Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/57c71223da75b723ba18a527457f216acbd26ed1.roa
File: 57c71223da75b723ba18a527457f216acbd26ed1.roa (raw, json)
Hash identifier: Ls1eBqh49cVgcguQ/YvybCZpJCFlWNCf7K/VXWZXgz0=
Subject key identifier: F0:77:2C:8A:0F:04:42:DB:AF:CD:56:AE:C9:63:BE:9A:DF:DE:5D:5A
Certificate issuer: /CN=8174f9e0234527f23fb0bcfd7cea896897ec3191
Certificate serial: 03EE
Authority key identifier: FD:9C:B9:83:74:37:2D:36:5A:88:25:24:4D:C8:2A:CE:E1:EE:26:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8174f9e0234527f23fb0bcfd7cea896897ec3191.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/57c71223da75b723ba18a527457f216acbd26ed1.roa
Signing time: Fri 04 Feb 2022 18:19:32 +0000
ROA not before: Fri 04 Feb 2022 03:00:00 +0000
ROA not after: Sun 04 Feb 2024 03:00:00 +0000
asID: 14339
IP address blocks: 200.47.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 07:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1006 (0x3ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8174f9e0234527f23fb0bcfd7cea896897ec3191
Validity
Not Before: Feb 4 03:00:00 2022 GMT
Not After : Feb 4 03:00:00 2024 GMT
Subject: CN=57c71223da75b723ba18a527457f216acbd26ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:2c:6b:6f:b1:06:19:06:1e:a6:6b:42:df:
01:e8:80:2d:68:db:ec:bb:1d:7d:6b:c1:0d:c8:ad:
95:4e:fe:ea:76:61:88:f2:ac:d3:95:ed:fe:6c:d6:
a9:36:7b:a3:09:5b:90:a8:bd:21:44:47:2d:2b:97:
ed:2f:ec:23:1b:c5:00:cf:67:b3:db:d3:39:4c:b3:
7a:d8:0a:33:d1:97:7d:b4:55:ba:ed:4a:1c:bb:90:
d8:c4:46:99:2d:33:78:e5:5d:dc:53:3d:8b:db:f2:
4e:d5:79:69:53:fc:3f:67:9c:13:75:2f:84:60:ec:
15:8e:cf:98:ac:fd:43:49:fc:67:4b:f5:50:fd:ec:
23:ea:d4:25:cf:94:28:c1:41:7b:8a:22:02:4f:06:
18:94:94:0b:e4:0e:0c:23:54:d3:cc:3a:be:63:9e:
2f:8f:55:0f:1b:3f:c2:37:1f:a7:14:63:d3:04:13:
b1:62:c3:a0:24:d2:d0:e3:f5:bf:ec:ab:ec:6c:82:
95:14:c9:c3:ae:6d:c5:94:1a:ae:84:10:79:9d:58:
5f:9a:62:8a:04:60:8a:f8:b8:9a:85:39:10:ae:cc:
c0:dd:a9:ea:1d:fe:84:7b:76:48:d6:2c:13:7b:9a:
cf:4f:89:cc:d6:d3:40:91:62:1e:f5:e4:a9:27:21:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:77:2C:8A:0F:04:42:DB:AF:CD:56:AE:C9:63:BE:9A:DF:DE:5D:5A
X509v3 Authority Key Identifier:
keyid:FD:9C:B9:83:74:37:2D:36:5A:88:25:24:4D:C8:2A:CE:E1:EE:26:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8174f9e0234527f23fb0bcfd7cea896897ec3191.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/57c71223da75b723ba18a527457f216acbd26ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/8174f9e0234527f23fb0bcfd7cea896897ec3191.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.47.3.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8b:2c:91:45:77:db:3b:71:d2:44:94:f0:22:84:ae:41:5f:
cb:33:ad:20:bf:e5:99:f0:0f:c8:ff:fc:1f:f6:c8:1f:6b:fa:
c1:71:93:fc:db:83:7c:c5:4f:ce:2f:dd:53:44:7b:ed:50:fc:
ab:42:65:f1:4e:86:7b:55:2d:13:c8:10:f4:70:3d:5d:e2:8b:
de:60:52:4e:5e:98:ae:29:f8:1c:18:2c:a0:1c:ad:48:2f:74:
8f:e2:4d:68:c5:f8:0b:c6:8e:dc:0f:a2:f4:30:5b:58:11:67:
da:ab:a9:ca:a3:ad:82:fe:23:9d:c8:a0:79:0a:c9:88:12:d4:
e1:e0:15:e9:8d:64:cd:ee:c8:7d:db:ff:70:d7:84:42:dc:be:
ec:42:c5:8d:cd:4a:63:78:1e:0c:d7:57:93:9c:8d:0c:12:0c:
c1:48:85:6a:f7:96:d0:9e:9c:fd:af:0c:09:47:f6:e1:b8:f9:
aa:5e:cd:aa:7f:11:46:5f:8e:2b:3a:c6:0d:18:5e:6a:bc:57:
70:e2:4b:5b:e4:24:1c:b6:f6:a6:3a:db:9c:36:d8:80:fa:be:
ba:a2:d5:c5:c8:b7:a9:b3:af:3b:25:d6:28:87:e4:a0:19:6b:
b3:11:81:36:3f:5b:ed:fc:dc:81:2c:d0:75:18:57:4c:ac:b4:
76:80:80:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 3 08:35:27 2024 by rpki-client on console-ams.rpki-client.org