Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/d1d24ba96f439e58467119ce4979bee5a74232fc.roa
File: d1d24ba96f439e58467119ce4979bee5a74232fc.roa (raw, json)
Hash identifier: 37O09aXmDx7J6lbFvTdK9PmKS7TfT3GrAdva4wHEVEs=
Subject key identifier: 0C:FE:13:84:B6:D0:F0:13:FC:B3:99:39:D5:C9:68:C4:EB:85:A4:08
Certificate issuer: /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial: 1129B3
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/d1d24ba96f439e58467119ce4979bee5a74232fc.roa
Signing time: Fri 13 Aug 2021 15:00:27 +0000
ROA not before: Fri 13 Aug 2021 15:00:21 +0000
ROA not after: Thu 13 Aug 2026 15:00:21 +0000
asID: 28041
IP address blocks: 200.125.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124787 (0x1129b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
Validity
Not Before: Aug 13 15:00:21 2021 GMT
Not After : Aug 13 15:00:21 2026 GMT
Subject: CN=d1d24ba96f439e58467119ce4979bee5a74232fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:3c:31:df:b5:99:37:4e:2a:bb:2a:c4:c4:
81:24:7c:2d:de:a3:b0:6f:c6:81:fb:07:29:09:2e:
3e:15:7c:a5:3d:67:c9:10:65:d3:fa:6b:11:ba:df:
6a:f5:33:1f:b2:67:36:1e:62:4d:ec:da:aa:12:a1:
d4:58:14:74:69:07:dc:c6:0d:37:b1:95:5d:37:81:
e9:56:6e:97:b6:de:8d:ee:3b:2c:46:74:7e:78:c9:
ae:52:23:d9:5d:ab:f4:18:8e:81:ad:5e:e3:c3:09:
23:4a:8d:37:cf:65:4a:d4:70:f4:d2:1e:6d:3d:6f:
2c:f8:3d:42:55:1e:1c:63:88:99:01:9e:bf:4b:f4:
34:fd:4c:c4:28:90:38:6c:86:eb:1f:cc:3c:6c:de:
a7:11:17:97:3c:b8:61:0a:be:4d:36:7c:5a:07:f1:
c3:9b:fb:e3:53:2f:87:96:17:e7:7b:12:29:04:bb:
56:01:6b:4f:94:98:f9:14:4a:fa:be:fb:bf:dc:14:
a2:44:fe:cd:4b:69:91:e0:57:56:95:bc:46:b0:54:
9f:70:b6:a8:a3:cd:d9:72:c6:3c:8c:19:dd:6c:a8:
30:96:ef:8c:50:75:b6:1b:cc:a5:4c:a7:68:90:68:
29:f0:e6:11:7e:02:c4:a6:01:57:59:52:cd:93:24:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FE:13:84:B6:D0:F0:13:FC:B3:99:39:D5:C9:68:C4:EB:85:A4:08
X509v3 Authority Key Identifier:
keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/d1d24ba96f439e58467119ce4979bee5a74232fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.148.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c8:d0:69:75:60:13:a9:5e:ec:b3:95:8c:f4:cd:bc:48:0c:
80:97:05:44:4e:23:f7:b2:78:e3:3a:c9:a0:51:05:42:a4:bb:
f8:27:d0:09:8a:32:cd:b4:1f:4f:5b:08:4d:3c:92:bc:c9:b4:
32:37:96:20:74:a9:3e:3f:72:ea:87:62:2b:c2:8b:85:f6:9d:
2e:be:78:61:04:30:6c:19:d2:49:53:d3:fc:4f:14:fe:7a:96:
0f:fd:26:fc:9c:2e:5c:9b:cc:fb:77:01:dd:d7:c1:47:e1:af:
24:c4:97:fd:b2:84:ca:cd:24:4a:16:fc:ee:30:12:aa:1a:df:
23:a4:dc:0e:e5:8f:e0:35:74:ad:39:75:d6:fe:4a:6c:dd:e2:
86:f9:ff:54:8e:bd:57:b2:17:51:a8:7e:34:13:a1:97:89:f4:
e0:8d:03:dc:0f:84:aa:a5:84:86:93:98:3d:7a:49:1a:cc:a3:
4a:5f:aa:4d:25:fb:f5:b6:25:a9:4b:21:a4:6e:bd:88:97:a6:
2a:64:58:e1:00:9e:0c:f8:2d:7c:da:b5:e2:a9:a6:72:ca:c5:
44:08:50:82:23:8f:2b:1b:d1:97:0b:01:79:5f:a0:00:86:44:
f3:20:5c:96:53:c6:7a:66:be:97:00:7e:a4:94:34:5d:02:88:
c2:af:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org