Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/494f0059b9b7af16862c520f83fb3012e069ad78.roa
File: 494f0059b9b7af16862c520f83fb3012e069ad78.roa (raw, json)
Hash identifier: 8UYx9Zk2GKM3eJQRQYjb+Y7K4MuXBeK2/KtFkI9LJkw=
Subject key identifier: 79:58:AB:5B:8D:E5:C3:11:7C:A9:20:D2:0D:D7:BD:CE:D8:09:AD:C0
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 0CFFAD
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/494f0059b9b7af16862c520f83fb3012e069ad78.roa
Signing time: Wed 24 Mar 2021 14:29:19 +0000
ROA not before: Wed 24 Mar 2021 14:29:18 +0000
ROA not after: Tue 24 Mar 2026 14:29:18 +0000
asID: 52370
IP address blocks: 200.14.39.0/24 maxlen: 24
200.115.87.0/24 maxlen: 24
2001:13c7:600c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 851885 (0xcffad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Mar 24 14:29:18 2021 GMT
Not After : Mar 24 14:29:18 2026 GMT
Subject: CN=494f0059b9b7af16862c520f83fb3012e069ad78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:56:30:c4:c8:a8:22:a3:88:03:a5:28:f8:d7:
c8:79:22:a7:4d:22:65:15:6c:85:97:8a:c2:80:e1:
df:3e:ba:e1:aa:4f:ed:b5:9f:61:2e:b8:c6:a5:1e:
24:b8:32:82:ed:9f:f0:8c:03:a1:6e:26:0b:d6:54:
03:d0:94:a5:f5:26:4a:53:b0:89:43:d7:d7:57:26:
f0:d8:fc:cf:b9:23:59:c7:da:12:26:31:af:56:f4:
c9:85:98:1e:59:b1:58:2b:1d:4c:05:f0:98:46:9e:
c8:a4:68:0f:85:75:63:19:46:36:a2:74:e4:02:2f:
3c:bd:c2:62:ff:1c:0c:eb:5e:b2:ac:39:17:09:9f:
fd:c4:65:34:8a:75:d2:6d:8b:4b:cb:cc:6f:11:0a:
a2:a0:61:91:6c:c2:04:16:be:fd:84:27:5e:23:24:
94:e4:39:c0:05:0a:ba:2f:34:74:a5:f4:72:6b:e0:
6f:3c:cf:a7:ef:19:93:d1:26:0c:43:10:ea:e9:02:
b4:65:4f:b9:cb:79:21:d2:4f:c6:92:b7:19:b8:0d:
b9:57:b0:aa:8d:7e:7b:a9:b7:34:9c:bd:f0:35:a5:
0d:cd:54:91:6e:10:b7:fc:fb:81:be:28:5a:01:93:
c3:b3:a1:f7:49:5a:ee:b2:69:15:91:5f:70:ff:76:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:AB:5B:8D:E5:C3:11:7C:A9:20:D2:0D:D7:BD:CE:D8:09:AD:C0
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/494f0059b9b7af16862c520f83fb3012e069ad78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.39.0/24
200.115.87.0/24
IPv6:
2001:13c7:600c::/48
Signature Algorithm: sha256WithRSAEncryption
49:07:d4:f8:1f:73:2d:8d:29:f2:71:4c:93:8c:a7:7c:fe:2f:
ff:d9:71:09:25:47:75:4e:98:d8:74:a7:91:b9:3d:cb:1f:11:
8e:a6:e0:0a:e5:ac:a0:8b:3d:d7:4d:11:ac:98:1e:bd:2f:7b:
03:ef:e8:b6:49:36:b6:11:b0:e0:5a:e9:49:98:63:43:6b:a7:
30:4c:4f:cf:ca:9b:18:58:95:42:c8:72:53:d7:09:26:f7:3e:
71:69:d3:d9:1d:2e:24:6f:f0:85:bb:b8:c3:9a:45:b7:da:ab:
a1:7c:83:15:b5:f8:b0:a7:c5:e6:67:fc:b6:d1:6b:cf:54:4a:
91:a1:b4:66:a3:21:2b:68:7c:9b:6d:c1:ef:18:01:f2:03:86:
2e:39:4b:c8:bb:59:e6:8e:90:ce:b3:4a:10:d1:4b:02:7b:a1:
f5:20:3b:23:df:24:fd:4d:13:2a:70:d6:95:73:3c:99:77:f4:
5f:4a:40:1e:5d:f9:24:3c:6b:09:2e:55:73:40:48:2e:3a:56:
53:a3:14:bf:6b:d2:6f:3f:54:ec:a1:6c:90:fc:9b:a6:f6:5a:
39:c8:a8:cd:65:07:16:bb:f8:ce:85:e6:66:93:33:4b:18:a7:
33:ca:c7:68:9c:b3:32:66:52:7b:3c:f5:10:85:d2:9a:df:d3:
d1:ee:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 12:51:51 2023 by rpki-client on console-fra.rpki-client.org