Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/4a2716caad932677be7fc678be7e4fa59cb57d2c.roa
File: 4a2716caad932677be7fc678be7e4fa59cb57d2c.roa (raw, json)
Hash identifier: Gei3uph9y4ktzjhiFO1txgmRu8j5jrDWLNAlDV8Tz/M=
Subject key identifier: 93:C5:EC:2B:07:E3:10:7D:4B:26:1A:EC:62:88:DC:95:FA:70:8A:EE
Certificate issuer: /CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
Certificate serial: 0DBE1C
Authority key identifier: FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/4a2716caad932677be7fc678be7e4fa59cb57d2c.roa
Signing time: Wed 24 Mar 2021 14:32:06 +0000
ROA not before: Wed 24 Mar 2021 14:32:06 +0000
ROA not after: Tue 24 Mar 2026 14:32:06 +0000
asID: 10617
IP address blocks: 200.69.42.0/24 maxlen: 24
200.81.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 900636 (0xdbe1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
Validity
Not Before: Mar 24 14:32:06 2021 GMT
Not After : Mar 24 14:32:06 2026 GMT
Subject: CN=4a2716caad932677be7fc678be7e4fa59cb57d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:89:98:27:0f:05:b9:21:a2:3c:01:f9:d1:
a0:8c:f6:ad:e7:a8:f8:f7:bf:cc:f0:a1:60:87:98:
d2:bb:89:f3:6a:c7:cc:37:e6:bb:4e:96:68:50:9f:
bb:1d:65:d7:ef:17:68:bb:9d:78:fd:cf:ee:48:4e:
14:78:df:77:a3:54:e2:26:6d:af:b5:9e:78:b9:09:
28:28:04:83:d2:79:22:df:d9:39:7b:91:23:2b:ee:
de:6e:f3:53:89:11:dd:fa:34:d6:dc:23:63:6d:d6:
2a:11:d9:cd:14:6b:56:95:ba:e4:3e:c3:a3:16:4f:
39:9b:40:53:f6:d4:89:25:ad:bf:1b:9a:81:3e:1e:
37:ff:87:59:52:9a:6f:8e:66:11:f1:2b:f0:a0:47:
27:b1:d4:6e:75:c5:d3:e9:91:21:da:80:2e:70:09:
76:e5:91:bb:b5:8d:ef:cd:f6:11:b8:bd:78:b0:ae:
fd:66:b3:d5:e1:eb:12:de:4b:a4:3d:21:4e:86:49:
36:65:24:8d:e9:bf:38:a4:44:a5:df:bf:ea:79:56:
a7:83:4e:3d:50:97:e6:d8:c0:fa:cd:d6:d9:ae:97:
87:6c:71:1f:22:5b:a7:98:63:15:c3:8a:97:68:f0:
18:68:70:7e:75:fb:fd:50:94:b5:85:9c:51:0b:a7:
1e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C5:EC:2B:07:E3:10:7D:4B:26:1A:EC:62:88:DC:95:FA:70:8A:EE
X509v3 Authority Key Identifier:
keyid:FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/4a2716caad932677be7fc678be7e4fa59cb57d2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.69.42.0/24
200.81.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:3a:ba:8e:ae:f4:d4:7b:10:3a:a5:6c:c6:18:06:c5:da:26:
69:8e:ef:2a:c3:20:ee:a6:fe:9c:83:55:fd:01:5d:3b:ae:0e:
a7:cc:e1:77:c3:f2:f4:19:49:6c:6f:c4:86:c0:f1:22:d4:2b:
47:62:40:87:3e:f6:f4:c4:29:d3:19:7c:56:fb:e9:ea:13:f3:
84:d1:3a:f6:be:a5:df:2d:45:33:c5:6d:ad:25:53:1f:1f:56:
12:9e:fa:d8:86:ab:70:88:0f:83:36:78:3e:96:bf:7c:87:f4:
8b:78:3a:6a:ed:ba:4d:22:03:7b:6d:3d:67:cf:f0:31:cc:31:
1b:94:df:e2:ba:04:70:03:ef:df:24:43:ec:43:b3:13:cc:60:
82:f5:54:56:2a:66:6d:b6:d0:37:17:ff:27:0d:37:eb:c2:86:
9b:53:7b:73:72:ef:89:96:c8:6c:9c:a3:e6:60:36:d7:e7:6d:
f5:4b:a9:00:82:c0:c6:d2:e9:1e:4e:b3:10:4a:67:c2:51:7e:
d5:2c:64:5d:d2:3a:3f:b7:d1:e0:71:b9:d7:1c:de:14:1a:3e:
6a:c3:87:c1:61:a9:5c:6d:01:2d:94:ab:0f:17:c4:ab:42:c1:
8f:ef:17:a7:b7:3a:02:0b:6e:92:08:2b:ff:1b:b4:1d:57:e8:
0b:d2:a3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 19:41:02 2023 by rpki-client on console-ams.rpki-client.org