Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/20928b0088a5b18d519c837865e1a53c30c1324c.roa
File: 20928b0088a5b18d519c837865e1a53c30c1324c.roa (raw, json)
Hash identifier: s9xun0pMi/kTnH7nZPXiVmeH3R5++ZTiwzH7DAb2BJg=
Subject key identifier: 59:C6:E8:50:3A:2E:E8:9E:D7:24:98:88:0E:DF:13:0C:93:6D:EE:17
Certificate issuer: /CN=8b93ccfac824196843701fdd92655044ac70189f
Certificate serial: 0EE8
Authority key identifier: 9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/20928b0088a5b18d519c837865e1a53c30c1324c.roa
Signing time: Tue 01 Jun 2021 13:37:14 +0000
ROA not before: Tue 01 Jun 2021 03:00:00 +0000
ROA not after: Thu 01 Jun 2023 03:00:00 +0000
asID: 3356
IP address blocks: 200.1.175.0/24 maxlen: 24
201.221.124.0/24 maxlen: 24
201.221.125.0/24 maxlen: 24
179.0.27.0/24 maxlen: 24
201.221.124.0/23 maxlen: 23
2801:15:4000::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3816 (0xee8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93ccfac824196843701fdd92655044ac70189f
Validity
Not Before: Jun 1 03:00:00 2021 GMT
Not After : Jun 1 03:00:00 2023 GMT
Subject: CN=20928b0088a5b18d519c837865e1a53c30c1324c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:a3:d2:0f:fa:d5:e0:bc:7e:26:8e:c5:ef:
b0:e1:51:23:0b:8e:90:84:4b:14:b1:83:3f:41:87:
f5:79:c0:ba:07:e6:3f:b9:1e:0a:61:d3:5b:59:e9:
f8:8a:b3:a6:4c:f7:f8:19:86:2c:b0:35:c0:de:b2:
99:42:56:c7:6e:cd:fc:f5:7c:93:ca:77:62:21:a5:
3b:9c:79:08:5b:72:51:b5:8b:b1:8f:28:41:27:7a:
7f:41:55:bb:83:86:81:59:44:29:42:97:98:d7:ea:
b7:e1:16:13:cd:02:4b:53:82:cf:e7:4d:55:dd:d6:
d4:65:fe:a0:cb:42:0d:36:15:76:52:f4:d3:d7:fa:
12:2c:1c:3b:06:80:08:39:2d:45:2b:9f:f9:7e:e6:
e4:c0:3a:49:46:b0:85:6f:e0:0e:84:e0:6f:a1:1a:
83:d6:2c:4d:14:e5:d8:fe:8d:60:c7:74:f3:8c:43:
99:c6:f3:8c:c6:f8:53:d5:ba:67:87:2a:2e:f5:0f:
ca:db:a3:a1:21:4e:e0:60:8d:e3:c5:90:f0:56:7c:
de:f0:86:b0:b8:ea:bf:7c:a4:13:40:c5:ab:69:76:
6b:62:a8:a2:77:83:64:0a:be:0e:8a:4d:74:86:cf:
77:51:5b:87:6c:b2:f9:01:04:cd:f9:c4:ad:61:cb:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C6:E8:50:3A:2E:E8:9E:D7:24:98:88:0E:DF:13:0C:93:6D:EE:17
X509v3 Authority Key Identifier:
keyid:9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/20928b0088a5b18d519c837865e1a53c30c1324c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/8b93ccfac824196843701fdd92655044ac70189f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.27.0/24
200.1.175.0/24
201.221.124.0/23
IPv6:
2801:15:4000::/48
Signature Algorithm: sha256WithRSAEncryption
6e:46:e4:a8:67:c0:27:d1:e9:80:1a:47:77:d1:23:30:0c:34:
ba:d9:12:ee:ab:51:32:11:eb:a0:76:9d:20:32:92:bc:b5:38:
1f:5c:13:ce:16:46:a3:bb:2a:ec:ea:d2:51:79:22:e1:f1:ac:
c5:5f:22:7d:6b:2b:3e:8b:31:0c:b1:21:76:64:d0:17:04:b4:
6f:72:b3:a4:aa:59:2c:c3:f6:25:58:b4:07:7a:ad:71:e8:b3:
10:67:4a:f2:b3:96:d9:74:36:cd:5e:5f:d8:52:48:2d:57:3d:
64:1e:f0:24:09:37:45:17:07:ee:04:8b:33:05:e0:7f:ab:f0:
4b:17:21:85:c5:e2:b3:f9:0d:f2:bf:33:81:6c:8a:cc:13:b3:
48:df:66:20:72:70:d0:5a:dc:a6:c2:f5:8b:58:89:23:7d:70:
9e:d3:7a:e1:06:ec:cc:ca:77:39:14:1f:1c:55:9a:2c:b3:4d:
c8:f7:49:9c:39:ee:8b:c5:40:d5:06:69:d8:63:ac:4f:94:7b:
b0:e7:68:c2:45:fe:52:dd:2d:ef:e1:20:47:f7:66:a8:ec:f6:
7f:03:75:01:e1:04:06:6d:ab:79:fd:3e:ed:c9:c3:2d:d1:27:
1b:cb:9c:61:93:3e:fd:72:90:49:7d:9f:ef:c5:e0:53:e3:83:
2a:08:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:13 2023 by rpki-client on console-fra.rpki-client.org