Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35b3235e-ce23-43d4-8267-464cc17e23e3/efe705f2551c13c336779e30147928870049e6de.roa
File: efe705f2551c13c336779e30147928870049e6de.roa (raw, json)
Hash identifier: erGrWuqyk3MJQuwCNqSHHSvjof8C+IQUzgD26980Re4=
Subject key identifier: B7:1E:B7:3F:AE:1B:C5:35:17:36:C3:93:AA:BD:A8:49:DD:D7:F6:92
Certificate issuer: /CN=a00be52fb1703479378bccb8b91bc50cf6d4e5d6
Certificate serial: 20575F
Authority key identifier: 65:65:5A:2A:55:22:36:73:F1:DA:E0:B2:FB:9D:DF:6C:05:D0:F2:F3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00be52fb1703479378bccb8b91bc50cf6d4e5d6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35b3235e-ce23-43d4-8267-464cc17e23e3/efe705f2551c13c336779e30147928870049e6de.roa
Signing time: Tue 02 May 2023 23:00:58 +0000
ROA not before: Mon 01 May 2023 23:00:58 +0000
ROA not after: Fri 02 May 2025 23:00:58 +0000
asID: 2549
IP address blocks: 148.202.0.0/16 maxlen: 17
200.39.160.0/19 maxlen: 19
207.249.224.0/19 maxlen: 19
2001:1210::/32 maxlen: 33
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119519 (0x20575f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00be52fb1703479378bccb8b91bc50cf6d4e5d6
Validity
Not Before: May 1 23:00:58 2023 GMT
Not After : May 2 23:00:58 2025 GMT
Subject: CN=efe705f2551c13c336779e30147928870049e6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:86:8f:bb:b5:cc:fc:75:b5:e0:b2:3f:6b:
06:83:31:7a:57:b6:a5:d4:d5:0c:d7:b8:d2:6c:2e:
c1:49:e0:86:76:47:43:31:87:13:16:20:50:be:4a:
69:80:8b:60:a2:cd:f1:f8:4b:1c:08:15:12:3a:81:
e1:3f:bc:bd:1e:d7:c0:d0:60:ba:77:16:aa:71:da:
0f:16:e4:c8:1e:39:ef:ba:da:9c:cc:13:9b:25:09:
8d:44:38:36:c7:2b:b4:66:7a:3e:65:0a:dd:42:45:
36:31:cb:d6:25:c2:c0:34:13:16:be:05:70:ae:27:
b1:65:52:a0:7d:46:61:43:2c:55:55:1a:75:9e:12:
db:03:69:e4:9f:a1:5c:4b:00:89:f4:74:4b:49:b2:
f4:0e:26:74:15:14:30:2e:b9:a3:11:20:a0:01:f3:
66:4e:82:a5:a1:ea:12:2e:ac:ae:3d:fe:18:68:ee:
30:d9:d4:17:92:65:56:ae:68:a1:61:a9:66:c2:b5:
42:0a:7b:f2:87:72:47:fe:6b:3c:bb:6f:c8:0a:80:
ee:e6:3b:d7:8d:0a:11:af:90:af:8f:3a:d5:c8:b1:
6f:c4:dd:23:91:eb:f5:cf:d8:da:57:41:d3:55:12:
13:72:7a:e1:7a:4e:b4:f9:7b:05:2a:34:a8:3f:de:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1E:B7:3F:AE:1B:C5:35:17:36:C3:93:AA:BD:A8:49:DD:D7:F6:92
X509v3 Authority Key Identifier:
keyid:65:65:5A:2A:55:22:36:73:F1:DA:E0:B2:FB:9D:DF:6C:05:D0:F2:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00be52fb1703479378bccb8b91bc50cf6d4e5d6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35b3235e-ce23-43d4-8267-464cc17e23e3/efe705f2551c13c336779e30147928870049e6de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/35b3235e-ce23-43d4-8267-464cc17e23e3/a00be52fb1703479378bccb8b91bc50cf6d4e5d6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.202.0.0/16
200.39.160.0/19
207.249.224.0/19
IPv6:
2001:1210::/32
Signature Algorithm: sha256WithRSAEncryption
47:33:0b:cf:5f:69:18:36:2f:88:29:5e:04:c3:be:8b:fe:8c:
c7:3a:8a:36:42:77:48:cb:d6:e2:77:f1:4f:6e:00:26:0c:12:
bc:37:65:6f:f9:a1:bb:8b:e3:5d:2f:be:cd:d5:58:9e:c3:b5:
d7:ea:a1:cb:a6:4d:2c:2c:fa:67:aa:cd:8a:19:80:9e:67:78:
ec:1c:84:7c:2e:5f:be:bc:71:ee:e4:59:ff:c5:02:d5:98:bc:
a8:6d:69:c2:3d:86:67:fe:cc:47:55:a3:03:82:79:f3:f7:ec:
a6:3e:35:70:8b:e4:57:fd:a5:e1:3d:d5:27:8f:57:b1:0d:3a:
3b:e1:e0:55:6b:8a:6c:84:b0:2a:ea:91:27:40:00:2b:1b:bb:
53:b1:e8:8e:c5:39:77:41:22:14:ef:0b:b6:0e:bb:5c:17:ac:
79:20:7a:61:6e:57:6c:c6:32:53:ab:bc:a9:1d:82:65:1a:51:
80:37:3a:77:7d:99:bc:ff:a1:be:ad:55:4b:93:45:3c:f2:21:
8e:6b:00:89:3a:15:f2:b6:88:1b:a8:62:85:a5:ba:81:67:06:
80:82:71:3e:8a:12:9b:f1:dc:d9:a6:3c:01:53:2a:a4:97:51:
ba:19:01:c1:ba:65:76:c0:e4:79:d9:b8:17:ae:f8:f2:a5:88:
5c:20:1c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org