Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/8ef97d90b62441df0863849b601d10f4ae765e2d.roa
File: 8ef97d90b62441df0863849b601d10f4ae765e2d.roa (raw, json)
Hash identifier: l6LX5nfXBAX+qtZm158VmImNWqNNTHZGoWMvMcXdZdY=
Subject key identifier: 6F:49:45:EA:7E:A3:A6:B1:AA:11:84:26:24:4E:EA:19:E5:3D:50:F6
Certificate issuer: /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial: 1BEA8C
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/8ef97d90b62441df0863849b601d10f4ae765e2d.roa
Signing time: Sat 15 Oct 2022 11:52:11 +0000
ROA not before: Fri 14 Oct 2022 11:49:08 +0000
ROA not after: Tue 15 Oct 2024 11:49:08 +0000
asID: 28041
IP address blocks: 200.125.133.0/24 maxlen: 24
200.125.142.0/24 maxlen: 24
200.125.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1829516 (0x1bea8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
Validity
Not Before: Oct 14 11:49:08 2022 GMT
Not After : Oct 15 11:49:08 2024 GMT
Subject: CN=8ef97d90b62441df0863849b601d10f4ae765e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2d:f3:8a:6b:e9:ce:8f:6b:46:7b:e0:c5:0e:
09:61:85:9d:8a:91:2b:ab:f9:da:f1:e0:dd:6b:f0:
c2:57:81:2b:fb:37:fd:3d:0d:8a:3e:ad:2d:a1:76:
ad:41:84:e0:bc:e1:08:36:fc:56:77:e9:08:c7:a5:
7b:1a:9c:ad:89:fd:1d:0f:c8:0e:05:a8:3e:d1:13:
a8:11:b2:57:de:79:3e:67:90:98:96:24:1f:4c:59:
17:ae:22:8b:a4:80:0a:92:56:a9:06:aa:21:2b:be:
a7:d6:9d:39:9d:55:86:71:5b:a0:89:30:11:97:3f:
e7:e6:1b:69:7b:cd:7d:b4:10:c2:d3:35:a9:a2:01:
5e:3d:78:4d:f8:5a:d6:9d:42:2e:89:2f:01:a9:04:
90:af:39:b0:ab:f0:0c:a2:b4:b7:2e:3f:ba:4d:d8:
f5:e0:d9:36:b7:6a:08:d5:28:09:7a:32:cb:ee:b8:
11:f5:aa:ab:82:d2:20:58:8c:93:fc:a3:6c:40:71:
70:4e:23:31:a4:97:92:6b:11:a5:38:6d:95:99:53:
ae:98:27:6f:99:cb:34:23:37:28:cd:18:1f:35:4a:
c8:ee:a5:19:09:66:e8:06:cd:db:5c:57:d3:0a:9b:
94:c6:14:00:57:55:38:ba:1d:2b:5b:44:ac:48:ca:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:49:45:EA:7E:A3:A6:B1:AA:11:84:26:24:4E:EA:19:E5:3D:50:F6
X509v3 Authority Key Identifier:
keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/8ef97d90b62441df0863849b601d10f4ae765e2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.133.0/24
200.125.142.0/24
200.125.157.0/24
Signature Algorithm: sha256WithRSAEncryption
96:98:fb:71:f8:eb:c3:72:8d:be:80:fd:1d:a7:14:9c:aa:9d:
6a:3f:d7:7d:85:16:2f:12:5f:9e:36:fe:49:b8:f2:ae:a4:d9:
e4:e5:26:c1:f7:df:d4:df:0e:02:1e:30:4c:21:e6:36:90:2b:
