Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/f9ca7cc5c00fe48e71b9a8724025d9a3e21f0348.roa
File: f9ca7cc5c00fe48e71b9a8724025d9a3e21f0348.roa (raw, json)
Hash identifier: NkK+dn2QKdpZDlyJINvHX5RdgUC6CzjOND7ZowSXT3w=
Subject key identifier: 8C:0D:84:32:EF:CF:0B:D7:5E:05:43:44:23:95:A4:C7:F1:5F:81:4D
Certificate issuer: /CN=bff7b3f674f44a97ef26d385f1f6cb77da502739
Certificate serial: 043B77
Authority key identifier: 4F:AC:50:32:15:04:B2:B9:69:5D:DF:F5:43:01:D3:D4:EE:29:D4:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bff7b3f674f44a97ef26d385f1f6cb77da502739.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/f9ca7cc5c00fe48e71b9a8724025d9a3e21f0348.roa
Signing time: Wed 24 Mar 2021 14:35:20 +0000
ROA not before: Wed 24 Mar 2021 14:35:20 +0000
ROA not after: Tue 24 Mar 2026 14:35:20 +0000
asID: 10299
IP address blocks: 200.3.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277367 (0x43b77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff7b3f674f44a97ef26d385f1f6cb77da502739
Validity
Not Before: Mar 24 14:35:20 2021 GMT
Not After : Mar 24 14:35:20 2026 GMT
Subject: CN=f9ca7cc5c00fe48e71b9a8724025d9a3e21f0348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:a4:4d:3f:2a:e0:eb:ec:31:15:04:05:27:
58:4a:e5:68:8a:e1:c2:b4:01:d8:3d:9e:d4:87:bf:
20:2e:df:8b:e1:39:95:dd:c5:a0:ea:ad:3e:c4:0f:
23:0e:4f:be:ec:fd:f8:ef:37:31:99:ad:0e:bf:02:
fe:24:81:13:c2:7b:61:42:24:49:27:63:f6:e5:22:
11:36:c3:e2:12:d5:a7:48:a3:9d:43:1d:e6:aa:dc:
92:f4:07:ee:aa:06:21:06:28:3a:1f:43:df:e1:7d:
87:92:be:52:8e:7a:35:46:74:08:8a:2f:0f:8a:85:
25:75:e5:12:7e:de:a7:72:cb:95:b7:10:7a:f5:9e:
67:07:77:a7:24:0c:5d:fb:41:dc:1f:98:9e:e6:7e:
0a:1e:82:44:02:b9:b3:6b:46:9e:c9:f5:07:84:98:
d5:d5:d9:ff:c6:bf:62:97:e5:b7:3c:6e:34:ac:3c:
fe:04:0f:a5:81:82:65:f0:54:c0:e8:c9:7e:58:bf:
f6:98:56:78:a2:63:a3:e5:25:93:77:e1:a6:d5:6f:
2f:39:a8:59:fd:be:0a:5e:9f:8c:4d:65:bf:26:af:
7e:86:cc:a9:57:b4:3a:33:6a:76:b3:17:67:93:12:
98:25:81:14:0a:b6:3e:39:4e:52:22:c4:4f:e0:39:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0D:84:32:EF:CF:0B:D7:5E:05:43:44:23:95:A4:C7:F1:5F:81:4D
X509v3 Authority Key Identifier:
keyid:4F:AC:50:32:15:04:B2:B9:69:5D:DF:F5:43:01:D3:D4:EE:29:D4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bff7b3f674f44a97ef26d385f1f6cb77da502739.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/f9ca7cc5c00fe48e71b9a8724025d9a3e21f0348.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/bff7b3f674f44a97ef26d385f1f6cb77da502739.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.193.0/24
Signature Algorithm: sha256WithRSAEncryption
25:da:ef:84:53:14:65:28:78:cc:9b:26:f5:cc:85:54:26:4a:
92:41:db:f5:ea:44:b3:9d:bd:d5:ce:02:24:03:42:f4:1b:6f:
31:e8:5e:97:9e:e7:72:cf:85:16:15:84:52:38:9a:ba:2d:11:
4f:2e:73:9e:3f:10:2a:fe:36:33:b2:30:0a:eb:16:94:06:f3:
47:87:a6:ff:3d:3b:0a:a9:f2:08:5b:56:3f:20:8c:a5:0e:8f:
d1:62:28:e9:4e:0f:c6:41:b4:af:c3:e3:bb:a2:09:4b:86:ac:
e4:92:25:f1:32:bd:33:16:84:dc:40:09:7e:c2:9a:94:6e:74:
e0:e7:b5:5d:60:55:7b:8f:55:d7:09:06:a3:98:a5:bf:ea:ac:
17:34:42:63:84:74:ec:0b:6f:41:b6:e5:7b:26:c2:1b:85:27:
73:71:0d:62:b8:25:e1:47:b9:7f:d4:47:25:d8:3f:5d:77:f8:
7c:d1:9d:8e:41:e4:4f:9f:63:37:80:40:2a:c6:33:a5:53:54:
56:dc:38:36:31:c0:5a:4c:b4:f8:f3:c5:7a:3f:34:f0:4b:75:
5b:6f:fb:03:34:7a:b6:66:4b:aa:ca:2a:60:94:90:7b:f1:08:
3d:a8:81:1e:0b:b8:a6:0a:d3:1d:53:09:36:99:0c:fd:d8:7c:
76:df:d3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-fra.rpki-client.org