Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/3f304c4f32fc38834c5dee98d71fb8a3476835a4.roa
File: 3f304c4f32fc38834c5dee98d71fb8a3476835a4.roa (raw, json)
Hash identifier: n4h2GSMunp5pS96nZ2o4R+kpyCKDVz7d9YQd1J7pAXY=
Subject key identifier: DE:AD:A0:7B:88:36:31:9D:AF:0F:BD:A7:67:20:FD:9A:B7:66:4F:D7
Certificate issuer: /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial: 11DED5
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/3f304c4f32fc38834c5dee98d71fb8a3476835a4.roa
Signing time: Wed 05 Jul 2023 13:12:29 +0000
ROA not before: Tue 04 Jul 2023 13:12:29 +0000
ROA not after: Sat 05 Jul 2025 13:12:29 +0000
asID: 61317
IP address blocks: 200.26.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1171157 (0x11ded5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
Validity
Not Before: Jul 4 13:12:29 2023 GMT
Not After : Jul 5 13:12:29 2025 GMT
Subject: CN=3f304c4f32fc38834c5dee98d71fb8a3476835a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:34:2c:81:44:b6:9f:72:ed:03:ee:34:d4:
92:26:42:89:38:d9:95:e3:1d:57:70:26:c1:68:5a:
3d:b6:16:22:8d:3e:cb:d9:fe:c6:fc:50:0c:5a:e1:
5a:12:dc:a0:b1:a9:79:07:38:2b:a3:1c:5b:8f:bf:
2f:77:e8:97:43:e9:89:44:ee:9e:ee:dd:c4:e1:f3:
a0:32:a9:ed:62:8b:56:82:3a:a6:20:68:b0:79:15:
cb:42:82:15:75:bb:73:b7:18:69:16:12:ee:f6:9f:
dd:a3:41:f6:52:18:cd:c6:87:0f:01:e6:23:95:40:
53:ca:b6:e6:d9:57:41:69:c4:f0:5b:20:00:89:5f:
b1:81:f5:59:35:41:9b:60:35:eb:37:b3:00:1c:31:
d7:d3:b4:77:16:7b:58:70:78:98:aa:d9:36:42:63:
c3:d6:05:46:39:9f:a9:9f:dc:97:41:ec:c6:5b:d3:
29:98:0d:e3:61:10:6e:fa:86:30:42:2a:10:0f:8c:
d8:38:ea:27:74:37:bc:be:bd:3e:43:bc:8f:54:83:
2c:f9:b1:7b:3c:25:5f:f4:08:fc:96:e2:d2:90:52:
54:cc:0c:c5:c1:c6:60:ed:82:18:4e:40:9a:84:8b:
b1:ee:0c:e9:5b:30:4a:f4:af:1d:fe:9c:29:78:de:
ec:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AD:A0:7B:88:36:31:9D:AF:0F:BD:A7:67:20:FD:9A:B7:66:4F:D7
X509v3 Authority Key Identifier:
keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/3f304c4f32fc38834c5dee98d71fb8a3476835a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.26.185.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:26:0c:b3:ee:9d:4e:d9:4d:c3:fd:74:1b:0f:8a:0f:e0:1a:
f1:7b:83:06:b3:9d:ed:3a:3d:e3:53:87:39:9e:6a:d4:d7:38:
88:04:c8:4e:fd:19:9c:6b:ef:a0:71:e3:aa:92:21:31:b8:f5:
be:89:98:0e:f6:98:a1:79:9f:fe:d9:6d:c8:ec:ad:1b:7d:2a:
ac:9a:ee:e0:51:38:cb:76:78:ea:86:e4:ee:71:c8:7e:51:bf:
ff:a2:be:04:a6:32:93:82:a9:ea:d0:db:2d:6b:ab:9c:a7:c8:
95:17:1b:2c:cf:1e:d2:a3:9e:1c:c3:9e:7d:4b:f4:b1:cb:ef:
df:4a:3f:bc:1e:d2:02:89:dc:8a:2d:5e:55:43:61:bc:bc:24:
62:88:e6:7f:d8:ec:5b:24:49:48:e0:88:34:1c:5c:30:2b:ca:
cb:b1:e4:fc:cc:23:47:51:2f:81:77:2c:53:47:7a:57:c7:1c:
5e:38:72:2e:80:4f:1a:3b:06:e1:5a:f7:60:2f:f8:4f:a6:bf:
a6:61:3d:4d:44:ed:3f:6e:a7:25:c1:ef:6e:5b:96:8c:ba:8e:
66:0d:d9:4d:48:c5:26:02:b7:14:0f:f6:0b:81:a7:b3:08:b7:
bc:b9:da:03:37:6d:6f:6d:de:43:0f:06:5a:5d:cb:8f:f5:9c:
1a:7c:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 12:22:30 2023 by rpki-client on console-fra.rpki-client.org