Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e32332e312e302f32342d3234203d3e203238343938.roa
File: 3230302e32332e312e302f32342d3234203d3e203238343938.roa (raw, json)
Hash identifier: Hmr7wobAKyZMqPiqoJu1ont9KzrM7uyTx4QROIO5ZGA=
Subject key identifier: 6D:AB:A1:74:23:A6:E1:70:4D:DF:1E:96:48:D5:87:84:BB:ED:3E:2D
Certificate issuer: /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial: 66EBF7FC0BC88647E09DF15412299263B70E8C41
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e32332e312e302f32342d3234203d3e203238343938.roa
Signing time: Wed 22 May 2024 04:25:00 +0000
ROA not before: Wed 22 May 2024 04:20:00 +0000
ROA not after: Wed 21 May 2025 04:25:00 +0000
asID: 28498
IP address blocks: 200.23.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 17:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:eb:f7:fc:0b:c8:86:47:e0:9d:f1:54:12:29:92:63:b7:0e:8c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
Validity
Not Before: May 22 04:20:00 2024 GMT
Not After : May 21 04:25:00 2025 GMT
Subject: CN=6DABA17423A6E1704DDF1E9648D58784BBED3E2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:04:27:3a:05:4a:76:34:da:9c:a5:ac:f6:
9a:05:33:8a:4d:f9:c8:8f:25:09:a7:7c:f0:e8:c7:
86:b5:b0:e3:b7:14:83:c4:6a:e4:92:14:3b:f8:9b:
c7:85:b3:a1:85:9f:d3:ba:71:61:c7:23:12:1f:bf:
e8:c1:17:6e:d5:3a:67:86:f1:35:61:fe:4f:31:37:
0e:1e:f0:96:4d:32:09:31:d9:c0:bc:3e:3b:bc:87:
5f:17:e6:03:01:ab:df:29:66:07:d7:58:b8:d4:79:
0a:ba:f1:1e:76:7e:b8:63:cc:e3:0b:2f:71:b0:f9:
a7:ff:c4:5e:4a:c3:d9:27:76:7f:04:3f:28:d6:31:
92:13:5b:46:57:97:63:4a:e4:f3:7c:c4:44:a2:21:
01:b2:49:f8:70:03:c1:c9:0a:fe:1c:41:a3:94:61:
97:83:f4:79:c2:5a:c8:ee:93:15:8a:b1:dd:41:bc:
10:1b:81:6e:f3:29:25:d0:f4:10:14:3c:c6:cf:6f:
48:eb:4b:f3:c7:10:da:ad:29:91:bf:25:73:3a:44:
9f:e7:6d:40:57:1a:16:57:9a:6a:6b:5b:7b:4b:82:
ee:25:be:bd:a6:31:f7:dc:16:d7:4b:21:db:16:7a:
d4:97:79:ed:04:97:90:97:84:1d:b7:51:3c:9a:33:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AB:A1:74:23:A6:E1:70:4D:DF:1E:96:48:D5:87:84:BB:ED:3E:2D
X509v3 Authority Key Identifier:
keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230302e32332e312e302f32342d3234203d3e203238343938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.23.1.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a7:7d:f4:aa:42:cd:8b:7b:37:90:cd:be:18:4b:a7:09:68:
6e:bd:c3:e4:2f:e6:4c:a8:46:b0:f8:c3:26:31:3a:5c:63:15:
44:fb:2b:98:d3:cd:83:9c:37:e7:64:9a:eb:9a:82:c2:c5:2f:
2f:8c:5c:c2:d2:f2:35:f7:b8:0b:b7:ce:bf:05:b4:bc:11:48:
7f:8d:66:f0:ca:c1:1e:61:5a:f6:71:81:3b:76:a9:12:4a:eb:
e8:5c:72:2b:a9:08:df:09:6d:9f:98:1e:6a:10:5a:e1:8e:4e:
c5:ca:08:30:ef:fe:a4:4d:c2:6f:a7:82:71:64:de:1a:df:16:
6c:16:34:8d:79:b4:d7:e4:41:6a:71:ed:3f:ae:2d:32:df:e4:
52:7e:cc:d7:0b:89:cf:32:78:19:4c:d9:ea:5b:d6:c6:79:51:
da:6a:1c:c0:78:24:92:dc:d0:08:15:ed:d8:e6:85:ce:4a:06:
e7:c4:12:3b:fd:9c:0c:f3:1d:c9:7c:5a:b9:a1:4c:7d:b3:25:
1e:51:c3:a7:ad:1e:99:88:5e:4b:1b:09:c3:d6:a9:25:55:a3:
6d:3c:7d:6d:9e:2e:0b:9b:c5:0d:c7:a7:a4:a0:e5:ba:2c:a1:
3e:be:c3:91:00:45:7c:e7:ff:5b:d7:6e:90:8d:92:62:37:b7:
d7:b5:10:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:29 2025 by rpki-client