Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/334c92c069bb542760f7f0ad44f78eec8010362a.roa
File: 334c92c069bb542760f7f0ad44f78eec8010362a.roa (raw, json)
Hash identifier: bHnTGNOGJT0Z4BGy3HWGoK/IjzTtrWSpd8K6uGOAst4=
Subject key identifier: D8:F5:64:1B:10:7B:E7:DF:90:05:50:FF:35:A7:D7:49:9F:B8:AC:3E
Certificate issuer: /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial: 11237D
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/334c92c069bb542760f7f0ad44f78eec8010362a.roa
Signing time: Fri 13 Aug 2021 15:00:26 +0000
ROA not before: Fri 13 Aug 2021 15:00:21 +0000
ROA not after: Thu 13 Aug 2026 15:00:21 +0000
asID: 28041
IP address blocks: 200.125.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1123197 (0x11237d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
Validity
Not Before: Aug 13 15:00:21 2021 GMT
Not After : Aug 13 15:00:21 2026 GMT
Subject: CN=334c92c069bb542760f7f0ad44f78eec8010362a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:53:1b:7a:58:45:33:da:2e:f9:78:4b:9c:28:
47:e2:34:58:f6:d4:d9:a8:5f:ae:40:46:1d:c3:05:
1e:a3:ee:70:32:60:40:c9:04:6d:f3:09:f5:90:d4:
06:ad:67:cc:1b:f9:c8:91:12:8a:d2:17:2b:86:0a:
be:66:69:ed:0a:8d:cb:1d:93:08:5a:89:63:47:de:
4f:78:eb:d6:5e:75:c6:fa:03:7f:51:b2:76:e3:b9:
76:eb:fd:33:80:46:78:c6:73:92:cb:24:01:d3:9d:
d6:5b:20:0b:3d:b7:33:84:13:0f:e9:52:2e:65:74:
f4:a3:61:88:3b:ba:c6:20:d4:18:50:1d:12:d3:a1:
14:44:4a:ad:42:0c:2e:95:7c:f0:12:d6:34:62:74:
4e:aa:db:47:c2:0a:2e:03:24:79:f0:3d:5e:b4:72:
b9:46:3e:f4:e8:a7:13:b3:a7:83:8e:42:3f:28:60:
c1:14:3f:7d:d7:b0:ba:cf:7c:98:8d:f7:6f:de:3d:
74:cf:d5:29:7b:e1:8c:08:c0:ac:a0:09:0a:1d:4a:
52:d6:fd:b7:0c:01:b3:65:da:53:54:74:6e:9b:5b:
b1:aa:60:72:23:6c:31:81:b8:a1:f1:c2:33:08:f9:
13:3b:69:01:26:20:33:56:53:b4:2b:c5:31:9a:8a:
b3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F5:64:1B:10:7B:E7:DF:90:05:50:FF:35:A7:D7:49:9F:B8:AC:3E
X509v3 Authority Key Identifier:
keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/334c92c069bb542760f7f0ad44f78eec8010362a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.146.0/24
Signature Algorithm: sha256WithRSAEncryption
57:45:46:8a:db:01:ce:71:41:66:de:e1:61:76:f8:3d:f0:b0:
bb:3b:f3:49:55:fa:2a:8b:dd:72:f3:0f:83:cc:09:f8:0c:de:
a7:38:83:4e:dc:5a:2b:be:08:ad:4c:2a:66:80:e5:e1:24:70:
