Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8955ed38c9e049d52bb4a62ca1451953ebb9f6cd.roa
File: 8955ed38c9e049d52bb4a62ca1451953ebb9f6cd.roa (raw, json)
Hash identifier: ycLzzsCE3AfkansKrgDkX/tVO08cOEF+lWbntfKWM1A=
Subject key identifier: 56:8C:F4:B0:CA:8F:11:F4:BD:97:6F:44:B4:1E:FF:96:80:C8:CA:86
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 1DC568
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8955ed38c9e049d52bb4a62ca1451953ebb9f6cd.roa
Signing time: Fri 18 Nov 2022 00:20:29 +0000
ROA not before: Wed 16 Nov 2022 00:18:29 +0000
ROA not after: Mon 18 Nov 2024 00:18:29 +0000
asID: 52444
IP address blocks: 200.123.56.0/23 maxlen: 23
200.123.56.0/24 maxlen: 24
200.123.57.0/24 maxlen: 24
200.123.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1951080 (0x1dc568)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Nov 16 00:18:29 2022 GMT
Not After : Nov 18 00:18:29 2024 GMT
Subject: CN=8955ed38c9e049d52bb4a62ca1451953ebb9f6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:80:ef:0d:4c:b8:7d:20:50:15:06:c0:bf:
bb:cd:3f:92:e9:26:b6:a4:98:ec:3f:39:3e:ad:99:
16:9f:ff:3b:d9:f6:3f:76:62:4b:36:c0:8e:83:a0:
7b:b3:00:ff:37:7f:4d:3e:4d:f1:fc:92:74:cf:36:
9c:51:40:fa:73:1e:0f:a8:64:ef:69:d3:65:79:c4:
f9:86:f6:d2:1b:5a:a2:3e:24:d7:11:05:31:4e:2e:
99:96:18:97:ba:3a:72:14:41:4d:bf:76:e5:2e:a8:
f6:e3:84:57:8c:8a:25:51:fc:d4:95:87:d6:40:de:
48:72:e9:97:20:2e:fb:aa:a3:c0:8e:2c:93:a0:99:
50:35:ef:95:aa:36:b2:95:64:75:68:86:8f:81:54:
62:0a:4a:d6:6f:5b:0a:9d:88:1f:c8:05:bb:af:67:
8a:c3:67:e5:ab:d2:0d:8b:8f:80:98:85:bd:39:52:
07:34:f4:15:2c:31:e7:4a:21:28:ef:f9:b2:ca:4e:
f0:fe:cb:ea:73:f1:56:4b:22:48:32:16:ea:9c:0b:
d6:c6:fc:1b:74:df:79:6b:a2:e7:59:51:f2:2d:01:
5b:c0:01:7d:8d:c8:63:b0:64:23:3f:ed:ee:8d:6f:
fc:5f:98:1b:95:f8:e8:c0:16:1c:e5:e8:b8:3a:1a:
b1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8C:F4:B0:CA:8F:11:F4:BD:97:6F:44:B4:1E:FF:96:80:C8:CA:86
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/8955ed38c9e049d52bb4a62ca1451953ebb9f6cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.56.0-200.123.58.255
Signature Algorithm: sha256WithRSAEncryption
55:6d:bc:be:c6:38:b6:ad:bc:91:fb:f8:37:f4:f6:f0:36:10:
80:e9:34:62:bb:68:b3:dd:26:ff:53:de:30:be:0d:e6:26:75:
4a:50:1f:df:77:3a:b9:60:0c:3e:d6:2a:06:0f:f8:93:78:19:
80:f5:5a:df:d3:a1:b1:47:ff:3c:7c:2a:29:72:e7:0d:14:39:
c5:0b:1d:a8:32:32:97:68:51:4e:cb:ef:9f:57:4b:a1:0b:f7:
e5:51:fc:01:24:0c:2a:c1:4a:9d:e9:46:ea:a4:77:ab:9b:8a:
8f:2b:f0:f6:ca:39:ec:3c:42:ec:29:2e:ac:33:d0:67:ef:01:
ea:c2:67:1a:dd:40:cf:b0:f8:55:2f:06:ec:6e:1f:42:36:c9:
b3:ce:d3:33:9a:37:ef:57:88:bd:ff:b7:b5:8d:55:6d:ac:8b:
f7:52:11:50:20:3c:fe:4b:29:99:da:07:ab:01:3b:2a:b3:49:
20:eb:13:78:5f:3a:21:6f:21:40:ad:84:da:69:3b:71:9f:59:
f7:75:40:0f:f4:5c:53:6d:cc:8e:0b:7e:5f:05:8c:45:66:ed:
26:c0:41:ce:52:fa:c7:b9:3a:8a:31:e7:23:56:46:10:55:b7:
97:a4:fd:4c:39:f8:fb:76:10:3d:b0:50:b8:27:27:a5:c1:0f:
c5:7b:eb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:14 2023 by rpki-client on console-fra.rpki-client.org