Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/8a272278aff43abe0f2b313f3c4289871325b27e.roa
File: 8a272278aff43abe0f2b313f3c4289871325b27e.roa (raw, json)
Hash identifier: t4uPFjQiK4nbBdE/eyNus0gwwFAKy4cgCNknRLKQ46c=
Subject key identifier: A7:7D:0E:2A:3B:37:06:6C:3C:90:59:9D:F0:43:83:DA:28:7F:E3:08
Certificate issuer: /CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
Certificate serial: 03A5CC
Authority key identifier: 33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/8a272278aff43abe0f2b313f3c4289871325b27e.roa
Signing time: Wed 24 Mar 2021 14:31:27 +0000
ROA not before: Wed 24 Mar 2021 14:31:27 +0000
ROA not after: Tue 24 Mar 2026 14:31:27 +0000
asID: 52431
IP address blocks: 200.63.64.0/20 maxlen: 24
200.63.80.0/21 maxlen: 24
200.63.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239052 (0x3a5cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11687078667bdcd452bb7b0f00bb86dcfed972
Validity
Not Before: Mar 24 14:31:27 2021 GMT
Not After : Mar 24 14:31:27 2026 GMT
Subject: CN=8a272278aff43abe0f2b313f3c4289871325b27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4c:12:12:93:98:68:e2:d8:b2:72:f6:ef:a5:
e7:e3:f4:35:d4:fb:2a:bd:a8:f9:e5:21:9c:54:8c:
4f:67:73:e9:d1:83:42:24:2c:9c:79:12:59:24:43:
96:a8:f4:2f:8c:c7:3d:f9:f6:ab:0b:54:b5:74:8c:
79:54:33:a2:ab:22:61:c4:88:55:d2:2e:2d:4e:95:
bc:12:62:7e:de:46:68:c8:92:5c:84:c0:52:3d:56:
84:0a:34:dd:98:6e:9d:1f:54:48:f0:9c:85:a0:ba:
de:1b:7c:c1:6f:92:68:4a:d1:a6:1a:f8:22:c9:b0:
16:8e:66:83:bd:80:63:c9:17:3c:25:b3:f4:d9:ae:
5e:45:3c:d7:be:ad:a5:09:c7:97:57:77:b3:95:55:
16:5d:0b:5a:70:af:5f:5b:d2:5d:9e:87:57:3e:ba:
50:59:bc:e4:21:82:5a:43:bd:e3:f2:21:3a:8c:7b:
54:d0:7f:dc:3a:04:0c:f4:46:50:8e:d7:f7:3f:cd:
43:b6:1e:7b:75:e3:cf:17:5c:13:47:fa:0f:19:7c:
50:94:b7:e6:87:3f:24:a7:6d:e8:98:89:20:8b:cb:
7c:2d:e4:01:84:28:bc:57:e5:75:ea:75:71:45:4a:
c2:ef:c7:e1:dd:bf:71:a7:7f:96:19:fb:51:e8:39:
5d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7D:0E:2A:3B:37:06:6C:3C:90:59:9D:F0:43:83:DA:28:7F:E3:08
X509v3 Authority Key Identifier:
keyid:33:35:32:94:02:20:DA:17:63:DB:44:42:BC:86:06:AC:1E:99:BF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e11687078667bdcd452bb7b0f00bb86dcfed972.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/8a272278aff43abe0f2b313f3c4289871325b27e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/956abdcc-e0a7-4302-b20a-8b0e203af916/1e11687078667bdcd452bb7b0f00bb86dcfed972.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.63.64.0-200.63.91.255
Signature Algorithm: sha256WithRSAEncryption
30:c5:26:11:2b:76:69:0e:ad:dd:0c:33:f3:b7:1d:a4:9b:1d:
17:c9:7d:fc:2f:d1:29:dc:4f:f0:86:2d:9b:ac:bf:fc:ac:31:
3f:9a:a0:b2:da:64:80:3e:bb:aa:c4:13:0e:77:bb:23:20:25:
b6:b0:b1:94:9e:fb:62:bf:f2:0e:96:9f:54:3a:ce:61:2d:93:
b3:b0:84:2e:31:9b:48:a7:c1:19:8e:05:bf:cd:21:92:cb:20:
fb:c2:50:d6:84:a2:76:73:d3:04:45:6a:93:d2:84:58:aa:89:
d7:8a:21:44:08:fe:a8:c7:87:ee:07:f9:5d:db:bc:d2:fc:02:
53:4d:3e:74:ee:55:fa:69:3c:94:07:81:e0:2f:39:5e:70:17:
7f:27:bd:14:40:c2:7d:fc:72:f9:25:de:b2:0e:e1:a8:8b:1f:
fa:9a:12:5d:e0:a7:92:16:d2:e2:59:48:b1:19:30:14:c0:86:
8f:36:69:bd:89:9b:ae:e9:32:48:b5:22:65:89:12:7a:00:0b:
fa:69:ca:5a:9f:88:6d:08:19:09:f8:f1:a9:a2:27:da:3f:1d:
61:e5:38:c4:30:cc:fd:49:3a:9d:fc:ff:2b:8d:03:cc:b1:8c:
06:1c:96:aa:fe:44:15:0a:cd:97:f3:01:9b:85:a7:60:c7:bb:
bb:2d:d5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org