30:7d:12:49:6a:d0:b9:10:b7:69:62:c2:52:d8:fc:2c:7a:b9:
8b:d7:c3:f3:af:a7:79:b7:63:72:00:8b:c5:80:93:96:19:38:
0c:33:05:13:b5:c9:46:b7:f0:26:b0:6e:87:f6:ce:65:c3:fc:
9b:1c:c4:69:17:32:96:7d:de:fb:b3:88:7c:fa:72:91:bc:b5:
28:80:5d:1f:b6:b4:6b:4f:66:7e:ea:86:0b:c3:8c:d5:f6:c7:
35:1e:1c:d8:64:40:6e:ed:17:09:f0:bc:04:67:a6:24:85:56:
79:21:bd:8e:7b:96:0b:e8:7f:5f:6c:23:87:40:50:59:e1:c6:
8f:1c:f9:12:8e:cb:86:f4:d1:ff:0f:79:e3:b3:94:e6:b5:4c:
0e:da:ff:03:6c:5c:84:71:85:03:5d:7b:e5:07:78:c1:a6:96:
38:03:82:c0:0e:ea:7e:e3:e4:fe:9c:7c:c0:e4:b6:a4:62:9e:
2c:b7:fa:16:4a:5e:4e:f6:13:ca:dc:00:c7:f8:6f:30:ee:09:
56:42:20:4c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDESN9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFh
ZThjYmU5OTA0ZjEwMzIzMmMwMDI0ODMyMDRmOWYyYWUwNGQwMjYwHhcNMjEwODEz
MTUwMDIxWhcNMjYwODEzMTUwMDIxWjAzMTEwLwYDVQQDEygzMzRjOTJjMDY5YmI1
NDI3NjBmN2YwYWQ0NGY3OGVlYzgwMTAzNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiFMbelhFM9ou+XhLnChH4jRY9tTZqF+uQEYdwwUeo+5wMmBA
yQRt8wn1kNQGrWfMG/nIkRKK0hcrhgq+ZmntCo3LHZMIWoljR95PeOvWXnXG+gN/
UbJ247l26/0zgEZ4xnOSyyQB053WWyALPbczhBMP6VIuZXT0o2GIO7rGINQYUB0S
06EUREqtQgwulXzwEtY0YnROqttHwgouAyR58D1etHK5Rj706KcTs6eDjkI/KGDB
FD9917C6z3yYjfdv3j10z9Upe+GMCMCsoAkKHUpS1v23DAGzZdpTVHRum1uxqmBy
I2wxgbih8cIzCPkTO2kBJiAzVlO0K8Uxmoqz1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNj1ZBsQe+ffkAVQ/zWn10mfuKw+MB8GA1UdIwQYMBaAFJ4h+rhynemGXdTW
X98/sNPNNxk0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWFlOGNi
ZTk5MDRmMTAzMjMyYzAwMjQ4MzIwNGY5ZjJhZTA0ZDAyNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGRjMmMwN2EtOGM3ZS00N2M3LWFlOTAtY2NkNzE0
ODdjZTEwLzMzNGM5MmMwNjliYjU0Mjc2MGY3ZjBhZDQ0Zjc4ZWVjODAxMDM2MmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZGMyYzA3YS04YzdlLTQ3YzctYWU5MC1jY2Q3
MTQ4N2NlMTAvYWFlOGNiZTk5MDRmMTAzMjMyYzAwMjQ4MzIwNGY5ZjJhZTA0ZDAy
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMh9kjANBgkqhkiG9w0BAQsFAAOCAQEAV0VGitsBznFBZt7h
YXb4PfCwuzvzSVX6KovdcvMPg8wJ+AzepziDTtxaK74IrUwqZoDl4SRwMH0SSWrQ
uRC3aWLCUtj8LHq5i9fD86+nebdjcgCLxYCTlhk4DDMFE7XJRrfwJrBuh/bOZcP8
mxzEaRcyln3e+7OIfPpykby1KIBdH7a0a09mfuqGC8OM1fbHNR4c2GRAbu0XCfC8
BGemJIVWeSG9jnuWC+h/X2wjh0BQWeHGjxz5Eo7LhvTR/w9547OU5rVMDtr/A2xc
hHGFA1175Qd4waaWOAOCwA7qfuPk/px8wOS2pGKeLLf6FkpeTvYTytwAx/hvMO4J
VkIgTA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org