Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/66333649e02e62368284bc9bab049a55cd8bddf8.roa
File: 66333649e02e62368284bc9bab049a55cd8bddf8.roa (raw, json)
Hash identifier: HX0BeT40A8RE007Gk3URvBX2qBnMszUwE54x0gHLUT0=
Subject key identifier: A4:F2:41:E9:BA:A0:A7:1C:81:64:2D:13:88:9D:E0:35:5A:7A:BC:0C
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 1BA0E8
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/66333649e02e62368284bc9bab049a55cd8bddf8.roa
Signing time: Mon 05 Sep 2022 21:12:11 +0000
ROA not before: Mon 05 Sep 2022 21:09:30 +0000
ROA not after: Thu 05 Sep 2024 21:09:30 +0000
asID: 263741
IP address blocks: 200.123.34.0/23 maxlen: 23
200.123.34.0/24 maxlen: 24
200.123.35.0/24 maxlen: 24
200.123.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1810664 (0x1ba0e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Sep 5 21:09:30 2022 GMT
Not After : Sep 5 21:09:30 2024 GMT
Subject: CN=66333649e02e62368284bc9bab049a55cd8bddf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bb:46:ea:8d:ec:f3:8c:00:f0:fd:a7:68:ad:
6f:26:93:3a:9f:e8:8f:b8:84:c2:1a:d0:a7:5c:3d:
c5:bd:2b:0c:da:33:ec:77:20:17:4d:58:61:7b:85:
c3:2b:f3:eb:42:6b:63:fe:d7:6a:a5:8a:03:e0:e7:
2d:d6:e4:af:92:6c:4d:23:e4:f4:8c:dd:19:be:fd:
48:84:56:11:03:90:a1:17:f5:6a:75:06:37:27:71:
91:b6:73:e9:20:e7:50:cd:13:6c:3e:35:7e:19:e9:
88:60:8c:79:4f:42:fb:0d:dd:16:5f:2f:f6:33:b0:
11:5b:e7:9d:f8:af:2a:f1:3e:aa:77:1e:e5:24:fd:
e8:e1:76:da:b8:7e:0b:24:d1:83:ef:ca:f5:bd:4c:
b2:d4:cd:6c:83:4d:5e:3e:05:92:0b:2c:fb:c0:fb:
0b:48:9e:7a:a6:a2:cc:8a:66:05:25:d7:9a:71:ac:
78:56:ff:88:b1:e2:18:f8:85:90:6c:e8:c0:26:bc:
1b:25:08:4e:07:09:46:2c:37:9a:1a:61:28:bd:e1:
52:48:24:c0:32:f9:b3:4e:29:6d:57:a4:14:3e:5f:
6d:58:bf:10:71:e4:84:3c:55:52:bb:1a:4a:a7:99:
f2:02:fa:70:da:1a:a3:5b:73:27:3c:ca:12:2e:e0:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F2:41:E9:BA:A0:A7:1C:81:64:2D:13:88:9D:E0:35:5A:7A:BC:0C
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/66333649e02e62368284bc9bab049a55cd8bddf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.34.0/23
200.123.50.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f0:46:d2:5a:2a:ed:46:aa:c2:85:a6:c7:4b:4c:27:6c:cb:
11:62:3b:00:29:0a:42:47:7f:56:1c:19:ec:87:22:98:cb:98:
94:3e:f2:d3:b4:7f:e4:ef:74:aa:8e:3f:71:c1:bf:71:39:6e:
72:1c:67:b9:1b:e6:85:ec:87:1c:ec:df:d2:a7:8d:e7:ad:f8:
bb:cc:10:87:0f:9e:24:46:dd:4b:52:af:ff:bb:99:93:2e:bf:
45:d3:ad:ff:bf:8a:e6:fb:e4:63:03:7c:0e:ca:d5:b3:df:61:
f3:9f:71:c1:8c:e0:0e:ae:2f:7d:25:84:03:3e:f9:66:61:56:
93:06:e7:87:68:e6:97:34:5b:1b:b6:08:fe:63:81:30:82:d2:
ea:8d:f7:ec:9d:20:f4:e2:c1:e5:ad:94:ed:75:ed:f8:fe:49:
62:63:6b:01:f7:3a:43:ef:91:1b:e1:be:bd:66:ec:fa:3f:26:
f1:a9:aa:3b:69:96:6c:9a:09:7b:f9:57:fd:3b:d7:38:30:5b:
cc:df:ae:18:72:76:9f:79:1f:17:8b:47:de:fa:02:30:9b:e4:
06:3b:7a:e7:51:aa:2c:70:b0:f4:51:7d:a1:ca:9c:51:dc:55:
7a:8f:21:d4:0f:9f:d7:66:65:0d:27:ad:7c:7d:99:5e:e3:68:
64:b9:c8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-ams.rpki-client.org