Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/33125ed6ef990df31acfc6f680dae3a080cd4047.roa
File: 33125ed6ef990df31acfc6f680dae3a080cd4047.roa (raw, json)
Hash identifier: nST4V6a3F3QsJqamGTHBvKQ8mRDGmGxCJivn7h+TYGg=
Subject key identifier: D2:EC:8F:85:88:04:04:F5:A7:0C:81:6B:82:27:ED:30:FE:CA:D8:A9
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 0D0069
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/33125ed6ef990df31acfc6f680dae3a080cd4047.roa
Signing time: Wed 24 Mar 2021 14:29:19 +0000
ROA not before: Wed 24 Mar 2021 14:29:18 +0000
ROA not after: Tue 24 Mar 2026 14:29:18 +0000
asID: 52359
IP address blocks: 200.14.74.0/24 maxlen: 24
200.115.86.0/24 maxlen: 24
2001:13c7:600d::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 852073 (0xd0069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Mar 24 14:29:18 2021 GMT
Not After : Mar 24 14:29:18 2026 GMT
Subject: CN=33125ed6ef990df31acfc6f680dae3a080cd4047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:08:d1:71:4c:2e:a8:aa:ef:b7:21:2d:33:b0:
b7:98:0e:9c:14:33:11:3a:ab:3b:05:16:8b:3a:63:
79:c9:10:dc:0b:54:84:1d:63:02:23:01:71:fc:93:
38:a7:32:6c:0c:81:cb:b4:c9:7b:d8:c2:5c:aa:6c:
69:25:ec:26:29:fd:1e:68:48:b7:1d:8c:93:4d:eb:
e2:15:e2:23:78:00:09:85:ce:4e:66:f2:45:64:1f:
0f:74:37:da:f7:06:6e:1f:3a:98:b1:fe:82:2f:02:
a9:8f:1f:7c:5e:a9:1e:0e:b1:e9:8f:65:b4:e1:fe:
23:5f:fd:5c:4a:de:9c:74:41:ea:53:c4:ea:7a:bf:
d8:2a:9a:79:96:30:a4:54:70:9c:2d:70:1c:fb:d8:
75:6b:ae:dc:35:0d:ae:01:50:5d:dd:4f:5e:b0:9c:
06:d7:a9:83:59:cc:94:75:1c:ed:5c:62:0f:60:89:
5a:0c:bb:31:68:c9:b9:8f:ac:95:c0:70:2c:c6:36:
02:85:b6:8a:f7:2a:1b:10:c2:67:5c:e9:31:7d:0c:
1d:74:1a:d1:eb:ce:05:f9:37:a6:05:48:cd:5b:a6:
16:83:44:7d:c6:b9:d3:44:49:05:7a:59:e1:4b:74:
94:7f:c3:40:87:ac:9f:73:b0:6a:0a:78:9a:9f:75:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EC:8F:85:88:04:04:F5:A7:0C:81:6B:82:27:ED:30:FE:CA:D8:A9
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/33125ed6ef990df31acfc6f680dae3a080cd4047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.74.0/24
200.115.86.0/24
IPv6:
2001:13c7:600d::/48
Signature Algorithm: sha256WithRSAEncryption
5d:33:27:8b:96:40:b3:79:0a:89:5e:54:1d:6c:13:c1:f7:b0:
39:56:b9:c1:de:8b:6d:6a:3c:d3:a4:8b:28:ff:ca:a8:22:9a:
03:5f:3d:09:15:71:af:c7:d0:61:d9:37:4a:a3:14:a0:de:94:
61:a8:19:27:91:f8:67:6d:07:d4:12:78:14:1e:9e:a7:0b:5c:
3c:46:40:76:08:fc:c3:2c:05:23:88:06:95:af:8e:4a:65:97:
59:56:1f:f5:1c:8a:67:0f:6d:c4:af:52:ea:44:31:80:65:1d:
1e:ab:88:6e:3c:b0:75:72:07:29:fc:7a:2b:e4:6b:f4:17:5e:
85:61:17:d6:f6:1b:d4:98:37:03:f4:cb:04:d5:a9:88:b2:53:
d8:2d:48:40:c6:be:48:a6:12:1a:ff:e7:2a:8d:c4:79:a2:8c:
8d:05:36:2d:31:5a:ab:a2:31:4d:9a:f7:9c:95:af:c5:e3:14:
33:d7:95:4e:62:6d:cb:2b:06:fd:1f:9f:dd:67:15:d8:b6:70:
7e:74:3b:8f:66:2d:fd:b5:1c:02:ff:3f:b9:3c:77:e8:94:45:
d5:69:9c:fc:b9:8f:03:b4:ea:44:de:e6:73:cb:d2:b2:1e:b9:
a4:7f:05:e8:eb:ff:43:58:49:1e:18:58:c2:33:10:f1:b5:c6:
9d:d2:41:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 12:36:31 2023 by rpki-client on console-ams.rpki-client.org