Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/74d2356bf1d9390789e3c420bf82a0f86911d30e.roa
File: 74d2356bf1d9390789e3c420bf82a0f86911d30e.roa (raw, json)
Hash identifier: hBNX8kIS3LDU2bQmpCTlCbAYveYT/Qc09LYuF+aQ0QY=
Subject key identifier: AB:AB:B1:AB:93:46:A8:8C:AE:3F:26:D3:CB:9D:22:70:0F:27:F3:2C
Certificate issuer: /CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
Certificate serial: 21379B
Authority key identifier: FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/74d2356bf1d9390789e3c420bf82a0f86911d30e.roa
Signing time: Fri 02 Jun 2023 04:00:29 +0000
ROA not before: Thu 01 Jun 2023 04:00:27 +0000
ROA not after: Mon 02 Jun 2025 04:00:27 +0000
asID: 3549
IP address blocks: 200.14.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2176923 (0x21379b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
Validity
Not Before: Jun 1 04:00:27 2023 GMT
Not After : Jun 2 04:00:27 2025 GMT
Subject: CN=74d2356bf1d9390789e3c420bf82a0f86911d30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:76:dc:76:e3:9f:08:d2:d4:35:c2:9f:06:
8c:22:bd:b4:81:bc:42:6b:21:43:65:5c:f4:5a:84:
9d:2f:33:8c:98:f5:1a:64:e5:9c:bf:21:1f:40:6e:
ff:e4:ed:08:52:1e:cb:92:b8:ce:82:9c:e8:26:75:
d0:57:09:11:a6:b8:22:3f:f7:1d:22:bb:63:1f:8c:
9a:48:fc:6e:af:28:52:a2:3f:bb:47:e2:ae:f3:de:
86:e0:cf:15:0c:d3:8b:5c:9e:9a:ad:7b:f4:0e:38:
e4:80:fb:7a:b2:9e:07:74:cc:83:48:3e:b0:df:0a:
2f:cc:48:49:0d:3f:98:84:39:2b:56:47:8b:b5:8a:
d2:b3:0a:0b:ab:39:56:88:1a:a6:70:ca:f4:37:c1:
30:35:de:28:58:d3:de:84:2f:2b:b7:bc:ba:9e:38:
6c:64:0c:31:8a:f4:4c:92:09:d4:14:b5:9e:34:4f:
d1:d4:6e:8e:3d:a5:d8:eb:36:1e:9f:9e:5f:0c:24:
f9:42:97:9b:9a:b4:ca:67:79:4d:df:57:25:31:a4:
3d:6c:26:ec:21:8c:69:ce:a7:2a:dc:d5:55:89:e7:
04:fd:dc:01:bb:da:ad:28:6f:e8:29:fb:d4:4b:30:
4d:e0:f4:9b:78:6b:df:ca:65:63:a3:89:cf:d8:83:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AB:B1:AB:93:46:A8:8C:AE:3F:26:D3:CB:9D:22:70:0F:27:F3:2C
X509v3 Authority Key Identifier:
keyid:FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/74d2356bf1d9390789e3c420bf82a0f86911d30e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/6e4a182506cc3d6396e00aa2873b9f3c87963395.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.34.0/24
Signature Algorithm: sha256WithRSAEncryption
36:af:fb:ed:4a:26:b3:e2:83:e3:a5:e8:72:91:84:6b:86:99:
08:6d:ef:4c:d5:f4:10:83:9b:b8:83:5a:b8:37:d2:6c:b2:89:
17:be:fb:96:20:72:9c:04:69:c6:bc:a6:37:79:95:e1:fc:6c:
a5:09:2a:45:32:c3:bf:60:3d:72:70:f5:98:8e:ef:38:42:e6:
74:56:86:bf:0e:c2:98:ce:ec:19:b7:a0:ff:ba:87:55:a6:4a:
70:96:92:22:e1:a8:2f:66:9b:af:15:77:f0:de:13:5e:e7:71:
82:fc:e5:c6:da:3f:c8:cb:fc:7d:5b:57:30:25:b6:9a:13:dd:
93:cd:d7:48:34:b3:c5:24:b5:e7:61:7e:bd:bd:00:c8:6b:dc:
54:28:f6:04:29:4e:a4:0c:aa:95:88:4c:b9:9c:c2:ae:6f:ad:
cb:41:ee:a5:19:79:be:1c:00:b8:42:d4:b4:d0:03:f7:5f:eb:
e9:8f:d8:0a:45:1b:da:60:be:45:16:2f:ad:6f:f9:91:fc:f0:
e2:d9:b6:39:e5:17:36:df:c0:f0:70:00:66:1e:d2:fa:51:93:
5c:a5:23:9f:b2:73:ce:20:18:f5:70:f2:8f:53:96:62:0b:ec:
20:6e:c5:03:61:b3:cf:d2:e4:da:69:24:98:74:a2:0d:88:2e:
78:e5:50:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org