Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/d05229720b1ec12e6d895ba946182b0de6a47b40.roa
File: d05229720b1ec12e6d895ba946182b0de6a47b40.roa (raw, json)
Hash identifier: QID1+R5w5Xm7iL3BRJTSkkp3UHL+tWxjFOKwB3j9/ms=
Subject key identifier: 45:22:07:AD:E3:37:9E:0A:16:06:E9:12:AC:52:B1:02:22:7D:96:85
Certificate issuer: /CN=138405134343f63286b605fe9165839fd04a4252
Certificate serial: 1F4696
Authority key identifier: 13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/d05229720b1ec12e6d895ba946182b0de6a47b40.roa
Signing time: Fri 24 Mar 2023 08:31:42 +0000
ROA not before: Thu 23 Mar 2023 08:31:42 +0000
ROA not after: Sat 22 Mar 2025 08:31:42 +0000
asID: 27820
IP address blocks: 200.0.29.0/24 maxlen: 24
200.0.30.0/23 maxlen: 24
200.0.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2049686 (0x1f4696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=138405134343f63286b605fe9165839fd04a4252
Validity
Not Before: Mar 23 08:31:42 2023 GMT
Not After : Mar 22 08:31:42 2025 GMT
Subject: CN=d05229720b1ec12e6d895ba946182b0de6a47b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:4d:07:7a:d9:33:3f:4f:00:ac:d3:9f:04:
72:d9:90:29:d3:5f:87:8f:18:93:4d:7a:1d:32:b1:
f0:b6:32:76:d7:14:25:16:d6:87:91:c7:cc:6e:d8:
bd:9b:00:d8:cc:a9:79:80:19:53:a2:3b:23:54:61:
0a:45:23:80:3e:92:8b:f9:6d:bc:72:64:da:18:f0:
28:da:2b:98:61:32:30:af:b0:b4:1f:29:fb:69:2b:
9a:c9:7c:da:51:85:fb:60:40:40:73:1f:a8:91:27:
88:84:c3:53:7b:fe:61:ff:5c:75:d5:f3:05:68:9d:
17:89:43:3c:55:6d:e0:5e:06:fc:16:39:c0:ad:95:
4b:5c:17:76:da:fd:d4:71:e5:e0:a6:5e:f4:19:ad:
c7:44:b3:f9:93:05:b5:aa:b4:db:98:cf:9b:62:48:
68:ec:77:48:2f:44:29:a8:7b:85:b3:0b:ab:d4:0f:
08:08:6a:bd:3a:48:e4:cb:1c:cb:bd:cf:d5:24:6b:
12:42:63:1e:fc:6e:97:e8:d0:0b:0a:ca:f8:29:d9:
7f:b3:a2:0d:78:c4:ff:11:d1:bc:d9:83:bb:29:90:
fa:f9:ce:1c:22:55:05:12:ec:db:b9:71:a7:6f:24:
eb:64:31:50:7d:8e:d6:69:0b:ba:47:df:89:f7:85:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:22:07:AD:E3:37:9E:0A:16:06:E9:12:AC:52:B1:02:22:7D:96:85
X509v3 Authority Key Identifier:
keyid:13:F4:92:3E:90:2F:4B:52:42:C1:18:1F:7D:58:FF:6F:88:EF:8F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/138405134343f63286b605fe9165839fd04a4252.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/d05229720b1ec12e6d895ba946182b0de6a47b40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/68e08f5e-fecc-495b-b388-5e4a5ac95308/138405134343f63286b605fe9165839fd04a4252.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.29.0-200.0.31.255
Signature Algorithm: sha256WithRSAEncryption
60:0d:d8:b6:58:bf:80:2a:f3:b4:c7:f3:54:23:2c:7c:b0:5b:
0e:47:2f:b2:b7:a8:f6:a0:03:e5:af:08:f2:0a:a2:d9:6f:7a:
fd:56:2e:f3:14:aa:c3:88:ee:32:b7:de:56:69:a2:d9:e4:70:
e1:17:91:34:b9:96:97:78:31:ee:e9:12:10:35:ea:f3:c8:a4:
7c:ed:c8:e1:eb:c4:95:2c:6d:a7:81:d0:00:66:e0:8e:52:89:
db:42:b8:ac:3e:5c:52:ab:1e:c5:33:25:03:54:99:9b:c0:1c:
28:b9:bc:7b:0f:c8:02:5a:b3:49:3f:d7:4f:9c:6a:b2:b5:f5:
59:b2:54:93:05:83:74:99:ec:b6:32:63:f7:41:f2:31:fa:3c:
5e:91:f9:c0:c2:07:dd:36:88:fd:4c:4e:3a:d6:55:60:df:e7:
46:9e:60:c7:d5:f6:39:9b:aa:7c:a0:17:6d:fc:26:45:1b:9d:
c1:2e:c9:e5:90:f2:4e:e3:5c:91:ee:55:6d:16:eb:bc:bb:6a:
0e:b0:60:b1:85:eb:2f:94:af:8a:90:62:e6:80:04:51:30:32:
67:90:0b:fd:f7:e8:4e:38:b4:e4:43:75:9a:37:c3:aa:31:80:
5c:60:e9:10:82:3c:8e:6a:5a:1a:71:b6:aa:f6:c7:10:3b:c5:
58:24:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 18:35:10 2023 by rpki-client on console-ams.rpki-client.org