Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/0f59e4395e125f7f9bc28d00241846ae82e4c08f.roa
File: 0f59e4395e125f7f9bc28d00241846ae82e4c08f.roa (raw, json)
Hash identifier: +2wkQC28qkb/o7EaE0EIljT7+oENX8ixUwdMGt3g/tM=
Subject key identifier: 29:E9:81:58:8C:CD:B4:6C:81:AC:06:67:5E:B1:B6:D9:D8:C4:65:29
Certificate issuer: /CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
Certificate serial: 165010
Authority key identifier: 33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/0f59e4395e125f7f9bc28d00241846ae82e4c08f.roa
Signing time: Thu 20 Apr 2023 12:11:56 +0000
ROA not before: Wed 19 Apr 2023 12:11:55 +0000
ROA not after: Sun 20 Apr 2025 12:11:55 +0000
asID: 52431
IP address blocks: 200.63.64.0/20 maxlen: 24
200.63.80.0/21 maxlen: 24
200.63.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1462288 (0x165010)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
Validity
Not Before: Apr 19 12:11:55 2023 GMT
Not After : Apr 20 12:11:55 2025 GMT
Subject: CN=0f59e4395e125f7f9bc28d00241846ae82e4c08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:45:b6:2a:a0:02:dc:8c:c6:f0:a3:8a:9d:0b:
c0:dd:2e:2c:b6:9e:79:ab:f2:b6:63:9e:1a:c5:9c:
21:b3:72:50:b5:d4:5c:3d:bc:a0:d2:fd:1b:4e:9f:
57:b1:bd:87:07:a4:53:4e:79:12:ce:b6:b7:fa:01:
a1:d8:ad:af:77:d0:58:84:28:39:22:75:95:f9:53:
ea:8f:70:60:01:7f:8c:01:5a:5f:ca:d2:33:7d:30:
35:55:c2:3a:bb:44:f9:18:e8:2a:28:4b:e7:70:aa:
d3:10:f5:b8:bf:4a:d0:a8:bd:5c:6e:5f:c3:81:4c:
44:5a:30:38:24:41:5d:fa:1d:a6:93:e2:21:37:65:
6b:89:66:3f:56:35:f5:24:47:b3:bd:64:41:74:52:
e4:3c:bb:0e:e2:31:c5:fc:40:79:a5:17:93:77:eb:
37:ef:44:d7:7c:82:09:4c:a8:13:f9:f0:96:1a:81:
a8:67:2d:36:ee:0c:41:a7:05:33:95:7c:f9:34:bd:
a6:eb:99:f1:6e:35:8e:95:37:11:1f:90:7b:84:2a:
cd:a2:6a:fc:f3:86:9c:84:4b:80:5e:db:3f:1f:58:
0e:3b:e0:60:96:0d:b5:c9:94:54:6c:0d:26:80:e7:
26:ac:73:39:50:8f:6e:be:b2:f6:ff:d8:55:b8:d1:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E9:81:58:8C:CD:B4:6C:81:AC:06:67:5E:B1:B6:D9:D8:C4:65:29
X509v3 Authority Key Identifier:
keyid:33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/0f59e4395e125f7f9bc28d00241846ae82e4c08f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/1e11687078667bdcd452bb7b0f00bb86dcfed972.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.63.64.0-200.63.91.255
Signature Algorithm: sha256WithRSAEncryption
06:87:79:17:42:28:4a:8e:33:f1:a2:e8:db:82:99:ce:8d:c5:
ff:1b:91:0b:76:48:a4:d8:15:ed:13:6f:2e:d5:aa:85:c0:07:
84:6f:56:3a:61:c1:25:23:ec:80:64:1a:30:30:e5:8c:c1:77:
ce:09:5f:69:f5:76:fe:8e:7c:ce:ec:40:49:a4:f0:1e:85:ed:
14:25:fb:77:a7:11:6b:ee:7d:d8:49:82:ed:0b:ca:ce:bc:e5:
f5:4d:8b:28:35:1b:a7:3d:19:25:ba:06:bb:1d:db:7b:94:e8:
8f:57:ed:1f:94:3a:5d:6c:48:7e:c6:f1:c8:29:0d:39:1b:f0:
ba:17:82:74:90:e1:a2:35:38:63:8b:a8:fd:2b:b6:27:33:48:
6a:99:56:28:d9:85:39:f5:f3:f8:75:94:dc:46:0f:4a:dd:d4:
bb:26:3b:2d:c1:db:3f:75:2b:a3:e4:1c:e9:20:83:7d:00:f8:
2c:d5:e2:ba:8d:8c:be:14:bb:bb:54:4d:73:57:50:fa:97:80:
03:c9:0e:06:cd:23:47:5f:3c:d1:73:82:5f:0c:82:3e:4e:6e:
4c:1d:6f:73:92:15:12:7f:37:68:8b:05:1d:80:39:fb:1c:0d:
aa:d2:31:78:14:1e:6a:35:8e:0f:ec:f7:42:53:01:7d:22:bf:
2e:92:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org