Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134332e302f32342d3234203d3e203532323831.roa
File: 3230302e33352e3134332e302f32342d3234203d3e203532323831.roa (raw, json)
Hash identifier: /liMKWwlFP+TqlaiVzDLaHlH0YnRdtylE0SPrEFFuLo=
Subject key identifier: AD:9A:EC:6C:D2:4F:58:27:EC:41:16:6D:09:C1:2C:B0:DB:EA:F9:FE
Certificate issuer: /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial: 5D0497BE2A3AAB7D1E333E08E628B638527AB274
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134332e302f32342d3234203d3e203532323831.roa
Signing time: Tue 27 Aug 2024 19:20:00 +0000
ROA not before: Tue 27 Aug 2024 19:15:00 +0000
ROA not after: Tue 26 Aug 2025 19:20:00 +0000
asID: 52281
IP address blocks: 200.35.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 19:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:04:97:be:2a:3a:ab:7d:1e:33:3e:08:e6:28:b6:38:52:7a:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
Validity
Not Before: Aug 27 19:15:00 2024 GMT
Not After : Aug 26 19:20:00 2025 GMT
Subject: CN=AD9AEC6CD24F5827EC41166D09C12CB0DBEAF9FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:ca:45:60:7e:84:8d:00:fd:35:e1:fc:e8:
d2:8a:51:ad:4f:fa:41:c0:a2:39:75:e6:ab:1b:86:
43:17:32:36:03:c2:96:8b:98:95:55:ab:a0:11:4a:
a1:6a:78:58:c0:e3:96:3e:b7:81:09:59:0d:10:39:
09:ab:b9:31:bc:86:06:60:1f:de:3a:af:63:0e:b0:
15:d5:2d:df:3c:8a:3b:d4:5b:75:45:db:ce:b6:1a:
8f:87:39:a1:8b:db:7d:c0:cf:9d:76:be:77:bd:7b:
85:28:8e:4a:b8:44:ca:46:9c:8d:e0:dd:be:f2:59:
0d:2e:b0:b8:1b:ac:63:d8:96:1a:2b:d9:53:23:87:
fe:7a:9c:83:c6:c6:84:a8:2b:2e:40:5e:0c:b5:0b:
ab:71:aa:78:e7:e8:41:42:47:f2:c5:78:4d:35:16:
6b:9c:17:19:77:1e:56:40:3d:5d:d0:34:d5:78:b8:
b8:42:fb:23:2e:19:84:e7:de:d3:3a:b7:71:16:2b:
d7:94:e1:52:e5:5c:fb:b7:81:90:0f:5d:fd:49:ff:
84:8c:11:99:cc:2d:aa:60:81:ed:f5:da:c5:9f:5b:
a2:cc:35:1d:bd:f0:98:1c:22:87:7b:b9:3b:56:ea:
83:8f:0e:34:a1:10:5e:f6:7c:28:58:eb:2d:f4:e0:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9A:EC:6C:D2:4F:58:27:EC:41:16:6D:09:C1:2C:B0:DB:EA:F9:FE
X509v3 Authority Key Identifier:
keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3134332e302f32342d3234203d3e203532323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.143.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e1:3d:73:bd:70:ca:f6:56:ee:89:33:76:42:ef:70:22:45:
29:be:0d:eb:1f:dc:96:b8:be:36:ff:70:be:12:39:bc:4b:80:
2b:ec:f4:51:48:c7:b2:5b:48:be:5d:39:0d:52:78:af:28:7d:
37:a5:f4:7f:ad:b8:ed:a2:45:2e:6a:78:e9:a5:aa:dc:d9:b7:
