d:e2:1c:15:bc:c7:
4c:5e:be:d7:53:4f:12:27:80:aa:62:8c:34:21:b3:3b:d4:96:
b9:95:6b:58:ca:75:fe:6b:bf:de:1e:fa:30:4b:28:90:45:00:
bf:d4:ce:00:9b:16:63:01:4c:ef:02:5c:3c:40:8a:88:a8:81:
30:8c:bc:08:24:77:f4:5a:ab:eb:8c:8a:cb:5a:86:f8:f0:74:
8d:4b:6a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 21:42:57 2023 by rpki-client on console-ams.rpki-client.org