Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/a913d7d4a371b44f6deee266f0a768c0ef9a382a.roa
File: a913d7d4a371b44f6deee266f0a768c0ef9a382a.roa (raw, json)
Hash identifier: Ub1MokaWj634eW36gzlzQtaVNqOc3dJlPZbH2X8Fl6c=
Subject key identifier: 96:03:DD:1C:86:0E:53:CA:85:D9:CE:AC:6B:6E:47:29:13:0A:33:1A
Certificate issuer: /CN=d407c72537519f11553c7ee9eb83baa042334380
Certificate serial: 160F3A
Authority key identifier: 44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/a913d7d4a371b44f6deee266f0a768c0ef9a382a.roa
Signing time: Sat 16 Dec 2023 12:29:27 +0000
ROA not before: Sat 16 Dec 2023 12:29:27 +0000
ROA not after: Tue 16 Dec 2025 12:29:27 +0000
asID: 834
IP address blocks: 200.26.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 15:47:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1445690 (0x160f3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d407c72537519f11553c7ee9eb83baa042334380
Validity
Not Before: Dec 16 12:29:27 2023 GMT
Not After : Dec 16 12:29:27 2025 GMT
Subject: CN=a913d7d4a371b44f6deee266f0a768c0ef9a382a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:de:eb:66:61:41:5f:28:34:73:a8:c4:12:9e:
de:19:8b:f6:7b:04:f5:fb:b9:23:19:54:16:2f:5e:
4e:d6:46:d6:54:d1:a9:f9:15:29:27:3b:dd:36:c2:
41:c6:90:74:62:41:a1:40:d6:67:e7:58:81:ac:1a:
21:9b:a6:13:64:29:87:3f:61:a2:19:f2:3f:64:cd:
b8:15:09:9d:00:3e:46:fd:da:ed:ea:11:7d:d8:3d:
b2:f6:4e:25:b6:f7:7e:36:a1:1e:13:58:3d:f8:71:
5d:3a:3b:18:b3:9c:a9:68:ad:54:38:b2:b1:68:a8:
da:f9:24:ac:18:48:6a:c5:3a:40:e9:8f:ae:8b:54:
be:f8:72:34:ce:60:f3:e6:f4:90:f9:09:7e:c9:54:
22:cd:2d:d0:3d:79:65:b5:d4:ef:33:bf:89:58:db:
88:b1:7d:60:9d:81:47:01:ba:5c:ab:f0:41:c9:7c:
5b:79:70:b9:ec:53:16:f9:44:7c:a6:75:0f:6a:10:
5f:dd:3b:c2:bb:80:99:76:85:52:e7:f6:a0:22:2e:
cd:70:02:0b:6d:eb:f0:ed:d3:07:82:29:09:de:d8:
b5:fa:51:b1:c6:5c:8a:04:c1:67:8b:b0:ec:63:2c:
61:e6:b0:43:aa:c4:b4:bc:17:76:3f:46:d7:96:5b:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:03:DD:1C:86:0E:53:CA:85:D9:CE:AC:6B:6E:47:29:13:0A:33:1A
X509v3 Authority Key Identifier:
keyid:44:BD:8F:E3:EF:F8:DC:07:25:9C:DF:BE:27:D0:8C:8B:E5:E5:47:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d407c72537519f11553c7ee9eb83baa042334380.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/a913d7d4a371b44f6deee266f0a768c0ef9a382a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/d407c72537519f11553c7ee9eb83baa042334380.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.26.191.0/24
Signature Algorithm: sha256WithRSAEncryption
30:af:c3:3b:9d:1c:cd:05:e3:20:e0:0f:dd:6c:6c:4e:6d:ec:
e9:31:a4:d6:00:57:66:69:00:83:de:d3:d6:22:0d:24:e3:4d:
f8:af:18:d5:1a:a8:1d:f5:d2:f4:78:b8:a5:14:28:83:31:cb:
ad:48:23:f5:a1:8b:62:71:a1:bf:fe:90:ab:cf:87:47:80:48:
bf:4e:f2:df:dd:90:ea:35:4e:96:25:cc:95:02:4e:89:b1:4b:
58:49:6d:f9:a6:a7:4e:76:2a:ce:5f:ef:bd:ef:94:be:56:39:
5b:10:6f:a8:7d:25:c1:b9:a3:77:d9:e5:8c:7e:51:69:70:db:
67:77:aa:58:9e:ca:6d:bc:4d:79:df:ba:19:33:dd:c4:a5:98:
2c:7d:55:f6:f0:33:dd:20:89:24:4b:98:1b:19:df:58:67:01:
43:69:6a:20:a7:b6:f7:e5:41:e0:9a:bf:ce:56:a3:ea:c4:58:
8b:cd:dc:66:fc:eb:3c:12:03:21:6d:2f:ff:0a:55:45:bb:aa:
51:ed:4b:64:a4:24:f7:33:77:03:05:05:a8:0a:14:b3:ab:89:
be:7b:80:ca:c9:88:0f:ed:8e:78:59:3c:5a:f9:ea:29:09:06:
d3:59:69:2b:0a:03:c7:4a:e1:de:7e:89:b9:19:78:96:10:cb:
59:66:a5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 19:10:35 2024 by rpki-client on console-ams.rpki-client.org