Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/ae609317fb0485547859221f9c544138add7b833.roa
File: ae609317fb0485547859221f9c544138add7b833.roa (raw, json)
Hash identifier: tOgh+IB8G79TFNu+Jh7qldZ8LJNpAycTEWpW8y3HP08=
Subject key identifier: CD:48:A0:37:1C:30:47:CF:7B:95:0E:F0:47:1D:89:63:08:36:78:B2
Certificate issuer: /CN=8c35dfff317cf25b1f43e239ba268307c208d4c4
Certificate serial: 0DBA23
Authority key identifier: 1F:9D:45:25:40:4A:DF:2B:B4:1F:1C:F6:0B:48:7E:97:C7:81:10:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c35dfff317cf25b1f43e239ba268307c208d4c4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/ae609317fb0485547859221f9c544138add7b833.roa
Signing time: Wed 24 Mar 2021 14:29:57 +0000
ROA not before: Wed 24 Mar 2021 14:29:57 +0000
ROA not after: Tue 24 Mar 2026 14:29:57 +0000
asID: 12150
IP address blocks: 179.60.196.0/22 maxlen: 24
200.59.0.0/20 maxlen: 24
200.61.240.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 899619 (0xdba23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c35dfff317cf25b1f43e239ba268307c208d4c4
Validity
Not Before: Mar 24 14:29:57 2021 GMT
Not After : Mar 24 14:29:57 2026 GMT
Subject: CN=ae609317fb0485547859221f9c544138add7b833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:66:4d:80:1c:f1:c2:16:9a:b5:0f:ba:61:d5:
78:8b:aa:a8:b3:f4:85:63:aa:89:75:bb:a6:d1:44:
cb:4f:dc:c0:e9:b3:9d:1e:e3:e2:26:ed:4a:2c:00:
ae:bf:3c:88:97:a7:78:e0:ed:88:32:bf:d6:e7:af:
69:8d:d8:81:5b:8b:28:45:ff:79:f0:54:85:dc:d3:
2b:8f:76:f3:fe:e3:6e:05:99:2b:a8:e1:44:91:7b:
a6:b5:b5:04:87:b9:4d:53:bc:ca:ec:5d:d5:c4:39:
e0:67:a4:0f:b9:ad:78:9e:f2:93:0a:dc:b7:4b:12:
fe:15:53:cd:46:75:72:0b:9a:db:fc:67:bb:35:fb:
91:2d:b9:9a:08:a2:6b:2d:1c:ce:3d:33:07:92:cd:
5b:e9:75:60:7e:86:ef:74:9f:a6:78:fc:eb:ba:ca:
01:94:9f:02:06:17:84:a7:4a:d2:f1:e7:a4:cb:c1:
bc:a4:1c:41:82:52:99:50:bc:c5:e5:f7:8a:bf:8f:
96:56:ec:46:e1:f5:20:1f:d0:28:cd:0a:64:7d:c7:
db:4b:be:dc:8e:25:36:0c:5c:e9:c1:c3:4b:fd:71:
de:ef:f9:44:f8:41:0e:3c:68:d5:ef:50:1b:be:13:
ff:b5:5b:85:87:ce:4c:70:34:4d:49:75:e1:70:00:
fc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:48:A0:37:1C:30:47:CF:7B:95:0E:F0:47:1D:89:63:08:36:78:B2
X509v3 Authority Key Identifier:
keyid:1F:9D:45:25:40:4A:DF:2B:B4:1F:1C:F6:0B:48:7E:97:C7:81:10:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c35dfff317cf25b1f43e239ba268307c208d4c4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/ae609317fb0485547859221f9c544138add7b833.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8ff9728a-1011-41d6-b877-838e6e4a2f7d/8c35dfff317cf25b1f43e239ba268307c208d4c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.196.0/22
200.59.0.0/20
200.61.240.0/21
Signature Algorithm: sha256WithRSAEncryption
45:e4:0c:84:2c:6d:dd:80:4b:f9:a0:f3:2d:cd:36:1a:4e:36:
83:20:c8:e9:cc:b3:5f:8d:ca:44:84:4d:7a:84:31:7d:4b:8c:
d6:78:af:f8:d6:55:b9:51:ce:89:d8:3c:21:49:cb:cb:20:ba:
c6:ac:44:e1:d2:85:fc:53:26:3d:18:9d:51:a6:12:95:fa:a7:
b0:fe:d0:7b:cb:04:2d:cf:21:23:7e:09:8a:31:af:51:9d:10:
66:92:bd:ab:f7:ed:a5:40:e9:28:e0:f8:c3:b3:36:14:c5:9b:
d0:74:ee:8b:c9:7d:63:58:3b:9b:98:fb:5c:a3:c4:ef:88:8a:
39:33:e8:14:0d:8b:9d:2f:42:f9:32:1b:de:4c:b1:de:fd:75:
48:03:56:66:50:93:ea:01:de:d7:0d:05:e2:d5:ad:d3:3b:f1:
30:ca:89:4f:a7:e6:73:65:14:cd:ac:c7:b2:01:8f:f6:67:fa:
5b:27:fd:55:56:a8:8a:22:eb:52:80:f2:9e:f9:2f:6a:93:91:
ec:c5:a7:fe:1e:24:b3:9d:66:d3:7a:ad:e1:74:ad:48:b3:37:
62:fa:2c:dc:dd:39:17:42:f3:c2:35:2c:c5:f3:52:92:fa:b4:
88:18:69:de:b7:18:ae:a1:ff:b2:85:ca:12:7e:f6:82:0d:c4:
77:64:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-ams.rpki-client.org