Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/2225cde6aa9f5cf29b289300d38a808cbdbfd845.roa
File: 2225cde6aa9f5cf29b289300d38a808cbdbfd845.roa (raw, json)
Hash identifier: gPpx1mbtIhqraaqXHGw8YUdl+sVTXUNl9YYuQ2t26mA=
Subject key identifier: 36:95:08:0C:C6:E4:06:F2:99:B9:05:31:F3:31:88:82:B4:28:C1:7C
Certificate issuer: /CN=30d20bef67088f83626615a8accfbafffad06334
Certificate serial: 07CD0D
Authority key identifier: 93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/2225cde6aa9f5cf29b289300d38a808cbdbfd845.roa
Signing time: Wed 14 Sep 2022 23:13:43 +0000
ROA not before: Fri 05 Aug 2022 22:56:17 +0000
ROA not after: Mon 05 Aug 2024 22:56:17 +0000
asID: 7087
IP address blocks: 200.52.144.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511245 (0x7cd0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d20bef67088f83626615a8accfbafffad06334
Validity
Not Before: Aug 5 22:56:17 2022 GMT
Not After : Aug 5 22:56:17 2024 GMT
Subject: CN=2225cde6aa9f5cf29b289300d38a808cbdbfd845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:79:56:4e:33:b7:f0:9a:ed:3d:bb:84:d2:
7f:4a:df:b0:28:1f:76:0a:bb:1c:b8:92:57:f3:39:
28:73:32:75:05:55:cf:6c:c4:7f:fc:3f:9b:59:2c:
a1:ab:71:ef:d1:7c:37:ed:1f:f5:a9:76:5b:64:4b:
db:88:fc:0e:6a:f4:13:cb:02:47:e1:dd:03:71:16:
ee:16:aa:5b:c0:c1:ac:1e:0e:99:86:e5:88:0c:a0:
05:0d:cf:e6:38:82:1b:28:c1:1f:8a:38:52:aa:e1:
d7:e4:71:6a:4a:dd:0e:23:51:8a:fd:c6:0e:10:e2:
42:89:b6:06:a8:61:59:58:95:23:0d:e1:90:4e:85:
f5:fe:57:32:d4:ed:45:4e:03:48:4c:d0:24:26:f1:
35:c5:3f:6c:bb:8e:06:b6:3b:bc:27:d9:8d:a0:82:
5a:99:85:a5:35:7f:d9:57:c1:d7:ef:4d:91:84:db:
7d:97:19:9f:53:dd:e9:8f:d4:89:20:c7:8f:61:cb:
43:b4:79:f4:71:b2:ec:4a:ca:42:3b:3e:7e:d6:05:
7a:4e:8a:27:d0:a1:f4:5c:2c:78:91:ab:af:c1:30:
cf:08:97:9e:17:62:ac:dc:15:70:c8:24:eb:49:fd:
ac:20:28:92:50:ea:fb:c6:87:ef:4c:8d:02:c1:cc:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:95:08:0C:C6:E4:06:F2:99:B9:05:31:F3:31:88:82:B4:28:C1:7C
X509v3 Authority Key Identifier:
keyid:93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/2225cde6aa9f5cf29b289300d38a808cbdbfd845.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/30d20bef67088f83626615a8accfbafffad06334.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.52.144.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:1a:61:ba:40:15:03:45:cd:a1:6f:53:c0:c1:04:d3:3a:c1:
bf:ef:ea:e5:97:ea:73:5a:36:f7:be:04:25:f1:28:69:5f:95:
9e:91:29:de:57:d3:bf:16:e3:72:0c:ba:87:58:f4:1e:90:9c:
74:8f:c6:1e:36:b4:6a:af:95:2d:09:0d:f4:5a:0e:33:6d:62:
cf:76:54:e1:b8:d4:8e:6c:f7:a0:24:ec:47:44:15:92:b5:97:
b1:58:02:aa:74:98:1e:0f:a0:78:b0:9e:21:e5:3e:90:95:35:
51:87:dd:8e:76:ab:84:f6:6a:0c:f2:5d:6b:6a:44:60:cf:3c:
74:39:21:a0:ce:18:b2:b4:7d:b4:a2:91:eb:e1:1d:f8:cc:d6:
95:e6:78:e2:44:ba:17:a7:d9:d8:d8:fb:7f:8f:04:fc:dd:6d:
ff:73:e7:b8:17:7e:39:b1:11:96:3f:c1:e4:75:d3:47:b9:b5:
51:78:0d:6f:2c:8e:8c:cd:13:83:cd:58:7a:03:9f:96:4a:16:
38:15:a1:22:90:c6:f1:79:6a:9e:24:2e:05:28:45:0f:19:3a:
81:95:59:3e:69:7c:42:73:a2:f1:cb:9b:7b:06:3d:a0:94:8d:
6c:3a:9a:64:e8:55:d9:b9:14:dc:55:49:d8:30:1f:43:9e:ce:
c7:8b:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org