Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/e929600f5dce0d05e7ab92dadafa9844245eaa3f.roa
File: e929600f5dce0d05e7ab92dadafa9844245eaa3f.roa (raw, json)
Hash identifier: 1v7HYJR0bCQUXc3BWkYJjWJcVro9j5RHLR3LwS8XyaE=
Subject key identifier: F9:C3:AE:CB:A9:F1:FB:E7:E8:51:A5:5E:E2:3D:84:20:EB:8F:B6:DD
Certificate issuer: /CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
Certificate serial: 0DC0F4
Authority key identifier: FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/e929600f5dce0d05e7ab92dadafa9844245eaa3f.roa
Signing time: Wed 24 Mar 2021 14:32:06 +0000
ROA not before: Wed 24 Mar 2021 14:32:06 +0000
ROA not after: Tue 24 Mar 2026 14:32:06 +0000
asID: 10617
IP address blocks: 200.69.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901364 (0xdc0f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
Validity
Not Before: Mar 24 14:32:06 2021 GMT
Not After : Mar 24 14:32:06 2026 GMT
Subject: CN=e929600f5dce0d05e7ab92dadafa9844245eaa3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:eb:41:19:70:3d:3e:04:98:ef:a4:cd:40:
1f:b4:0e:42:6a:39:f1:85:d4:ec:37:87:96:b7:b9:
c1:ae:6e:31:27:95:be:ce:82:3a:e8:34:7e:9d:d7:
4e:d0:f3:2e:81:03:4e:16:c3:40:59:22:11:37:c1:
42:e4:55:00:e0:83:38:5e:01:44:d5:06:be:68:13:
29:b8:d3:93:b4:39:fd:3c:2d:4b:c0:b9:a5:e4:92:
70:78:9a:4f:86:f1:ad:f2:16:3e:b9:12:b0:c3:c7:
36:89:bc:1c:ae:17:87:5b:20:61:f7:5c:5f:68:aa:
74:47:13:44:cd:e6:6b:ec:9e:a6:f3:e7:15:45:8f:
ca:1f:5d:5e:9e:a7:92:2e:bc:43:b0:f5:31:3d:9f:
e0:bf:43:e6:c1:ee:97:a2:bf:69:ab:2c:c9:d7:95:
1f:e2:b6:55:50:9c:00:2c:19:46:61:6a:32:5f:e1:
9e:35:34:c2:19:46:6d:92:b4:fd:8d:a0:2e:e7:7e:
03:70:3f:5d:00:68:6f:84:ef:7a:5e:43:7f:76:08:
f2:d5:b0:6f:06:66:9d:e7:ff:c5:51:c2:d5:ba:6d:
c6:8e:54:66:5b:38:78:0d:bc:7e:2c:80:a4:5e:e0:
95:79:b3:b3:c3:61:14:43:ad:52:24:ba:fc:a4:6a:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C3:AE:CB:A9:F1:FB:E7:E8:51:A5:5E:E2:3D:84:20:EB:8F:B6:DD
X509v3 Authority Key Identifier:
keyid:FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/e929600f5dce0d05e7ab92dadafa9844245eaa3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.69.41.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f2:6f:6f:08:66:64:18:82:ee:fc:0a:8c:a8:70:e0:96:0b:
d4:49:d4:1f:c8:d0:ff:16:cc:cb:2b:a5:de:9e:34:ca:31:d0:
e7:05:29:a4:93:2e:ad:de:7b:d6:1d:14:a4:1b:7b:88:02:3c:
51:7b:37:42:22:3f:77:8e:42:f8:b2:39:6a:28:c6:a5:02:e1:
34:15:93:5a:99:fc:20:d8:45:fe:b2:d6:ff:59:cf:af:5c:5a:
e5:6c:9c:f6:13:83:14:7d:ac:e1:8a:30:54:25:bc:27:90:bb:
95:4f:af:bd:4b:98:b8:86:a8:61:26:65:4f:5f:b8:4f:01:ae:
ef:1d:7b:1a:ca:b1:23:0a:6c:91:54:92:1e:93:2f:1b:81:de:
bc:90:6f:42:59:b7:56:b0:19:ca:de:01:f0:df:03:ea:34:53:
17:22:f3:9c:a8:28:89:57:e8:e0:62:4a:d9:ca:bd:1d:82:ee:
82:0c:25:31:ae:94:fe:b4:57:63:30:27:be:45:29:84:4b:47:
df:af:40:f4:b4:f7:43:8d:45:ab:5a:3f:e9:20:5b:31:c7:56:
f9:85:84:90:0c:ea:6f:6d:30:84:b6:4a:d0:f3:b8:50:94:c7:
37:74:8d:18:dd:e6:02:d3:24:96:6a:77:b9:69:c7:4d:bc:f1:
0b:58:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 19:38:33 2023 by rpki-client on console-fra.rpki-client.org