Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e392e3135372e302f32342d3234203d3e203532333736.roa
File: 3230302e392e3135372e302f32342d3234203d3e203532333736.roa (raw, json)
Hash identifier: rVZkS4/3j/YXDIBAgUQbKLV/4W81NqdYkAlkCiNotIs=
Subject key identifier: DE:9A:D7:71:D1:72:D7:CE:C3:8E:E1:E1:53:8D:64:84:D2:A1:0E:1A
Certificate issuer: /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial: 5C002933B1501DEDEA69551C431C89AE1D9DA8F7
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e392e3135372e302f32342d3234203d3e203532333736.roa
Signing time: Tue 05 Mar 2024 18:16:06 +0000
ROA not before: Tue 05 Mar 2024 18:11:06 +0000
ROA not after: Tue 04 Mar 2025 18:16:06 +0000
asID: 52376
IP address blocks: 200.9.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 12:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:00:29:33:b1:50:1d:ed:ea:69:55:1c:43:1c:89:ae:1d:9d:a8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Validity
Not Before: Mar 5 18:11:06 2024 GMT
Not After : Mar 4 18:16:06 2025 GMT
Subject: CN=DE9AD771D172D7CEC38EE1E1538D6484D2A10E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:76:85:53:cf:63:e0:4f:ab:17:e4:02:8b:
c5:1f:92:0c:7b:ac:ae:57:15:a4:0d:e8:67:5f:44:
02:6b:93:b3:37:d9:36:07:84:8b:31:d4:14:3e:25:
48:31:db:c6:fb:df:90:61:b9:dd:ee:8c:87:dd:07:
2e:78:25:6b:c9:08:b1:3a:fd:31:b1:b3:98:f5:59:
ad:27:b7:c2:4e:f1:d8:93:cb:74:3b:7f:1b:5a:93:
6f:52:26:73:2b:bc:c3:5d:1b:20:fa:e3:17:86:92:
79:24:c2:c1:20:b1:33:ef:58:c1:25:44:9e:ee:f9:
f0:52:00:d8:f3:4a:7d:e7:e4:b9:19:35:c1:c5:86:
23:01:f4:b2:89:d2:f5:72:ae:ec:96:21:6c:48:df:
0e:4a:16:6e:c7:6b:e4:ad:43:fa:c4:08:aa:01:49:
33:1a:4e:bb:63:49:43:ec:76:b9:3d:5c:00:6b:4f:
cb:b3:61:83:be:62:ca:b7:69:b8:83:0c:07:a8:64:
ce:c6:13:bd:4e:8f:f3:26:6a:15:0c:a7:74:5e:a2:
75:32:bf:96:2e:4e:65:ce:59:3e:9f:87:25:6b:29:
45:ab:d6:97:ea:ef:41:79:26:75:48:bb:8b:34:38:
4c:ab:f4:43:1d:e2:a8:39:65:f5:9c:8d:af:c5:f5:
90:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9A:D7:71:D1:72:D7:CE:C3:8E:E1:E1:53:8D:64:84:D2:A1:0E:1A
X509v3 Authority Key Identifier:
keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e392e3135372e302f32342d3234203d3e203532333736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.157.0/24
Signature Algorithm: sha256WithRSAEncryption
71:82:29:e2:b3:fa:3c:6e:32:5b:f0:51:8b:c3:22:5b:ac:2b:
f5:eb:19:80:27:ad:e3:0c:e0:17:fa:02:52:28:c3:9d:64:d7:
fe:d1:8c:14:fc:43:de:ad:96:d5:42:52:ca:cf:d6:c4:3f:a4:
67:a9:fe:3e:88:10:5b:e0:10:a0:9b:8a:27:ff:eb:fd:99:f2:
54:3c:a5:1b:be:aa:b5:4a:fa:97:86:ff:af:69:44:4d:5c:ee:
64:4d:57:09:56:04:68:22:19:c2:80:1c:2d:e4:16:24:b9:9c:
66:70:71:c9:62:97:4f:a8:a8:3b:bb:2e:1c:a8:90:01:28:05:
d8:31:6b:6e:59:24:52:b2:fe:61:c0:f7:ea:a6:f4:22:1d:11:
46:e1:cf:a8:48:68:78:d0:33:92:07:9b:a4:2e:3a:39:21:af:
c2:7b:31:f0:00:d9:6a:17:33:08:f3:b5:07:00:6e:3a:15:84:
a8:4c:2d:58:52:34:33:9b:78:a1:07:40:25:46:af:e6:e9:d0:
0b:96:3b:9e:8f:ed:41:de:6a:4b:02:20:44:13:62:90:e4:e1:
91:99:90:ef:d9:87:38:db:7d:ad:fa:33:a2:98:73:6f:f2:c5:
47:16:51:ef:48:32:f9:53:02:59:97:10:e1:eb:10:1d:03:ae:
2c:c9:c0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org