Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4e3a72a395b31ab81b5e3c655d1cc58f7f730a8d.roa
File: 4e3a72a395b31ab81b5e3c655d1cc58f7f730a8d.roa (raw, json)
Hash identifier: jw2lWT3fUDCNxLWv0xaJoGm7quPeAS07ELYDnKfs0ik=
Subject key identifier: 7B:9A:0A:6F:01:09:9A:E2:D7:72:69:C1:24:BF:80:4D:D1:B3:0E:A0
Certificate issuer: /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial: 0EFBA7
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4e3a72a395b31ab81b5e3c655d1cc58f7f730a8d.roa
Signing time: Wed 22 Mar 2023 21:00:30 +0000
ROA not before: Sun 09 Jan 2022 03:00:00 +0000
ROA not after: Sat 13 Jan 2024 03:00:00 +0000
asID: 23243
IP address blocks: 45.229.42.0/24 maxlen: 24
200.12.32.0/24 maxlen: 24
200.12.33.0/24 maxlen: 24
200.12.34.0/24 maxlen: 24
200.12.47.0/24 maxlen: 24
200.12.49.0/24 maxlen: 24
200.12.51.0/24 maxlen: 24
200.12.61.0/24 maxlen: 24
200.12.62.0/24 maxlen: 24
200.12.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 981927 (0xefba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Validity
Not Before: Jan 9 03:00:00 2022 GMT
Not After : Jan 13 03:00:00 2024 GMT
Subject: CN=4e3a72a395b31ab81b5e3c655d1cc58f7f730a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:18:b6:05:4a:2e:5b:3e:59:16:96:30:2f:
f3:ec:92:68:21:36:89:f6:de:9b:3a:32:15:aa:ee:
e1:b6:31:9c:32:b5:78:8e:59:92:b6:5e:8b:a8:7b:
71:99:ff:01:f1:ca:ce:1a:9a:9e:6e:34:c3:b9:fa:
7b:ab:b0:91:c7:33:2e:c5:62:21:58:25:ce:79:07:
63:d8:b2:a7:8a:42:d1:4d:e6:5b:96:3f:f4:87:1f:
c3:83:71:49:15:74:e6:71:ca:79:15:c9:1b:23:b4:
b7:2a:c0:d2:e3:40:1c:84:5a:ca:8a:3a:d6:e0:7e:
8c:65:c2:3b:dd:3a:48:5a:d7:72:24:08:81:a1:11:
97:d3:ef:19:b9:e0:3e:91:6a:b0:ad:e3:41:cc:f2:
4a:10:c8:58:c0:74:41:03:8e:77:c9:58:96:5b:c2:
42:b8:0c:e1:75:9c:c1:e5:ea:b2:55:98:db:87:6d:
06:3e:30:ed:c6:70:a3:76:17:7a:85:e0:f6:25:63:
ba:28:bf:2c:05:cb:a9:03:4c:72:a1:c9:9b:05:66:
a8:ed:38:08:cb:05:8d:7d:cf:ff:57:2a:97:69:b3:
af:ff:1d:d9:e5:94:64:ab:86:d0:5d:0a:74:6c:22:
78:67:94:58:3c:51:fb:01:77:0f:56:bb:06:f3:f7:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9A:0A:6F:01:09:9A:E2:D7:72:69:C1:24:BF:80:4D:D1:B3:0E:A0
X509v3 Authority Key Identifier:
keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4e3a72a395b31ab81b5e3c655d1cc58f7f730a8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.42.0/24
200.12.32.0-200.12.34.255
200.12.47.0/24
200.12.49.0/24
200.12.51.0/24
200.12.61.0-200.12.63.255
Signature Algorithm: sha256WithRSAEncryption
0e:98:a9:54:a1:a4:98:da:90:16:3b:df:ac:93:eb:ae:68:b3:
65:b7:54:47:6d:6f:00:c4:84:fb:b0:63:f5:34:52:95:17:e4:
43:70:18:55:26:48:af:34:d3:e4:ec:b9:02:8d:b0:9f:75:68:
db:0d:d7:ab:61:89:a8:fe:04:5f:30:bd:ba:1d:dd:ac:e1:80:
d7:3d:16:35:85:ba:88:b1:4a:35:59:01:02:d0:c7:87:f1:9b:
c9:40:f8:e4:6c:9a:ed:58:6a:06:66:6c:83:22:74:dd:82:83:
ec:6a:77:87:a1:fb:b2:f2:33:68:57:18:e3:ad:96:f1:3d:fe:
42:17:41:36:5f:2b:e2:20:c2:b6:e9:ff:35:10:d5:7a:39:fe:
4b:8c:28:98:df:f5:de:55:c1:95:4d:46:a8:75:1e:e6:d7:b9:
ca:d4:95:fd:b3:10:1d:ed:30:7d:b1:73:d3:da:18:ac:0a:72:
77:1b:ab:57:f9:9d:39:61:11:0c:53:3d:98:b7:5c:35:38:ed:
2d:ff:2a:1e:e1:d8:aa:36:09:81:0f:de:9e:46:25:59:a4:b4:
c6:8d:0f:0f:9f:4c:ae:2e:67:e7:92:86:76:62:0b:c9:a8:1b:
36:74:3f:dc:e2:03:bc:2a:9e:2c:06:9f:09:c7:57:d8:cc:85:
4c:39:a3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 21:38:49 2023 by rpki-client on console-ams.rpki-client.org