Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/ebc2bcbb96b8a84e0f96d81d2f4c7a3565ba579a.roa
File: ebc2bcbb96b8a84e0f96d81d2f4c7a3565ba579a.roa (raw, json)
Hash identifier: 2LRdMEsjteENnNnMwkToBYp8ot9QdYNDaoSxn89/wTA=
Subject key identifier: 08:EC:0C:B4:01:86:9E:03:52:4D:C0:D5:D9:23:D6:30:A3:63:62:B3
Certificate issuer: /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial: 0A9788
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/ebc2bcbb96b8a84e0f96d81d2f4c7a3565ba579a.roa
Signing time: Wed 28 Sep 2022 02:27:38 +0000
ROA not before: Thu 13 Jan 2022 03:00:00 +0000
ROA not after: Sat 13 Jan 2024 03:00:00 +0000
asID: 23243
IP address blocks: 200.12.32.0/24 maxlen: 24
200.12.33.0/24 maxlen: 24
200.12.34.0/24 maxlen: 24
200.12.47.0/24 maxlen: 24
200.12.62.0/24 maxlen: 24
200.12.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694152 (0xa9788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Validity
Not Before: Jan 13 03:00:00 2022 GMT
Not After : Jan 13 03:00:00 2024 GMT
Subject: CN=ebc2bcbb96b8a84e0f96d81d2f4c7a3565ba579a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:05:72:52:ad:23:13:b9:f4:4f:ce:0f:3d:fc:
e9:03:78:41:c3:21:49:bf:30:2a:e3:6b:45:f3:cf:
67:8d:c4:70:6b:64:c1:2c:e3:88:e2:73:eb:2b:4b:
ca:6a:17:c7:2d:1b:4f:77:9a:7f:44:5b:a3:53:7a:
42:74:01:f0:f0:15:f3:fe:d8:e7:65:b4:90:1d:73:
8f:b1:a0:6b:78:5f:75:4e:3d:bd:27:a2:5e:1b:d4:
58:51:ee:6e:6b:3e:8e:e2:d2:10:6d:b6:f6:38:1f:
df:f5:9f:8c:f2:bd:01:51:1d:3a:e3:1e:32:1c:db:
ec:4c:5f:84:1d:7e:ec:70:40:ae:e7:88:98:de:7a:
dc:d8:71:8d:cd:5b:7f:c4:ad:38:df:46:ed:ed:d9:
50:32:df:9d:00:78:da:12:0c:c0:e2:6c:16:94:0a:
03:03:b5:2e:76:5e:28:3f:da:a1:a2:4b:da:bf:38:
5d:02:9c:02:02:ca:dc:da:e8:b0:40:73:2f:2f:0b:
a3:40:07:f5:99:95:ce:08:18:4e:91:6a:73:00:35:
32:8c:09:36:7d:59:6a:86:0d:ff:6d:1e:df:e8:3e:
65:15:72:21:7a:81:f2:a8:d5:dd:b2:86:ca:4f:b5:
37:8c:95:85:75:b0:f2:4b:22:0d:b0:36:db:05:16:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EC:0C:B4:01:86:9E:03:52:4D:C0:D5:D9:23:D6:30:A3:63:62:B3
X509v3 Authority Key Identifier:
keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/ebc2bcbb96b8a84e0f96d81d2f4c7a3565ba579a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.32.0-200.12.34.255
200.12.47.0/24
200.12.62.0/23
Signature Algorithm: sha256WithRSAEncryption
87:3e:fc:cf:23:70:68:de:af:f6:ba:e9:5b:09:94:3e:49:fa:
f0:3e:2d:b0:d5:cd:24:c5:e9:d4:54:c3:35:d6:2f:72:1e:d7:
18:d5:07:4f:ef:79:b8:03:4f:25:68:c3:23:67:ee:b1:4e:06:
26:98:fb:c8:e4:03:ce:a3:ae:8d:8d:ba:87:37:6f:db:c8:e6:
4c:f7:aa:7b:2e:4a:0a:e1:56:c5:2d:0c:b3:48:55:3a:19:fe:
b7:55:44:3e:a2:cd:0d:76:1f:03:e6:b1:9d:a3:6d:df:7c:0d:
88:04:f8:82:cc:43:17:1e:f4:22:4e:60:7a:5f:70:0e:fd:ae:
7d:5c:4b:62:33:e4:15:55:b8:c5:16:1f:00:f0:0a:c8:87:2d:
44:ba:e6:fd:9f:b6:39:23:0b:dd:60:e3:6a:f7:f9:f2:92:1e:
07:ae:8b:d0:d0:b2:2e:ab:f8:98:ba:bc:df:57:15:5a:f5:92:
81:b1:76:1c:96:bb:9e:59:51:f5:b1:1f:d0:f2:f2:fb:29:d9:
c9:71:4c:20:93:73:89:62:02:a1:95:5f:58:e3:63:74:52:42:
31:17:54:c9:d8:49:2a:4a:19:78:46:be:a6:ea:4b:e4:5c:bc:
1e:50:6c:f8:ce:01:b5:7a:fe:30:0a:ee:ef:99:d0:0c:7f:5a:
a8:15:03:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org