Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/4449c150fa99b141d768e0ba38cfe02b894f1d5d.roa
File: 4449c150fa99b141d768e0ba38cfe02b894f1d5d.roa (raw, json)
Hash identifier: AQNRcnQqvMi/V/DU/pRSEIHBDD7ICk8G9uLFSX7zgU8=
Subject key identifier: 83:F8:0D:F6:39:DF:A9:99:D5:58:B2:F1:8B:DE:40:B1:18:43:81:0B
Certificate issuer: /CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Certificate serial: 0EA4BF
Authority key identifier: 34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/4449c150fa99b141d768e0ba38cfe02b894f1d5d.roa
Signing time: Tue 04 May 2021 22:26:58 +0000
ROA not before: Wed 28 Apr 2021 03:00:00 +0000
ROA not after: Fri 28 Apr 2023 03:00:00 +0000
asID: 211397
IP address blocks: 200.85.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959679 (0xea4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Validity
Not Before: Apr 28 03:00:00 2021 GMT
Not After : Apr 28 03:00:00 2023 GMT
Subject: CN=4449c150fa99b141d768e0ba38cfe02b894f1d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ca:bb:9c:7c:a4:15:45:a9:8b:ab:55:4c:52:
de:a3:d9:6c:0f:cb:3c:02:f5:e1:fd:46:cd:ab:a1:
55:16:7a:df:b4:06:fb:86:67:4e:2f:a2:18:6a:9b:
13:7d:7f:64:04:bc:65:f0:30:1c:96:77:d5:57:a3:
bf:30:38:d8:2f:cf:7e:d2:15:4d:94:50:15:46:0f:
66:0b:91:2b:80:4b:d1:e1:30:23:15:5a:b0:b2:4a:
ff:c2:90:54:56:bd:bd:fa:57:60:53:26:21:c1:d1:
bc:7a:9e:07:cf:8c:11:45:83:ad:30:9a:39:21:04:
5f:7b:eb:d8:26:ce:5a:47:10:75:96:4f:e6:1b:d6:
d0:e0:60:57:b1:38:95:59:08:54:e9:b7:57:97:a8:
bd:89:e7:48:22:8d:60:1d:29:c9:8f:bf:33:0c:1c:
57:78:aa:4f:f0:6f:e3:77:c3:88:96:6b:8f:4c:71:
6f:2e:ef:86:78:10:c5:ec:31:fd:bf:03:fe:5c:3e:
aa:4b:9c:db:ac:49:fb:18:94:88:34:bf:f6:98:7b:
5c:38:16:02:c9:ae:22:a8:a5:b2:c0:a6:2a:7a:b1:
b9:64:b6:cd:55:67:60:db:14:6e:70:da:e7:07:bb:
43:21:f6:fe:b9:e1:27:c3:82:10:0f:05:27:9e:bb:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F8:0D:F6:39:DF:A9:99:D5:58:B2:F1:8B:DE:40:B1:18:43:81:0B
X509v3 Authority Key Identifier:
keyid:34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/4449c150fa99b141d768e0ba38cfe02b894f1d5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.142.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ea:01:21:70:53:6d:2c:e4:4d:91:d5:36:99:e9:1d:5a:d9:
a1:9d:3f:26:bd:3e:26:45:9f:59:38:ad:cb:86:a8:29:a6:76:
1c:12:1f:d1:a2:a5:dd:ac:26:27:36:0d:99:89:f4:00:d9:3a:
cd:58:9a:1c:32:3c:29:ce:ec:0e:04:ab:79:f7:ae:2c:96:d7:
f5:12:c0:9e:5e:9d:85:9d:85:71:07:29:cb:d6:b3:ac:35:6c:
5a:7f:7d:2c:ae:28:a4:e4:3c:62:5b:5f:5f:b5:2b:95:93:c7:
d7:c9:90:12:b8:b4:c0:d2:04:15:57:41:bf:a3:36:3b:96:90:
0a:82:60:c1:99:89:54:ac:ff:86:d8:2b:85:20:b5:33:6e:05:
75:09:6e:4c:c2:b1:97:0a:32:61:1e:e8:c8:20:3f:cd:ba:41:
bd:e8:95:42:ad:b1:97:7c:83:e6:25:3a:7b:bc:02:8e:7b:55:
5c:f3:db:ab:cf:20:f4:5b:f2:00:5e:af:66:4f:68:98:27:4d:
f8:d8:25:5c:8e:f3:07:d6:f1:d0:0b:ab:f4:bf:29:86:c2:f2:
35:e7:8e:e5:29:0b:74:a7:b8:9e:eb:09:15:ee:24:89:a0:6d:
9f:e2:c8:b2:b9:3c:4e:07:ed:bf:ec:69:19:8d:e0:7d:ca:48:
e8:f0:96:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org