Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/7987bc3c818b2c4dc65b02e33ea5d3a113d0b799.roa
File: 7987bc3c818b2c4dc65b02e33ea5d3a113d0b799.roa (raw, json)
Hash identifier: qk6NvgyAoA2xNkRWskBJeBmw9bcJTEuyQ7R4HAVWzj8=
Subject key identifier: AB:74:BC:A2:3E:34:A0:77:1A:16:AE:66:E9:B1:9C:6F:45:0A:EA:31
Certificate issuer: /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial: 1BE721
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/7987bc3c818b2c4dc65b02e33ea5d3a113d0b799.roa
Signing time: Sat 15 Oct 2022 11:49:04 +0000
ROA not before: Wed 11 Aug 2021 15:00:21 +0000
ROA not after: Thu 13 Aug 2026 15:00:21 +0000
asID: 28041
IP address blocks: 200.125.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1828641 (0x1be721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
Validity
Not Before: Aug 11 15:00:21 2021 GMT
Not After : Aug 13 15:00:21 2026 GMT
Subject: CN=7987bc3c818b2c4dc65b02e33ea5d3a113d0b799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:fb:a8:0b:e7:7d:e5:ec:d5:45:6c:73:d3:
26:9a:2d:84:5e:ce:ed:d3:8f:89:3f:00:71:4c:98:
70:b9:3b:85:75:92:03:08:94:3a:f9:70:cd:fd:e4:
a3:36:9e:73:21:e2:4b:84:38:2d:01:6f:9c:38:26:
5c:6f:3c:e3:9d:85:6e:54:65:d8:e5:7b:7f:17:ca:
0f:67:22:89:ae:85:19:74:1f:4e:be:15:84:1c:1d:
f8:16:6b:bf:84:cf:ca:8a:c5:43:91:61:76:be:23:
4d:34:08:f7:48:83:98:b7:a6:2a:a1:30:d0:55:be:
bf:84:86:33:ef:fd:08:3d:42:06:76:c4:d6:62:c7:
d8:81:6e:05:40:ba:0f:07:dd:dc:46:72:82:fc:50:
94:f8:90:0a:c3:44:2a:96:04:f1:fc:f8:8d:e6:84:
8d:f7:a5:48:70:a8:bf:20:b3:07:68:df:41:8c:8d:
61:75:71:c1:7e:b0:30:fa:be:3c:ff:e3:63:62:01:
da:e0:e1:25:6c:22:63:8f:b5:d1:74:74:d1:8b:5d:
3a:a3:e2:79:9e:e1:85:81:3c:e3:7e:c4:30:3f:47:
6c:fd:83:e0:fd:57:af:66:fb:60:e4:f2:72:15:80:
e4:32:40:7f:8a:ba:25:d1:b2:34:74:a8:e2:a8:5d:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:74:BC:A2:3E:34:A0:77:1A:16:AE:66:E9:B1:9C:6F:45:0A:EA:31
X509v3 Authority Key Identifier:
keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/7987bc3c818b2c4dc65b02e33ea5d3a113d0b799.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.143.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:57:79:f5:ed:51:69:9b:02:28:d2:bc:31:8c:1d:74:06:89:
63:c6:bf:d8:1b:ed:50:7f:99:3d:a8:1b:0e:08:1f:79:e5:7b:
6b:8f:68:61:e4:7f:7a:f0:4c:cc:aa:e3:c0:c2:90:71:a3:b8:
93:a6:3d:06:35:57:61:d8:c5:3e:20:95:b9:ed:f8:a0:c2:2b:
5f:9f:cb:04:a3:c3:d9:a2:b5:af:fd:e8:a0:e7:6e:21:2c:2b:
41:8f:3a:67:8d:6e:c5:cf:2e:d2:a4:7b:b6:ab:6f:85:0a:35:
87:7e:a3:7a:c8:2c:08:37:7c:65:fd:04:4a:dd:4c:b5:78:86:
79:85:3e:10:da:27:9a:23:1d:ca:22:2e:59:b7:e8:ea:ea:31:
61:0e:6e:38:04:0d:90:15:df:b4:1e:05:18:0b:06:bb:70:78:
be:bd:30:cc:b8:d3:20:0f:18:c1:77:c5:5d:78:18:bf:46:2b:
a7:da:37:4c:d1:ce:e1:54:f7:df:f2:a7:20:17:9c:35:1e:d0:
29:ca:96:e8:90:fa:a3:06:d1:52:89:94:2c:3b:f2:75:7c:c7:
f0:25:90:94:c1:1b:95:e0:ee:76:c0:2c:e8:40:d2:67:2b:2e:
7c:f6:fc:6c:2f:40:71:1d:d9:60:6b:76:1e:af:59:69:ff:b1:
d4:2f:c6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org