Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/e7f837af2b6829641e590466e86eeaa7eee6a1c3.roa
File: e7f837af2b6829641e590466e86eeaa7eee6a1c3.roa (raw, json)
Hash identifier: 9q+dplQS0NQx9y4dG4bXoUDYoNRqm/FJD/JFNAhzqy8=
Subject key identifier: 68:87:F4:EF:09:8B:A6:7B:2B:32:14:52:1B:A7:39:05:79:FD:F4:A3
Certificate issuer: /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial: 02505B
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/e7f837af2b6829641e590466e86eeaa7eee6a1c3.roa
Signing time: Wed 07 Dec 2022 03:19:14 +0000
ROA not before: Tue 20 Sep 2022 20:50:34 +0000
ROA not after: Sat 21 Sep 2024 20:50:34 +0000
asID: 8163
IP address blocks: 200.89.112.0/20 maxlen: 20
200.89.112.0/24 maxlen: 24
200.89.113.0/24 maxlen: 24
200.89.114.0/24 maxlen: 24
200.89.115.0/24 maxlen: 24
200.89.116.0/24 maxlen: 24
200.89.117.0/24 maxlen: 24
200.89.118.0/24 maxlen: 24
200.89.121.0/24 maxlen: 24
200.89.124.0/24 maxlen: 24
200.89.125.0/24 maxlen: 24
200.89.126.0/24 maxlen: 24
200.89.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151643 (0x2505b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Validity
Not Before: Sep 20 20:50:34 2022 GMT
Not After : Sep 21 20:50:34 2024 GMT
Subject: CN=e7f837af2b6829641e590466e86eeaa7eee6a1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:45:84:45:e3:8b:36:49:15:90:9e:ab:67:b3:
26:dd:b8:0b:b5:72:65:20:5b:9c:e8:4e:aa:c5:50:
a7:1a:fe:45:37:94:58:1f:12:00:70:47:d0:e8:e1:
61:28:1f:61:0a:88:d2:b9:c0:ca:6c:0a:82:0e:0f:
fa:d8:6a:f6:b4:33:9e:19:c5:49:e1:b3:c3:4e:17:
13:12:0b:ef:ae:fa:e2:e2:fa:a2:a0:5f:f1:71:a3:
6b:f6:f4:56:3f:89:e0:1f:17:a7:45:84:76:2f:ef:
60:27:21:94:4e:8a:d7:d2:dc:5a:62:e8:1e:26:03:
2c:e3:75:50:76:ca:39:de:7b:b7:9f:53:43:2a:60:
fb:3e:64:b1:7f:ce:ab:17:55:45:2a:89:69:51:dd:
2c:8d:72:0c:26:33:34:ed:68:0d:45:ce:1e:64:d3:
7c:ec:ba:b7:67:5a:3e:8e:3d:4a:92:1c:e5:53:48:
75:ee:ba:a9:9c:d8:dd:a5:82:0c:a9:88:82:ff:3d:
8d:6b:f5:61:15:3f:ae:32:d5:1a:80:77:c3:73:b9:
ab:cb:4c:bb:ef:63:f4:f3:fb:a0:13:6a:db:44:05:
2f:29:19:d6:16:1f:e8:95:e6:5a:5b:cc:97:05:cc:
a6:f7:e6:bb:d8:1a:16:24:cf:a3:b7:a2:1a:ad:e4:
52:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:87:F4:EF:09:8B:A6:7B:2B:32:14:52:1B:A7:39:05:79:FD:F4:A3
X509v3 Authority Key Identifier:
keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/e7f837af2b6829641e590466e86eeaa7eee6a1c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.89.112.0/20
Signature Algorithm: sha256WithRSAEncryption
04:32:85:b3:de:0d:bd:e3:02:d9:1a:47:d3:1a:41:ab:f1:76:
df:95:fa:a6:52:f0:b3:7e:9b:c7:e1:b1:17:82:20:de:d7:af:
d8:ab:c9:c3:d9:be:ed:09:93:32:d0:d8:66:61:3b:25:66:47:
19:fd:5d:6e:3d:20:70:1a:bd:be:68:59:f7:40:cf:d4:00:2a:
aa:ba:27:a0:3d:ea:a7:9f:fa:00:66:1e:16:5d:d0:a0:04:5d:
de:f5:10:37:3a:06:22:64:2d:3e:1c:e5:82:ea:ee:40:d0:ed:
3c:88:ef:97:03:db:d3:d6:95:e2:2d:46:f2:c0:41:a9:be:89:
e5:65:be:aa:1f:3f:48:7b:53:f0:68:75:9b:dc:51:53:b9:da:
c5:4f:7d:9c:24:f2:43:20:5f:3b:b7:51:8b:29:f5:fe:8d:c0:
46:91:9f:18:ff:b9:5c:b6:23:dc:1c:be:5d:40:06:7a:00:c2:
d8:7c:3c:a9:d5:40:98:2f:01:cd:43:ca:80:5e:db:6c:52:88:
0e:5b:3b:cb:5a:1c:e2:5f:02:ac:a3:15:a4:b9:fc:f9:b3:12:
a0:a6:cf:ef:ab:0a:0f:f3:5a:a9:88:3b:c9:92:50:9b:e5:c9:
ac:f0:8b:98:1d:2a:01:21:ef:64:3d:f9:1b:a3:8b:13:dd:53:
69:16:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 17:58:47 2023 by rpki-client on console-ams.rpki-client.org