Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/f976544a4699e0db47bd88835f9b3554eb6a2695.roa
File: f976544a4699e0db47bd88835f9b3554eb6a2695.roa (raw, json)
Hash identifier: OGKICZI4FidTN1Tj8jZdpxZo833QCEV9bewPATVODa8=
Subject key identifier: 1A:B5:4B:18:E4:F8:EA:5C:30:82:F4:6E:07:70:72:51:23:C1:7D:D9
Certificate issuer: /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial: 209E
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/f976544a4699e0db47bd88835f9b3554eb6a2695.roa
Signing time: Wed 21 Sep 2022 20:52:02 +0000
ROA not before: Wed 21 Sep 2022 20:50:34 +0000
ROA not after: Sat 21 Sep 2024 20:50:34 +0000
asID: 8163
IP address blocks: 200.89.112.0/24 maxlen: 24
200.89.113.0/24 maxlen: 24
200.89.114.0/24 maxlen: 24
200.89.115.0/24 maxlen: 24
200.89.116.0/24 maxlen: 24
200.89.117.0/24 maxlen: 24
200.89.118.0/24 maxlen: 24
200.89.121.0/24 maxlen: 24
200.89.124.0/24 maxlen: 24
200.89.125.0/24 maxlen: 24
200.89.126.0/24 maxlen: 24
200.89.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8350 (0x209e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Validity
Not Before: Sep 21 20:50:34 2022 GMT
Not After : Sep 21 20:50:34 2024 GMT
Subject: CN=f976544a4699e0db47bd88835f9b3554eb6a2695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6a:e1:6b:9c:d7:e6:fd:7f:c9:76:3b:22:c2:
bd:ad:b5:c5:c6:0d:d7:38:e6:ee:e9:04:a9:09:e3:
c1:c1:aa:ce:db:2c:d4:a7:12:fd:59:01:ab:f5:64:
43:49:39:83:92:92:6a:5e:5d:e0:7b:c5:d2:93:46:
55:36:a5:9a:ad:1f:0a:fb:59:b9:37:12:ce:df:7d:
82:1d:84:36:9a:54:b7:8d:4f:4a:e3:99:97:cf:06:
66:16:c9:44:e1:78:5f:28:4d:81:69:33:27:4b:9a:
c6:ae:19:66:8f:02:db:ac:a2:dd:d4:65:8d:4d:dc:
88:ba:25:d5:07:ab:15:6a:c2:84:14:70:53:ba:6b:
e1:3b:ca:58:6b:e4:4b:e6:13:1f:61:a5:3c:ec:d5:
ce:1f:78:23:bc:2c:38:bc:f2:39:15:ba:97:48:f2:
d8:c0:05:95:f5:27:2f:d4:93:4c:29:0a:03:10:05:
9f:74:b0:d6:8d:55:9f:22:de:a5:2d:52:ab:26:6a:
99:51:f6:c1:ec:6e:74:41:50:23:b5:71:25:e9:06:
3c:e6:aa:25:89:bb:c2:69:9c:84:67:0e:fa:ff:f7:
a2:ae:70:2d:ea:b5:42:c3:03:08:13:fa:ad:0e:35:
7b:80:d3:02:d9:f8:4f:f8:26:05:87:22:4a:51:8b:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B5:4B:18:E4:F8:EA:5C:30:82:F4:6E:07:70:72:51:23:C1:7D:D9
X509v3 Authority Key Identifier:
keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/f976544a4699e0db47bd88835f9b3554eb6a2695.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.89.112.0-200.89.118.255
200.89.121.0/24
200.89.124.0/22
Signature Algorithm: sha256WithRSAEncryption
65:25:7e:b0:27:38:be:98:6e:2f:a2:d3:54:3c:36:7c:55:e4:
49:f8:f6:3c:b7:04:89:fe:5f:17:2a:cb:29:09:70:72:19:66:
11:bf:25:4c:01:5a:00:9b:92:62:85:f8:aa:0f:56:56:33:21:
09:e8:4b:3f:3a:54:0b:e5:74:5a:eb:df:c9:da:f4:a4:81:b3:
71:5c:93:3b:89:ec:27:02:36:3d:f8:83:58:31:02:2c:8a:ca:
c4:f0:09:f3:41:27:32:90:94:14:4a:b7:89:12:57:62:3d:dc:
46:31:83:19:5d:3c:8c:82:99:a9:99:be:24:5d:ef:62:65:45:
75:34:24:ad:f4:2b:6e:58:46:ee:68:1f:52:2c:a7:88:ee:ca:
45:8b:3d:05:d2:4a:46:d3:1a:bf:0b:5b:82:78:60:88:68:b7:
34:11:14:85:24:e7:70:27:f3:61:51:39:98:d3:72:15:a2:09:
88:15:51:fc:39:ad:67:bf:d5:3d:06:f9:06:f4:af:c9:0a:f3:
a3:4b:2a:d4:9a:b0:a8:0a:46:4e:05:54:69:f4:7d:49:13:e8:
a6:37:6a:96:fe:3c:b7:91:d3:fa:79:90:69:2f:7f:fc:73:24:
de:8c:e8:99:5c:44:49:1b:1f:2a:8f:f7:bb:d4:07:7c:20:65:
1e:37:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org