Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/0ee1a93058824f653c09124d0da0b3b19d04a216.roa
File: 0ee1a93058824f653c09124d0da0b3b19d04a216.roa (raw, json)
Hash identifier: 3BUe0UCrbZ+qzNuOsFPb6zQEwDafD2Z1FYWxpiC345M=
Subject key identifier: 07:1B:67:9C:F0:1B:EA:19:43:F1:26:0D:AD:A4:0D:D7:2B:C0:5A:42
Certificate issuer: /CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
Certificate serial: 0DB179
Authority key identifier: 41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/0ee1a93058824f653c09124d0da0b3b19d04a216.roa
Signing time: Wed 24 Mar 2021 14:46:16 +0000
ROA not before: Wed 24 Mar 2021 14:46:16 +0000
ROA not after: Tue 24 Mar 2026 14:46:16 +0000
asID: 27669
IP address blocks: 200.108.129.0/24 maxlen: 24
200.108.132.0/24 maxlen: 24
200.108.142.0/24 maxlen: 24
200.108.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897401 (0xdb179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
Validity
Not Before: Mar 24 14:46:16 2021 GMT
Not After : Mar 24 14:46:16 2026 GMT
Subject: CN=0ee1a93058824f653c09124d0da0b3b19d04a216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:e9:2a:2d:c9:29:d5:b3:02:c8:ad:13:6b:
21:a4:2c:4d:0e:92:7f:0d:3b:94:ad:90:51:73:9d:
c2:43:41:a0:7e:0a:d5:30:51:c9:27:f9:9c:03:a6:
8d:c2:6e:1c:7d:16:cc:77:4f:30:50:29:14:31:46:
47:1a:04:b2:23:a0:27:a4:ee:30:96:b4:3f:22:b7:
9a:e3:38:c5:57:95:f7:8f:31:48:78:db:a5:d3:bc:
da:e8:e7:1d:fd:59:15:5a:d6:b9:7a:b3:5a:3e:4a:
8b:c1:18:e0:ce:13:05:6b:78:04:a7:76:d5:0d:51:
f5:23:4d:d8:a4:54:6d:02:b2:df:c2:28:2b:b6:3e:
cd:10:38:ac:d2:63:61:76:48:16:44:b2:a2:44:b2:
71:36:1e:87:9e:4a:66:a7:2c:d8:10:22:72:7a:f0:
09:9d:ac:3b:78:8e:aa:bb:62:cb:30:77:89:33:07:
e9:67:38:20:af:1e:39:97:61:12:8a:14:5b:5d:2d:
eb:8f:80:ce:f6:a0:00:64:ca:d4:f9:5a:24:a9:d0:
34:a9:d1:b2:cb:05:2b:ff:48:f3:c3:37:b1:9e:50:
f4:ee:a9:9e:e2:f1:7f:c8:35:f9:dd:a5:f1:2b:d5:
49:d0:85:ae:37:e4:2c:01:d8:95:dd:59:89:71:36:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1B:67:9C:F0:1B:EA:19:43:F1:26:0D:AD:A4:0D:D7:2B:C0:5A:42
X509v3 Authority Key Identifier:
keyid:41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/0ee1a93058824f653c09124d0da0b3b19d04a216.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.129.0/24
200.108.132.0/24
200.108.142.0/23
Signature Algorithm: sha256WithRSAEncryption
94:15:2f:f5:16:db:93:09:db:8f:12:08:1c:d3:9b:e4:b4:51:
a3:f7:a7:6a:13:ad:f6:08:d3:60:ca:60:d9:b8:59:6f:b6:c1:
e2:07:07:2d:56:63:2f:66:28:53:a8:44:25:f1:8f:de:3e:9e:
55:a7:65:16:58:f7:e0:81:b6:04:3c:9b:4b:b0:dc:91:b9:90:
94:67:e3:22:a9:11:88:f5:5b:d2:b2:3b:57:c0:a1:a9:f4:4b:
5b:da:0c:06:6e:0b:07:5b:c7:fa:d8:de:f5:27:40:78:32:09:
0d:b5:81:dd:4a:64:04:c1:a4:60:7c:e3:6b:33:ee:74:8f:de:
76:af:2d:ff:1a:af:31:e3:7c:16:a0:63:92:c9:60:0f:06:f5:
b6:c3:78:7f:41:d7:76:2e:cb:f1:70:cd:e0:ea:7d:3f:b2:5b:
bb:9a:5e:22:14:65:1a:b3:ea:53:37:5b:fb:0e:c5:5a:66:96:
c5:ce:4b:39:79:9f:11:fe:bc:f9:60:ed:11:1e:3a:b7:e4:dc:
d4:2b:73:9c:ae:82:64:22:a8:71:ec:66:64:69:4c:97:02:31:
79:90:7f:e7:c7:bd:1b:91:33:c7:66:6c:a9:61:66:ba:ca:df:
6e:4c:37:53:c7:9b:b9:35:84:8e:bb:01:35:1b:2b:34:89:f4:
e4:69:29:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 19:41:44 2023 by rpki-client on console-fra.rpki-client.org