Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/64bf8e1c3bc8a1a2b56a53d5c1b34a71f5145202.roa
File: 64bf8e1c3bc8a1a2b56a53d5c1b34a71f5145202.roa (raw, json)
Hash identifier: JPtfZlstjh1x4S/jp9fU0Skz2wnwkB8icuflDtL18/M=
Subject key identifier: AF:19:96:74:1B:94:47:8C:BD:E0:79:F1:EB:96:D4:9E:07:0D:36:B3
Certificate issuer: /CN=b1692ab68c975b69e2411b06e4249ca2f134a1c9
Certificate serial: 0A0256
Authority key identifier: E9:6C:D3:BA:24:A1:77:EE:10:8D:36:73:D0:4C:C3:50:4D:CF:D2:41
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1692ab68c975b69e2411b06e4249ca2f134a1c9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/64bf8e1c3bc8a1a2b56a53d5c1b34a71f5145202.roa
Signing time: Wed 24 Mar 2021 14:38:20 +0000
ROA not before: Wed 24 Mar 2021 14:38:20 +0000
ROA not after: Tue 24 Mar 2026 14:38:20 +0000
asID: 269921
IP address blocks: 200.124.68.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655958 (0xa0256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1692ab68c975b69e2411b06e4249ca2f134a1c9
Validity
Not Before: Mar 24 14:38:20 2021 GMT
Not After : Mar 24 14:38:20 2026 GMT
Subject: CN=64bf8e1c3bc8a1a2b56a53d5c1b34a71f5145202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:da:08:60:55:d9:4f:36:2f:8a:00:69:5d:
1d:4f:f9:32:ce:4c:f9:cb:10:de:0a:1a:93:3e:0b:
4f:5f:db:54:08:78:7d:33:25:57:c9:4d:d4:62:da:
77:2e:41:4e:81:fe:5a:50:0f:53:eb:1b:d9:9b:d1:
5d:d6:60:cc:d6:a7:60:23:0c:24:2d:57:dd:db:ec:
83:34:1b:d9:82:f0:29:2b:4f:87:41:f2:58:5b:aa:
8e:b7:76:e0:54:4f:d0:fe:69:27:45:83:51:36:2e:
74:2e:7e:b2:f4:22:7b:e7:1c:6d:93:ec:b7:c7:c1:
c6:2f:b9:c3:b9:cb:c7:3c:4b:c0:ad:17:85:e1:11:
8b:13:c7:a3:48:e7:43:33:2a:87:4c:48:5a:46:f5:
78:15:0a:2a:c6:86:68:c0:85:a5:9b:4d:c0:8e:43:
cd:dd:9d:2b:5b:de:84:24:9f:89:a2:e0:2e:62:11:
d0:a6:d0:a8:01:d2:f4:e5:7d:80:ff:3e:47:6b:24:
b6:a3:01:e1:91:5d:e5:4f:5a:83:34:7c:ac:a0:4b:
0e:ef:2f:01:58:66:de:6d:44:79:98:45:ad:4a:8f:
5a:cb:5f:7f:03:d7:9e:dd:06:a2:89:37:60:f4:3d:
2e:24:1d:f0:75:cc:5a:88:fd:5b:29:15:23:e0:da:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:19:96:74:1B:94:47:8C:BD:E0:79:F1:EB:96:D4:9E:07:0D:36:B3
X509v3 Authority Key Identifier:
keyid:E9:6C:D3:BA:24:A1:77:EE:10:8D:36:73:D0:4C:C3:50:4D:CF:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1692ab68c975b69e2411b06e4249ca2f134a1c9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/64bf8e1c3bc8a1a2b56a53d5c1b34a71f5145202.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e9b2b702-05a6-4f5b-9590-c573294630d0/b1692ab68c975b69e2411b06e4249ca2f134a1c9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.124.68.0/22
Signature Algorithm: sha256WithRSAEncryption
81:6d:f3:1e:ad:85:0b:88:75:1d:b6:11:6a:ca:32:f6:ec:9f:
cb:45:5e:bb:e1:45:62:23:45:8d:b8:e4:c5:ce:ae:53:ca:35:
4b:dd:2b:ff:35:3f:bd:3f:92:e9:84:53:a5:8d:c7:11:23:77:
b4:a2:70:11:fa:f3:15:cc:41:4f:9f:be:2a:b9:98:32:8f:b0:
4b:f6:b9:72:37:a7:7c:70:8d:19:2e:44:ea:7d:d8:da:da:58:
39:34:5d:48:9b:a5:16:9f:68:b9:2f:16:78:a7:fa:e4:e4:f4:
ac:66:02:20:56:c2:49:45:60:70:9c:d9:c0:d7:de:3b:54:33:
00:bf:83:f5:be:53:15:41:2c:33:59:33:9f:7f:c0:c0:af:95:
a3:3c:1a:98:ea:3f:b3:09:e4:f5:d5:2b:5a:b8:b1:90:b3:08:
96:5d:bb:45:ac:b7:37:6e:08:50:4a:76:70:38:70:df:58:58:
87:3a:50:b9:ef:c5:15:07:6e:6d:a7:f8:77:36:06:d6:60:d5:
ea:d1:0e:43:fd:64:6f:e5:8f:3a:91:b9:aa:15:fb:33:30:b9:
e1:80:3a:f1:8d:63:a8:f1:7b:af:25:f7:8c:06:2a:6b:7d:4a:
f0:a3:ae:41:89:f5:4c:4b:b1:b0:0f:dc:76:9a:2d:5a:b4:87:
77:20:ec:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 15:22:20 2023 by rpki-client on console-fra.rpki-client.org