7f:58:48:8b:ba:fc:93:8a:8f:25:e3:c2:3a:a3:0c:d5:3f:8d:
12:5f:38:80:46:cb:7d:41:8e:aa:0b:82:72:5c:c8:45:65:57:
06:14:a9:5e:f5:38:d7:1d:03:af:45:76:a8:94:1f:c8:41:2a:
33:bd:a7:cf:04:d4:b4:f1:11:5f:30:35:eb:0c:13:f5:bb:81:
c6:db:d4:8e:bd:f7:23:d1:bb:0a:2e:e8:64:11:3c:15:20:65:
7b:10:8e:18:68:88:96:b3:e3:6b:de:f4:8b:64:17:1a:dd:af:
4b:c7:ff:ec:2d:7a:1e:bd:ed:b9:a1:5f:f0:2d:ba:e9:08:13:
77:cc:e7:a6:0e:c3:f1:31:6e:67:f8:88:18:48:de:51:d8:f0:
00:df:22:d8:d4:46:ef:36:ab:ee:fe:45:fb:cb:d5:81:2e:96:
0b:bc:1f:71:6c:c5:da:ab:96:49:ab:d8:31:9f:57:fd:a6:84:
e1:c7:aa:8f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXQSXvio6q30eMz4I5ii2OFJ6snQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI5Q0E3QkI0MzgyQTY0ODMzMkZEMzc3Njg5RTA0MDE2
NkM1MDVCNTAeFw0yNDA4MjcxOTE1MDBaFw0yNTA4MjYxOTIwMDBaMDMxMTAvBgNV
BAMTKEFEOUFFQzZDRDI0RjU4MjdFQzQxMTY2RDA5QzEyQ0IwREJFQUY5RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp18pFYH6EjQD9NeH86NKKUa1P
+kHAojl15qsbhkMXMjYDwpaLmJVVq6ARSqFqeFjA45Y+t4EJWQ0QOQmruTG8hgZg
H946r2MOsBXVLd88ijvUW3VF2862Go+HOaGL233Az512vne9e4Uojkq4RMpGnI3g
3b7yWQ0usLgbrGPYlhor2VMjh/56nIPGxoSoKy5AXgy1C6txqnjn6EFCR/LFeE01
FmucFxl3HlZAPV3QNNV4uLhC+yMuGYTn3tM6t3EWK9eU4VLlXPu3gZAPXf1J/4SM
EZnMLapgge312sWfW6LMNR298JgcIod7uTtW6oOPDjShEF72fChY6y304JG/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUrZrsbNJPWCfsQRZtCcEssNvq+f4wHwYDVR0j
BBgwFoAUgpynu0OCpkgzL9N3aJ4EAWbFBbUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMTIwMjlGNjM3NDUwNjc4NUYzOTExMTFGMTA0RTY1NjA3
MDFBOUE0RDI3QkQzNkZDRkZGODE2QzBGRTYyNkQ4LzAvODI5Q0E3QkI0MzgyQTY0
ODMzMkZEMzc3Njg5RTA0MDE2NkM1MDVCNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjlDQTdCQjQzODJBNjQ4MzMy
RkQzNzc2ODlFMDQwMTY2QzUwNUI1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDEyMDI5RjYzNzQ1MDY3ODVGMzkxMTExRjEwNEU2NTYwNzAxQTlBNEQy
N0JEMzZGQ0ZGRjgxNkMwRkU2MjZEOC8wLzMyMzAzMDJlMzMzNTJlMzEzNDMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMyMzgzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgjjzAN
BgkqhkiG9w0BAQsFAAOCAQEAEuE9c71wyvZW7okzdkLvcCJFKb4N6x/clri+Nv9w
vhI5vEuAK+z0UUjHsltIvl05DVJ4ryh9N6X0f6247aJFLmp46aWq3Nm3f1hIi7r8
k4qPJePCOqMM1T+NEl84gEbLfUGOqguCclzIRWVXBhSpXvU41x0Dr0V2qJQfyEEq
M72nzwTUtPERXzA16wwT9buBxtvUjr33I9G7Ci7oZBE8FSBlexCOGGiIlrPja970
i2QXGt2vS8f/7C16Hr3tuaFf8C266QgTd8znpg7D8TFuZ/iIGEjeUdjwAN8i2NRG
7zar7v5F+8vVgS6WC7wfcWzF2quWSavYMZ9X/aaE4ceqjw==
-----END CERTIFICATE-----
Generated at Mon Sep 9 21:15:14 2024 by rpki-client on console-fra.rpki-client.org