4e:ff:bc:ab:23:4d:ea:49:14:79:e9:86:21:c6:32:d6:6e:8f:
46:39:1e:82:c5:fe:84:80:74:3c:a2:c2:4f:01:4e:bd:8c:27:
dd:98:52:c5:af:cc:6d:59:a0:a3:ea:9e:1f:b6:b1:93:da:20:
fa:5c:08:fb:3f:21:c0:80:2b:70:b2:13:89:70:83:f6:f0:4c:
3f:08:74:40:40:45:b3:cf:11:5c:95:ec:3d:de:ea:6e:68:bc:
c6:f4:fc:fc:33:44:4e:1f:69:b3:c5:3d:87:51:ab:ab:40:be:
8a:25:9b:67:bf:03:10:3e:2e:5a:8c:f4:9c:f8:42:31:b6:78:
42:4a:84:3a:21:12:97:e4:8e:53:92:57:11:ab:f3:dd:60:d1:
27:40:dd:e4:72:3e:6e:f8:bf:ec:c1:a7:49:97:03:2a:9b:53:
17:e3:d0:70:f9:79:a5:7f:49:9c:0c:d0:72:a5:47:01:f9:97:
8a:6f:0a:11:0b:3c:aa:0c:36:4b:63:eb:1f:94:62:23:33:25:
94:76:7e:43
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDG+qMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFh
ZThjYmU5OTA0ZjEwMzIzMmMwMDI0ODMyMDRmOWYyYWUwNGQwMjYwHhcNMjIxMDE0
MTE0OTA4WhcNMjQxMDE1MTE0OTA4WjAzMTEwLwYDVQQDEyg4ZWY5N2Q5MGI2MjQ0
MWRmMDg2Mzg0OWI2MDFkMTBmNGFlNzY1ZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1i3zimvpzo9rRnvgxQ4JYYWdipErq/na8eDda/DCV4Er+zf9
PQ2KPq0toXatQYTgvOEINvxWd+kIx6V7Gpytif0dD8gOBag+0ROoEbJX3nk+Z5CY
liQfTFkXriKLpIAKklapBqohK76n1p05nVWGcVugiTARlz/n5htpe819tBDC0zWp
ogFePXhN+FrWnUIuiS8BqQSQrzmwq/AMorS3Lj+6Tdj14Nk2t2oI1SgJejLL7rgR
9aqrgtIgWIyT/KNsQHFwTiMxpJeSaxGlOG2VmVOumCdvmcs0IzcozRgfNUrI7qUZ
CWboBs3bXFfTCpuUxhQAV1U4uh0rW0SsSMpQFQIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFG9JRep+o6axqhGEJiRO6hnlPVD2MB8GA1UdIwQYMBaAFJ4h+rhynemGXdTW
X98/sNPNNxk0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWFlOGNi
ZTk5MDRmMTAzMjMyYzAwMjQ4MzIwNGY5ZjJhZTA0ZDAyNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGRjMmMwN2EtOGM3ZS00N2M3LWFlOTAtY2NkNzE0
ODdjZTEwLzhlZjk3ZDkwYjYyNDQxZGYwODYzODQ5YjYwMWQxMGY0YWU3NjVlMmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZGMyYzA3YS04YzdlLTQ3YzctYWU5MC1jY2Q3
MTQ4N2NlMTAvYWFlOGNiZTk5MDRmMTAzMjMyYzAwMjQ4MzIwNGY5ZjJhZTA0ZDAy
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAMh9hQMEAMh9jgMEAMh9nTANBgkqhkiG9w0BAQsFAAOCAQEA
lpj7cfjrw3KNvoD9HacUnKqdaj/XfYUWLxJfnjb+SbjyrqTZ5OUmwfff1N8OAh4w
TCHmNpArTv+8qyNN6kkUeemGIcYy1m6PRjkegsX+hIB0PKLCTwFOvYwn3ZhSxa/M
bVmgo+qeH7axk9og+lwI+z8hwIArcLITiXCD9vBMPwh0QEBFs88RXJXsPd7qbmi8
xvT8/DNETh9ps8U9h1Grq0C+iiWbZ78DED4uWoz0nPhCMbZ4QkqEOiESl+SOU5JX
Eavz3WDRJ0Dd5HI+bvi/7MGnSZcDKptTF+PQcPl5pX9JnAzQcqVHAfmXim8KEQs8
qgw2S2PrH5RiIzMllHZ+Qw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:18 2023 by rpki-client on console-fra.rpki-client.org