Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/3eddb096c99ffd8a9ab09a49953cb3d96e5d142f.roa
File: 3eddb096c99ffd8a9ab09a49953cb3d96e5d142f.roa (raw, json)
Hash identifier: RQ2F+kbLtSOESh5XV+MF12/zR2l3+8QuoMuIRGZzVKA=
Subject key identifier: 8C:20:38:07:D7:23:1D:30:62:2C:9D:EA:74:75:C5:82:F1:76:F9:18
Certificate issuer: /CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
Certificate serial: 127C72
Authority key identifier: E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/3eddb096c99ffd8a9ab09a49953cb3d96e5d142f.roa
Signing time: Thu 26 Aug 2021 02:25:31 +0000
ROA not before: Wed 09 Jun 2021 03:00:00 +0000
ROA not after: Tue 09 Jun 2026 03:00:00 +0000
asID: 7049
IP address blocks: 200.59.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1211506 (0x127c72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a3e63d1966870c34f83b79e6705d8dc3f9b809
Validity
Not Before: Jun 9 03:00:00 2021 GMT
Not After : Jun 9 03:00:00 2026 GMT
Subject: CN=3eddb096c99ffd8a9ab09a49953cb3d96e5d142f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:f8:62:4a:5f:40:69:4d:fb:76:2f:9c:87:
d9:a8:96:d8:c6:ec:4b:15:d2:20:7f:a0:77:81:e6:
9e:59:16:01:13:17:6a:78:4c:1e:1c:af:66:ab:bc:
3e:3a:34:05:0d:59:04:38:e9:5d:34:e6:61:fc:a8:
4f:58:ba:b6:b4:35:81:68:74:63:c0:9b:f9:14:66:
da:61:dc:d4:5d:50:0d:c8:6a:25:8a:94:04:8a:03:
e8:3e:42:9f:9b:ec:1f:b0:62:2e:27:8a:ac:37:da:
9e:1a:fb:22:11:89:da:53:34:87:68:24:44:2a:cb:
c2:4b:4b:d8:38:1d:40:80:fe:ac:a6:73:57:6c:ae:
e6:59:21:b6:af:51:51:4c:ff:5c:38:a8:c3:5e:b2:
73:b7:36:41:d7:73:84:48:8f:d9:74:a3:28:e5:b1:
7b:1b:67:af:02:c2:99:c5:f9:e6:ee:be:97:68:ff:
33:08:46:bb:16:35:fc:05:ba:7c:c6:d1:7e:0f:11:
82:5e:0a:56:89:99:34:68:05:02:14:8a:70:e8:0e:
e8:bb:06:d7:d9:83:6e:c3:be:99:7d:39:0d:92:b8:
bd:12:20:e9:4b:ba:13:a9:7a:95:55:0f:3a:c0:ac:
af:2a:82:5f:77:4a:e2:51:46:ac:35:28:27:43:9f:
62:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:20:38:07:D7:23:1D:30:62:2C:9D:EA:74:75:C5:82:F1:76:F9:18
X509v3 Authority Key Identifier:
keyid:E7:4F:4B:4C:08:78:4E:1A:4E:22:4C:95:7A:B5:B7:5F:81:D9:24:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07a3e63d1966870c34f83b79e6705d8dc3f9b809.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/3eddb096c99ffd8a9ab09a49953cb3d96e5d142f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0cac3b82-f488-4df7-bc67-ad856a12aa43/07a3e63d1966870c34f83b79e6705d8dc3f9b809.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.59.32.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:74:c0:ee:6f:79:b1:ee:22:54:3a:d6:bd:5d:e9:40:52:ec:
f7:9e:e5:e7:fb:b5:48:86:cd:f7:a6:d6:73:16:d5:f8:1a:f3:
e7:61:8e:a3:a2:bb:c4:32:b2:93:a8:05:83:ff:d6:af:1a:5f:
b3:df:cf:53:33:45:19:1b:3b:b7:14:09:c8:a8:61:71:22:b5:
ab:18:8c:36:c0:06:66:fb:25:ca:25:56:f9:e8:06:54:7f:ea:
09:a1:f0:c4:d7:26:d3:fa:67:c6:1e:6a:ea:a7:17:37:6c:eb:
b2:60:06:f9:c2:e0:6f:74:d8:b1:58:bc:fd:8a:2d:ab:6a:98:
6d:a7:81:7e:55:47:92:27:43:8e:d6:f4:b7:fb:e0:01:9e:f0:
73:76:02:03:8b:68:37:77:e4:f0:45:8d:c6:bb:5d:0d:9f:9b:
0b:7a:61:7a:d2:c8:f1:b5:02:f8:3b:4e:54:cc:57:46:55:3f:
9d:95:07:69:88:ea:3d:17:43:03:58:67:e1:a2:5a:56:c6:be:
4e:c3:31:ce:e1:53:6b:bc:ee:d3:6e:f2:a8:f1:72:8b:3d:68:
9a:0e:c8:04:cb:cb:b1:f7:dd:5f:1b:8d:97:78:5d:02:03:bf:
b5:04:a0:fe:9d:54:ab:28:b3:99:b5:59:ec:77:f2:aa:34:00:
c5:7f:58:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 19:10:51 2023 by rpki-client on console-ams.rpki-client.org