Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/b462a448d68bf2937fbf68fa8eca0592bbb1580b.roa
File: b462a448d68bf2937fbf68fa8eca0592bbb1580b.roa (raw, json)
Hash identifier: NOd72qX+Jv5aQdzpM1THNFJbwmp7APHH0d4gfibeE2g=
Subject key identifier: 80:18:0A:CF:69:25:A9:5F:15:43:ED:0C:A7:E0:75:E4:8A:AE:E4:82
Certificate issuer: /CN=228f4088c9ec4b56bc838a3499f768d5cf73bab9
Certificate serial: 1C6E
Authority key identifier: AF:BE:A9:03:63:89:C5:DB:54:2F:A6:00:8E:B7:5C:57:F4:8A:8A:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228f4088c9ec4b56bc838a3499f768d5cf73bab9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/b462a448d68bf2937fbf68fa8eca0592bbb1580b.roa
Signing time: Fri 21 May 2021 19:18:57 +0000
ROA not before: Fri 21 May 2021 03:00:00 +0000
ROA not after: Sun 21 May 2023 03:00:00 +0000
asID: 28458
IP address blocks: 200.106.164.0/24 maxlen: 24
200.106.165.0/24 maxlen: 24
200.106.166.0/24 maxlen: 24
200.106.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7278 (0x1c6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228f4088c9ec4b56bc838a3499f768d5cf73bab9
Validity
Not Before: May 21 03:00:00 2021 GMT
Not After : May 21 03:00:00 2023 GMT
Subject: CN=b462a448d68bf2937fbf68fa8eca0592bbb1580b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:36:87:cc:48:0c:55:a5:15:dc:92:6b:f2:
c4:9f:bc:c8:55:17:91:e7:c9:7c:ee:9c:2f:4c:c2:
4c:89:f9:52:1f:1d:5a:c9:14:5a:a1:11:9a:0c:43:
67:02:99:33:42:bf:a2:9f:72:89:11:17:e5:a8:0f:
31:3c:e4:55:cc:f6:5b:e7:c9:f6:61:ac:4b:12:a9:
3a:ee:c4:4a:e0:a6:41:85:75:a2:d9:54:1d:bf:f5:
cc:1c:db:06:45:32:50:ee:d0:24:19:29:85:08:da:
19:63:ce:6a:14:03:7f:01:de:b3:dc:48:3f:7e:11:
6c:4e:87:c5:dc:a8:9a:2d:c1:91:07:16:6b:00:19:
a9:74:df:46:68:8a:58:d5:a8:40:3d:fc:ed:c8:8e:
87:25:57:e8:cd:de:dc:c7:fd:b5:6f:46:e7:f3:64:
50:34:5a:9e:35:fa:42:68:47:9c:cb:d8:ca:7e:06:
2b:49:7a:24:e8:af:7e:1b:43:ec:54:de:a3:bd:32:
b6:19:b3:7a:a4:05:93:45:79:61:d0:43:e8:73:f0:
75:d1:bb:de:a6:7c:f8:4b:ba:46:41:5b:f0:df:1a:
f1:7a:2d:09:94:90:39:1f:37:a2:e6:05:14:29:49:
24:6a:26:d9:24:f6:a3:2f:8b:5c:44:73:9d:98:e7:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:18:0A:CF:69:25:A9:5F:15:43:ED:0C:A7:E0:75:E4:8A:AE:E4:82
X509v3 Authority Key Identifier:
keyid:AF:BE:A9:03:63:89:C5:DB:54:2F:A6:00:8E:B7:5C:57:F4:8A:8A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228f4088c9ec4b56bc838a3499f768d5cf73bab9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/b462a448d68bf2937fbf68fa8eca0592bbb1580b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f2896984-c12d-49b9-a425-f52cfda31dce/228f4088c9ec4b56bc838a3499f768d5cf73bab9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.106.164.0/22
Signature Algorithm: sha256WithRSAEncryption
78:11:8b:22:65:4f:58:93:1c:8e:48:a4:4d:79:c1:ae:2c:3c:
0c:17:7d:3b:a8:2d:9e:20:f1:9b:39:6b:79:63:ca:c6:e3:57:
60:6c:49:3b:7e:a2:0b:a7:0c:7d:24:62:03:fc:9b:fc:e0:ec:
4f:cc:57:a3:2d:0b:9a:f8:5f:31:b8:74:2c:6c:87:8a:48:eb:
7e:20:5c:16:80:99:95:2b:0a:87:fa:dd:50:d3:a4:92:c1:00:
68:bb:e1:60:6d:a0:6a:9d:6b:aa:55:f9:e3:d2:ad:b9:70:e2:
7e:bf:b9:33:ea:6d:06:ab:59:99:77:ab:84:46:66:d9:af:77:
b3:21:84:13:7d:6d:14:5a:f8:7f:37:c1:b4:26:75:34:b2:35:
53:b8:84:de:1b:b2:aa:6d:63:e0:b9:28:f0:70:b5:17:70:fa:
dc:d1:7a:df:b1:5c:9f:12:98:8e:98:bf:ab:50:55:1b:b6:23:
ef:ed:b4:83:c8:8c:da:43:9f:5d:62:e7:dd:b4:61:2e:08:e7:
62:cc:b7:af:39:b8:be:93:59:5b:d6:1f:b3:cb:75:72:5f:62:
fa:c3:88:a6:e8:83:51:61:99:af:bb:18:06:1f:3c:42:29:44:
6a:b4:f4:04:12:65:32:f5:63:0c:77:8e:72:90:d8:49:e7:c8:
55:ab:f5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org