Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2183E26BF57351246A34CD802A78C62922AC228501EEA283942208760FD4ABDE/0/3230302e3232392e3235322e302f32322d3232203d3e203532343635.roa
File: 3230302e3232392e3235322e302f32322d3232203d3e203532343635.roa (raw, json)
Hash identifier: dDjuWpEhtO5XC7mzDTP0wC7Ah2eaNnamukXze2GLBzs=
Subject key identifier: 82:7C:92:AB:66:76:7B:F8:FD:77:DC:E2:7F:15:17:01:48:8F:33:F1
Certificate issuer: /CN=D0060F910CAB2F446C5D976795839526B5590B8C
Certificate serial: 7AEF2AC6A25A6EE622B431C8CB8F2C1416A1E87E
Authority key identifier: D0:06:0F:91:0C:AB:2F:44:6C:5D:97:67:95:83:95:26:B5:59:0B:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0060F910CAB2F446C5D976795839526B5590B8C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2183E26BF57351246A34CD802A78C62922AC228501EEA283942208760FD4ABDE/0/3230302e3232392e3235322e302f32322d3232203d3e203532343635.roa
Signing time: Mon 01 Jul 2024 01:45:00 +0000
ROA not before: Mon 01 Jul 2024 01:40:00 +0000
ROA not after: Mon 30 Jun 2025 01:45:00 +0000
asID: 52465
IP address blocks: 200.229.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jul 2024 11:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ef:2a:c6:a2:5a:6e:e6:22:b4:31:c8:cb:8f:2c:14:16:a1:e8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0060F910CAB2F446C5D976795839526B5590B8C
Validity
Not Before: Jul 1 01:40:00 2024 GMT
Not After : Jun 30 01:45:00 2025 GMT
Subject: CN=827C92AB66767BF8FD77DCE27F151701488F33F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:a5:1a:46:f2:20:6e:0e:2c:23:bb:42:85:
dd:0c:d1:2d:c6:63:af:59:f4:6e:6d:b5:be:f5:e5:
08:8c:82:37:4a:da:e0:17:6e:d9:84:ea:0c:c8:cf:
06:39:ce:36:a1:42:e8:34:9d:cf:89:99:3f:e9:c7:
d3:5b:51:8e:72:2e:b2:12:2a:4e:bf:11:af:2a:e7:
43:e7:be:3b:ec:c4:50:04:1d:1a:71:79:1b:b5:91:
29:dd:f7:9e:f8:31:de:04:19:a0:e4:5b:2f:a2:5a:
20:b1:3d:8f:4f:c2:81:e2:da:15:89:11:f9:1d:34:
d7:5f:2c:51:8c:f2:59:fa:24:26:80:19:3c:2d:85:
e0:a8:3a:9a:21:74:11:68:f1:59:76:69:b9:35:47:
c5:63:f0:3d:61:13:e0:c6:71:64:be:2b:8d:9c:fd:
e1:a6:76:c3:ab:59:a6:ca:53:0a:17:2a:76:fc:dc:
9f:5a:40:07:6a:06:46:6c:e7:f0:29:f7:4b:56:48:
0e:6f:a0:20:84:69:c2:f1:e6:bf:05:4e:68:c2:19:
71:bb:3b:d7:2e:1f:7d:33:9b:41:6d:8e:eb:dc:77:
50:2f:e2:32:e4:75:ee:a6:71:1a:55:44:67:a9:dd:
6e:8c:1f:23:01:a7:ff:c1:6d:92:bd:14:3a:70:26:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7C:92:AB:66:76:7B:F8:FD:77:DC:E2:7F:15:17:01:48:8F:33:F1
X509v3 Authority Key Identifier:
keyid:D0:06:0F:91:0C:AB:2F:44:6C:5D:97:67:95:83:95:26:B5:59:0B:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2183E26BF57351246A34CD802A78C62922AC228501EEA283942208760FD4ABDE/0/D0060F910CAB2F446C5D976795839526B5590B8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0060F910CAB2F446C5D976795839526B5590B8C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2183E26BF57351246A34CD802A78C62922AC228501EEA283942208760FD4ABDE/0/3230302e3232392e3235322e302f32322d3232203d3e203532343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.229.252.0/22
Signature Algorithm: sha256WithRSAEncryption
85:67:7c:dc:aa:ec:f0:81:3f:0c:46:e3:84:d4:86:d7:43:bb:
39:27:a3:7b:30:b1:1e:e8:26:7f:da:1d:30:22:db:7a:11:71:
1d:f6:4f:99:97:8c:e0:7c:76:e2:70:cc:f3:93:02:2c:84:38:
fc:66:3b:ad:78:74:72:8b:40:42:95:c8:29:c9:b0:c2:af:b4:
e6:3f:24:1c:a4:5b:bd:4e:87:61:78:7c:0f:54:94:5c:1b:2c:
e3:27:ff:a5:e8:bd:29:d2:1b:22:97:ca:f3:3b:63:78:d6:6b:
6d:bd:e6:97:c7:6f:24:5c:5c:48:f5:2f:3a:5d:96:a9:5b:da:
63:b5:f0:2c:bb:b7:0d:c0:17:39:34:d4:78:57:b1:8e:6f:ba:
32:aa:b9:57:ac:8b:0c:fe:8d:29:cb:78:2b:be:0c:47:02:cf:
3f:48:88:bc:89:35:f8:ec:cb:62:db:07:be:90:d1:82:fd:fa:
0f:15:66:c4:0e:74:b4:b1:6a:df:24:42:c5:c1:de:17:74:21:
67:71:f3:e7:c7:62:9a:51:08:83:d6:34:1b:ab:85:a6:68:2e:
78:d8:7a:fd:69:02:67:33:4c:25:1f:2e:01:a0:ef:94:95:99:
6f:49:4a:ed:06:80:63:e3:dc:6e:1c:87:fb:77:33:d1:25:2b:
fa:30:8d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 14:21:10 2024 by rpki-client on console-ams.rpki-client.org