Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a1ec0f0-2ab8-494b-83b0-019de932459e/13d8e04ee529ddc92d1c9afd2e1d2ba1a4add5ce.roa
File: 13d8e04ee529ddc92d1c9afd2e1d2ba1a4add5ce.roa (raw, json)
Hash identifier: /OozQ0H6HmQatZ07RAFuwz1MjBglZlCmwht/mWq8/x0=
Subject key identifier: BD:DE:FC:2F:30:60:11:29:B6:21:01:8F:FE:0F:80:AD:0C:32:05:29
Certificate issuer: /CN=c499c65a6bb0e3e5c51ce4321e740548932317f6
Certificate serial: 0DD009
Authority key identifier: EB:F1:03:E1:B4:54:6E:10:85:D6:58:EF:54:CB:5B:7B:34:71:0C:0F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c499c65a6bb0e3e5c51ce4321e740548932317f6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4a1ec0f0-2ab8-494b-83b0-019de932459e/13d8e04ee529ddc92d1c9afd2e1d2ba1a4add5ce.roa
Signing time: Wed 24 Mar 2021 14:29:44 +0000
ROA not before: Wed 24 Mar 2021 14:29:44 +0000
ROA not after: Tue 24 Mar 2026 14:29:44 +0000
asID: 28065
IP address blocks: 200.114.80.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 19:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905225 (0xdd009)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c499c65a6bb0e3e5c51ce4321e740548932317f6
Validity
Not Before: Mar 24 14:29:44 2021 GMT
Not After : Mar 24 14:29:44 2026 GMT
Subject: CN=13d8e04ee529ddc92d1c9afd2e1d2ba1a4add5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:a6:7f:bb:df:e3:08:59:8f:2d:84:ee:73:
24:be:97:8a:5f:88:f3:a7:84:33:0b:01:bb:2f:f9:
9c:a9:94:05:5d:d8:6a:92:19:d5:a5:37:3c:ac:da:
7d:4c:5d:29:fe:45:e6:e5:71:cd:5f:80:52:ae:1d:
41:cf:e8:4a:c8:3e:dc:da:a3:8a:c9:fc:82:f6:1c:
65:e0:a9:b1:b2:0c:80:97:63:07:1f:1b:c6:b3:91:
ca:e4:bd:83:cc:c4:77:87:59:b2:96:8f:ae:49:85:
be:07:79:a1:bf:c0:b2:ea:22:f2:4f:b7:3c:9b:f9:
16:e5:4b:4a:3d:05:1a:0f:f2:0b:20:cf:73:2e:4a:
90:b7:4c:80:f9:47:8a:04:5e:87:f2:af:6a:ca:55:
9e:60:37:be:5d:d7:d8:39:22:62:77:f4:b0:61:4b:
06:c1:ce:90:db:5c:d4:c3:b5:96:57:be:4b:a2:6d:
08:dd:36:ea:31:e1:e5:51:ac:92:41:c3:0a:ed:ad:
a5:51:96:cb:f0:aa:57:2e:6c:08:02:7f:b8:04:2c:
a5:36:ff:29:d9:6c:bd:96:22:fb:1e:ed:66:25:24:
87:29:d9:1b:77:ef:8b:46:5a:8d:4a:28:48:72:30:
37:98:c6:5d:fb:46:ec:77:0f:dd:a8:d9:06:0b:63:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DE:FC:2F:30:60:11:29:B6:21:01:8F:FE:0F:80:AD:0C:32:05:29
X509v3 Authority Key Identifier:
keyid:EB:F1:03:E1:B4:54:6E:10:85:D6:58:EF:54:CB:5B:7B:34:71:0C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c499c65a6bb0e3e5c51ce4321e740548932317f6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a1ec0f0-2ab8-494b-83b0-019de932459e/13d8e04ee529ddc92d1c9afd2e1d2ba1a4add5ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4a1ec0f0-2ab8-494b-83b0-019de932459e/c499c65a6bb0e3e5c51ce4321e740548932317f6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.114.80.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:d6:3a:37:c9:c4:6b:6a:1e:c8:ac:bc:8d:4b:e9:d6:e8:95:
2a:1f:17:d0:6a:4e:9e:d1:1a:ba:b7:df:52:b8:f9:06:68:57:
71:8a:1b:3d:3e:2f:19:e5:63:1b:0f:f7:98:22:00:b5:f1:9d:
de:f5:af:e1:39:fd:b4:10:ad:cf:38:dc:ac:48:7b:cc:7d:c6:
4c:63:e3:ee:ba:b8:38:fc:33:f6:79:df:24:e5:7a:97:0a:72:
cc:68:6a:4d:66:51:4c:14:13:e1:d5:8e:0b:db:0a:eb:6b:05:
5f:92:87:e4:28:36:7e:5e:ac:54:f8:ac:88:7a:25:ba:49:8f:
6e:59:22:73:de:4b:2f:32:34:fd:03:03:ba:77:e3:bc:e6:34:
96:8e:f9:ca:41:9e:5f:0f:02:cf:a2:80:c9:e7:99:58:bd:45:
96:77:8e:f2:e9:45:b7:92:01:4e:6e:a2:00:97:bf:01:09:21:
14:a8:30:12:84:6a:6a:94:b9:0d:2e:96:63:d7:03:f4:f2:94:
7d:aa:7e:5b:03:76:7d:8c:d0:54:b2:68:1f:86:7f:e1:4b:33:
34:e2:4a:e8:ad:84:54:25:a8:1a:f0:ce:3a:2c:f9:f1:97:a4:
3a:e6:9d:a6:0a:52:61:36:02:af:4b:9b:79:84:e8:b9:58:90:
e6:15:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 00:37:14 2024 by rpki-client on console-ams.rpki-client.org