Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235322e302f32342d3234203d3e20323632313534.roa
File: 3230302e35352e3235322e302f32342d3234203d3e20323632313534.roa (raw, json)
Hash identifier: REiyB4dfrnGRlXSq2x87Zzm+ZPQpFX3inn1z4qc05nk=
Subject key identifier: 3D:66:78:AD:C2:F3:29:F8:0A:27:6E:37:8E:98:30:06:BF:C7:A4:D0
Certificate issuer: /CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
Certificate serial: 4A32889B4AB5802A4370C5971DF854222D1C3AEE
Authority key identifier: 5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235322e302f32342d3234203d3e20323632313534.roa
Signing time: Tue 05 Mar 2024 18:11:43 +0000
ROA not before: Tue 05 Mar 2024 18:06:43 +0000
ROA not after: Tue 04 Mar 2025 18:11:43 +0000
asID: 262154
IP address blocks: 200.55.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 17:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:32:88:9b:4a:b5:80:2a:43:70:c5:97:1d:f8:54:22:2d:1c:3a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
Validity
Not Before: Mar 5 18:06:43 2024 GMT
Not After : Mar 4 18:11:43 2025 GMT
Subject: CN=3D6678ADC2F329F80A276E378E983006BFC7A4D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:03:0f:0e:59:4b:34:fc:e2:5a:58:47:1b:
3d:0b:8f:92:25:dd:e3:6e:f3:8a:4d:c4:da:70:3e:
ad:99:10:c0:b1:16:92:26:5f:42:75:8a:37:e1:7d:
79:07:f0:14:f3:d9:dc:e7:ee:ab:db:4a:f0:f9:16:
86:08:e6:56:60:60:91:16:b3:56:9d:a7:83:3c:79:
9b:e1:13:a3:ba:7f:60:5f:e1:eb:cf:46:95:5d:04:
71:7f:1a:fe:b9:04:82:37:c4:3a:3f:f2:4b:77:a5:
30:c8:53:e9:28:f9:fc:b9:9b:19:80:1b:a7:0f:7b:
a1:ca:6b:c2:b0:df:a7:c9:09:1a:82:8d:6b:cb:41:
dd:51:94:fe:d7:88:4d:96:cf:08:e6:12:71:4f:4c:
7f:a1:af:66:ea:01:97:15:e5:8d:b3:97:8d:20:cd:
bb:22:8b:7e:70:f1:f4:9d:20:73:34:4f:97:96:da:
37:dd:8f:37:8c:81:e3:31:76:8f:59:ad:61:3f:47:
f2:6d:2b:1a:58:b5:7d:23:db:8d:8b:c0:dc:da:89:
cf:87:c0:ba:15:cb:69:05:75:b1:d5:51:cd:fa:5a:
52:2d:a9:96:be:67:43:4b:2d:14:4c:88:49:20:ba:
f3:bc:09:98:c0:5c:d6:8d:f9:8b:80:44:4d:99:b3:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:66:78:AD:C2:F3:29:F8:0A:27:6E:37:8E:98:30:06:BF:C7:A4:D0
X509v3 Authority Key Identifier:
keyid:5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235322e302f32342d3234203d3e20323632313534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.55.252.0/24
Signature Algorithm: sha256WithRSAEncryption
45:62:06:88:7e:a4:2d:80:88:62:ee:21:a6:d5:dd:d4:63:e1:
13:6d:40:c9:25:bd:11:d1:d0:a7:1e:80:22:3c:69:e3:8a:99:
e0:49:70:c5:36:5d:ad:af:39:dd:28:cd:be:d2:77:19:03:ac:
34:ef:07:bc:73:4b:7a:93:28:ff:55:91:30:17:b3:0d:52:47:
77:3d:cd:37:9b:9e:6d:cf:64:63:09:8a:df:6b:85:a4:5d:e1:
0c:c8:f4:bc:a3:c3:0b:00:75:a8:90:aa:b9:5c:d4:8c:db:63:
29:14:bb:5f:86:31:ab:77:42:b1:38:12:d0:e9:f3:06:53:1b:
53:64:e8:af:d2:5d:61:ae:2d:f2:ed:75:ff:f5:a6:90:12:85:
31:d6:d7:99:7d:cb:bc:b0:a6:4c:71:a5:68:ce:f4:9d:54:37:
d5:5b:33:53:b8:9b:bc:3c:7e:3e:2c:fc:a4:49:07:b5:92:b9:
76:52:2e:14:64:37:23:c9:d0:98:0f:75:a6:57:6d:7a:7d:9a:
b7:e1:75:48:35:fd:bc:8d:0d:5f:1d:25:a8:39:34:94:1c:c6:
0a:5a:d7:58:7e:91:79:bb:b1:b1:b2:a3:f1:55:da:e9:9d:50:
ff:2a:59:97:e5:c1:1c:20:5e:16:6d:38:18:6b:1e:6b:8f:a3:
f1:fd:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 19:53:44 2024 by rpki-client on console-ams.rpki-client.org