Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/35edef4607ceb13f5dd99eed3e7d2f3df8aaccc6.roa
File: 35edef4607ceb13f5dd99eed3e7d2f3df8aaccc6.roa (raw, json)
Hash identifier: zXrKNy4SUszC0VHydy0qMluJWk13Guv7qBCnrrLcj3g=
Subject key identifier: 6D:25:82:60:B9:D7:DF:19:7F:96:7C:D0:48:E3:6E:1E:5C:F2:34:ED
Certificate issuer: /CN=7eee271396be12d91db16eae558df87246f5bda1
Certificate serial: 1EB702
Authority key identifier: 91:72:48:99:ED:4D:B4:8B:0F:1B:E0:08:66:A4:53:15:F6:66:4B:A0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7eee271396be12d91db16eae558df87246f5bda1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/35edef4607ceb13f5dd99eed3e7d2f3df8aaccc6.roa
Signing time: Wed 15 Feb 2023 00:17:42 +0000
ROA not before: Mon 05 Apr 2021 03:00:00 +0000
ROA not after: Thu 06 Apr 2023 03:00:00 +0000
asID: 52250
IP address blocks: 200.9.165.0/24 maxlen: 24
200.9.166.0/24 maxlen: 24
200.9.167.0/24 maxlen: 24
200.9.168.0/24 maxlen: 24
166.114.1.0/24 maxlen: 24
166.114.8.0/23 maxlen: 24
2001:1378::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2012930 (0x1eb702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eee271396be12d91db16eae558df87246f5bda1
Validity
Not Before: Apr 5 03:00:00 2021 GMT
Not After : Apr 6 03:00:00 2023 GMT
Subject: CN=35edef4607ceb13f5dd99eed3e7d2f3df8aaccc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:e2:ac:13:d4:4e:79:4b:c8:ac:ae:48:bf:
13:81:d2:85:e0:0f:11:f7:4e:7b:78:eb:f5:73:d7:
96:b7:fa:87:46:9f:fd:b6:c1:d6:c7:be:82:90:89:
5b:9c:23:10:5e:46:4a:e2:cc:6d:32:cc:58:12:72:
fe:60:55:c4:c0:34:c4:81:cd:48:42:a3:dd:70:46:
e6:be:6b:65:87:5d:01:0b:58:9a:f3:39:14:5e:c8:
f6:48:6f:00:00:7f:f4:27:99:db:33:d2:dd:f5:76:
0b:1f:0e:b3:21:ac:cc:7d:a3:1b:ae:ff:11:82:d9:
8e:71:12:0a:dd:7a:a5:56:4f:ab:58:d4:a8:45:28:
b1:de:d2:1d:5c:70:03:e4:72:33:3f:6a:76:06:45:
63:ea:c1:22:48:af:31:aa:92:36:a5:e1:20:b8:d1:
66:f6:bb:d3:43:9e:d0:ad:a1:93:df:b2:1a:1b:3b:
66:f9:86:1a:57:cf:fa:f8:c6:07:61:1d:b9:bf:75:
df:a7:16:2a:ff:8f:ed:f2:68:63:1d:b4:a7:9d:57:
6b:08:a7:e2:17:c1:d4:6c:85:e2:6b:84:31:be:54:
eb:8b:11:37:be:11:e4:e0:12:42:ae:fb:f2:97:7b:
34:a3:92:59:d7:d6:de:b7:0a:21:b7:d6:90:ba:bc:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:25:82:60:B9:D7:DF:19:7F:96:7C:D0:48:E3:6E:1E:5C:F2:34:ED
X509v3 Authority Key Identifier:
keyid:91:72:48:99:ED:4D:B4:8B:0F:1B:E0:08:66:A4:53:15:F6:66:4B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7eee271396be12d91db16eae558df87246f5bda1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/35edef4607ceb13f5dd99eed3e7d2f3df8aaccc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0269a6a4-877f-439e-ac3e-8766c178f941/7eee271396be12d91db16eae558df87246f5bda1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.114.1.0/24
166.114.8.0/23
200.9.165.0-200.9.168.255
IPv6:
2001:1378::/32
Signature Algorithm: sha256WithRSAEncryption
d8:ed:c9:86:06:bf:6b:f9:33:f6:8f:80:49:bc:67:b0:dc:62:
f9:e0:95:6f:0a:f5:5d:d0:fb:60:b0:e7:5b:e4:96:ac:38:e2:
f0:1e:f2:d5:16:1d:92:8f:31:07:35:28:3b:62:65:e6:d1:4f:
b2:b1:25:e6:2d:63:7f:0d:b7:f9:57:25:58:e9:98:27:83:03:
d1:e7:13:62:c4:be:19:d2:c4:71:23:5f:b7:cb:7a:30:0f:7a:
aa:e1:08:ae:b1:46:03:7f:f4:4f:1c:cf:29:f1:9d:ef:4e:63:
02:7d:9b:bd:7e:ae:2a:30:8f:e3:e7:bd:4f:ea:47:c0:1c:5e:
8c:2c:12:d7:ce:0b:10:04:3e:b8:2b:97:83:44:87:ca:8b:f8:
9b:6b:b3:59:85:36:93:f8:a2:0b:b3:44:d7:31:03:1d:2f:e2:
61:1e:ba:3c:23:6f:a4:65:58:97:74:87:77:fb:62:47:07:fb:
1d:f7:e7:fc:2a:13:f0:62:69:da:52:a9:a6:29:8b:84:74:d5:
dc:14:22:71:ff:40:dc:c9:57:96:75:e8:66:ec:ca:9a:f2:c2:
c0:01:f9:11:75:d9:6c:a2:aa:84:80:98:c1:2e:30:bc:a8:e8:
91:8d:f8:f2:6e:57:00:84:b3:32:7c:06:7f:e3:34:e2:d0:99:
34:6a:bf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org