Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS55002.roa
File: AS55002.roa (raw, json)
Hash identifier: Xh+cckzOzGFAtOvg3QJ2WDZMYO8M+NZXNOXyIAPE9yE=
Subject key identifier: E8:5C:9E:96:08:D8:8D:68:95:F8:B7:3A:33:7A:EF:4F:A5:87:F0:0E
Certificate issuer: /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial: 7806898220D4015956268E4C817ED482F29F8020
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS55002.roa
Signing time: Wed 29 Jan 2025 17:30:03 +0000
ROA not before: Wed 29 Jan 2025 17:25:03 +0000
ROA not after: Wed 28 Jan 2026 17:30:03 +0000
asID: 55002
IP address blocks: 200.94.180.0/24 maxlen: 24
200.94.181.0/24 maxlen: 24
201.131.249.0/24 maxlen: 24
201.131.251.0/24 maxlen: 24
207.248.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 05:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:06:89:82:20:d4:01:59:56:26:8e:4c:81:7e:d4:82:f2:9f:80:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
Validity
Not Before: Jan 29 17:25:03 2025 GMT
Not After : Jan 28 17:30:03 2026 GMT
Subject: CN=E85C9E9608D88D6895F8B73A337AEF4FA587F00E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:63:a5:6f:c1:bd:d7:55:4d:be:e4:5e:e1:14:
0d:aa:69:e0:6d:5e:05:43:02:bc:b6:75:8a:a6:78:
a2:9f:87:e1:e3:44:05:9d:94:cb:e8:e2:d5:ee:41:
ab:4e:17:a9:23:43:4e:5c:8b:f8:fa:ff:9c:eb:70:
d8:e9:11:cb:9a:56:c4:9b:7e:99:02:48:65:24:de:
16:ff:f0:93:3e:82:67:5a:73:a7:46:6e:c6:61:9d:
1e:7c:73:09:1a:58:d2:6c:e3:45:6b:3a:47:c1:8d:
3f:69:fe:9f:2b:94:80:cd:cb:96:4b:61:66:82:4f:
93:57:94:1a:aa:5a:af:5f:1e:bf:9b:56:c9:34:85:
c7:f8:da:d3:71:48:a1:02:1d:b6:4b:e4:25:88:6d:
6e:51:8a:28:7a:1a:35:01:11:3b:1d:3d:ec:f6:0c:
3f:13:2e:85:61:cc:21:3d:94:24:77:70:85:bb:dc:
bd:74:46:fc:47:4a:6c:a3:57:5b:25:0f:13:87:df:
8b:3a:00:22:77:70:d9:28:12:87:a2:ef:93:73:1d:
19:34:98:70:68:e6:3b:cd:ca:7a:98:6b:eb:e6:b8:
e4:4d:76:65:80:29:e0:47:0d:ec:47:22:af:a2:02:
4d:92:5a:c6:bd:27:28:c3:2a:76:ce:08:e4:d9:7d:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5C:9E:96:08:D8:8D:68:95:F8:B7:3A:33:7A:EF:4F:A5:87:F0:0E
X509v3 Authority Key Identifier:
keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/AS55002.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.94.180.0/23
201.131.249.0/24
201.131.251.0/24
207.248.64.0/24
Signature Algorithm: sha256WithRSAEncryption
37:fb:7d:d1:a5:a2:2c:43:40:cd:f9:e4:fb:bb:42:82:29:3f:
46:8a:d9:14:40:33:7f:ca:ef:b8:51:54:a6:cc:bd:b4:b4:c1:
0c:06:90:88:be:ad:06:3c:ea:45:c9:ef:f1:a1:d4:4b:09:41:
da:a2:c2:35:8c:eb:f2:f8:bb:44:5d:36:c5:a6:3b:eb:2a:27:
07:cf:17:50:b5:d9:1c:0a:d6:25:f6:66:5f:4c:06:4a:a8:97:
d1:a1:11:84:bc:85:8c:6e:4f:88:e4:71:fd:d6:ed:4f:2a:2a:
9e:06:55:2a:e9:c3:ed:fe:8d:b3:1c:06:70:cd:3f:11:3a:2d:
3d:72:53:fa:78:83:f9:ec:0b:ef:ba:a9:44:ca:0f:df:5c:3a:
de:bf:3d:7f:70:19:01:e0:15:fb:d7:f0:01:46:aa:0a:bf:73:
0f:c7:d4:29:96:3d:cf:07:ef:11:49:76:47:e8:98:d2:45:d8:
8f:5d:2c:fd:86:24:cc:12:d4:0b:a7:2b:cf:75:27:57:dc:72:
1a:78:6f:ad:7f:cb:1a:4a:61:66:11:85:56:39:ba:fd:85:42:
54:81:a5:29:69:eb:3a:fa:d7:63:47:b2:07:9f:cb:bd:b4:ed:
0d:85:42:66:f3:df:03:b9:f9:3a:3e:02:bb:ce:5d:48:41:66:
d4:d2:af:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:43:08 2025 by rpki-client