Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/4039c78720c07105938e33b9b28a8d4e494d85bb.roa
File: 4039c78720c07105938e33b9b28a8d4e494d85bb.roa (raw, json)
Hash identifier: FzALtsHLCrlNwz55+5Si374l62vAcGUgeITlWzc7aMA=
Subject key identifier: 1D:D5:BF:E7:A8:05:16:FA:29:8A:5E:98:FA:19:CF:98:AC:3A:CF:CA
Certificate issuer: /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial: 113BDC
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/4039c78720c07105938e33b9b28a8d4e494d85bb.roa
Signing time: Fri 13 Aug 2021 15:00:31 +0000
ROA not before: Fri 13 Aug 2021 15:00:21 +0000
ROA not after: Thu 13 Aug 2026 15:00:21 +0000
asID: 28006
IP address blocks: 200.125.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129436 (0x113bdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
Validity
Not Before: Aug 13 15:00:21 2021 GMT
Not After : Aug 13 15:00:21 2026 GMT
Subject: CN=4039c78720c07105938e33b9b28a8d4e494d85bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:1c:1f:93:ff:57:0f:c6:f3:86:84:af:9b:
63:5c:ef:95:54:b5:c7:57:45:09:25:e4:35:fa:a9:
7f:7d:bf:fa:d6:4a:9c:0c:cf:2f:79:59:65:8d:d6:
34:ca:a7:f3:91:3c:b8:87:7b:e0:86:e6:4d:c9:ec:
d5:a1:07:f4:56:1f:4f:ff:de:67:ff:4e:38:17:1a:
a4:76:f2:d9:f0:70:cb:d7:55:47:8a:18:43:fe:22:
8f:53:ca:ac:36:38:72:01:35:6f:d0:21:24:58:1d:
bb:d0:f1:c0:4a:02:20:ff:2d:2d:32:f5:50:7d:6c:
84:56:af:c3:fb:bd:e1:69:19:e5:65:d0:ab:50:e0:
3c:c4:71:f8:b9:f0:8f:8a:7e:e9:ca:19:26:a8:c6:
5d:6e:9a:3e:cb:4c:ec:ab:bc:79:be:30:02:cd:ec:
4d:28:cf:bc:4a:54:60:49:b7:56:5b:d9:fa:23:a9:
6e:10:08:17:64:d3:37:19:7e:46:a2:12:92:3e:b4:
60:f5:4a:55:d8:ee:86:49:34:e2:a1:b6:b0:41:d0:
90:5b:c2:00:b9:1d:f4:16:d1:d7:46:c4:38:29:d7:
77:ba:09:f1:21:1e:12:66:e0:7b:12:36:d4:b7:b5:
6c:cd:0c:50:2b:b2:24:32:a6:56:46:ed:73:6a:d8:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D5:BF:E7:A8:05:16:FA:29:8A:5E:98:FA:19:CF:98:AC:3A:CF:CA
X509v3 Authority Key Identifier:
keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/4039c78720c07105938e33b9b28a8d4e494d85bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.128.0/24
Signature Algorithm: sha256WithRSAEncryption
35:82:92:1a:46:ea:a9:96:b0:5d:0b:fe:88:8f:cc:55:a2:18:
40:6c:a8:08:37:47:38:47:c0:ed:36:a1:27:86:fa:9c:e8:9e:
1c:d0:2f:d1:4a:00:3a:29:41:38:0e:4c:47:40:c8:f7:0a:17:
be:5e:f7:62:37:da:0e:9c:f8:5c:d5:d3:73:d5:db:21:47:c0:
83:d6:95:81:a4:b0:23:cf:5d:6f:61:9a:4f:2b:b8:4e:e2:2f:
37:a7:b0:9d:e6:23:8b:c7:79:df:78:2a:3a:53:6a:b1:f6:2c:
c7:1c:eb:ac:f5:c5:7b:ab:ce:f0:ed:6f:16:3a:57:3d:d8:38:
7e:3d:d7:70:d4:79:8d:62:94:82:4c:03:2d:6a:f8:95:6d:4c:
3a:68:a2:26:5c:23:7b:cb:9b:fb:b9:e3:ea:49:a3:b6:cd:df:
b7:f9:1c:5d:b9:8f:b9:28:d0:7b:ec:c9:ad:99:a0:85:c4:da:
93:37:aa:1f:0d:e9:7f:ca:5d:73:07:8f:83:b0:43:a3:e9:27:
c4:d0:f8:79:f6:14:31:a6:ca:0b:42:27:04:01:46:d5:6a:a6:
66:a7:35:f1:45:78:00:cc:91:2a:b4:93:06:b6:25:88:22:af:
b5:17:ff:4c:cb:be:19:b9:e4:d5:e4:a2:64:d4:f2:4b:c7:43:
af:ae:44:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org