Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/d7d86fb991a0c1627d7b6c570efc9ed2e584aad8.roa
File: d7d86fb991a0c1627d7b6c570efc9ed2e584aad8.roa (raw, json)
Hash identifier: 7si7/K9FO3TYUBVUQLsiTRWqtk1zoCCS8FfqrCHj6nU=
Subject key identifier: E1:92:3D:E6:62:5D:FA:F6:AB:00:87:78:94:69:72:D1:87:55:91:BE
Certificate issuer: /CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
Certificate serial: 2298AF
Authority key identifier: 41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/d7d86fb991a0c1627d7b6c570efc9ed2e584aad8.roa
Signing time: Tue 25 Jul 2023 19:23:22 +0000
ROA not before: Mon 24 Jul 2023 19:23:22 +0000
ROA not after: Fri 25 Jul 2025 19:23:22 +0000
asID: 27669
IP address blocks: 200.108.129.0/24 maxlen: 24
200.108.130.0/23 maxlen: 24
200.108.132.0/22 maxlen: 24
200.108.136.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2267311 (0x2298af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
Validity
Not Before: Jul 24 19:23:22 2023 GMT
Not After : Jul 25 19:23:22 2025 GMT
Subject: CN=d7d86fb991a0c1627d7b6c570efc9ed2e584aad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:6e:82:d6:f4:bb:ad:f7:08:86:0c:f9:7a:
8d:9d:f8:76:0b:d9:d5:1e:4d:96:23:f2:24:14:27:
cb:79:9e:1d:65:40:48:93:74:0e:e2:d7:6b:a1:4d:
04:d2:ce:b6:2d:60:e7:6f:31:89:fe:ce:67:27:e7:
5f:fa:aa:b3:9c:50:3c:8e:4c:c4:e4:f5:7b:b9:b9:
e7:1a:93:df:98:a6:cf:77:f0:b1:26:61:d8:38:8a:
91:00:59:88:ba:9c:6e:de:2d:97:9e:f5:44:b9:2a:
11:f7:0c:f0:4c:d7:3c:51:f9:6c:ca:62:80:11:73:
94:7f:37:86:0a:d2:46:3a:66:49:5d:64:a0:f6:0e:
0c:8a:81:d7:2f:2e:6e:f9:8d:09:07:4d:de:85:c0:
25:1d:b0:ea:c0:0b:7f:65:7b:bf:b0:23:c4:34:7d:
52:2b:d7:87:cc:0e:9f:1e:fc:01:2e:6c:15:e1:ea:
04:b4:a6:e5:64:c4:3c:d7:b9:e7:7c:48:aa:f1:c0:
62:52:9f:71:7f:5c:00:a5:fb:92:88:35:bd:92:56:
f8:3d:a2:b1:21:1b:e3:1d:d0:86:13:af:c4:a1:a6:
ef:6c:23:df:a5:b9:da:21:2d:e5:0d:f4:59:5d:24:
c9:29:1a:79:b4:80:76:42:e3:48:55:00:9c:74:5e:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:92:3D:E6:62:5D:FA:F6:AB:00:87:78:94:69:72:D1:87:55:91:BE
X509v3 Authority Key Identifier:
keyid:41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/d7d86fb991a0c1627d7b6c570efc9ed2e584aad8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.129.0-200.108.143.255
Signature Algorithm: sha256WithRSAEncryption
5a:7b:12:db:a4:78:b2:5b:96:e8:02:c8:cb:02:fe:e7:aa:b6:
2b:6c:1a:57:ae:f7:56:79:b3:3b:80:87:af:73:f3:55:05:79:
f3:cf:a6:5e:29:08:d2:59:23:fe:1a:e8:64:6d:b6:bd:37:12:
d1:3a:c0:06:a4:c5:22:5e:38:92:82:a8:f7:ce:67:29:01:2c:
98:92:61:de:d2:3c:51:05:0a:87:f2:83:74:20:ae:a3:55:a4:
09:61:b7:dc:87:2a:09:28:3f:6a:55:29:24:6b:99:be:93:53:
78:a7:a2:f1:36:c2:f6:47:cc:4c:78:4c:a2:3a:bb:bd:88:85:
5d:df:1c:eb:97:06:0b:09:bd:d0:e2:67:db:83:7f:d8:30:5e:
7d:a8:39:fc:99:21:ba:0b:8a:68:2a:b6:cb:51:b2:7f:c8:47:
c7:c4:e5:de:1f:e9:df:24:42:12:f6:13:1e:6a:b5:7b:e1:a0:
3b:ab:cf:f4:98:86:9e:00:52:45:34:7a:21:ec:b5:d3:f9:33:
53:c7:3b:54:3e:4d:ba:ca:09:38:aa:91:a7:d0:f5:52:fa:77:
6e:17:bc:13:24:11:b6:ca:f3:50:67:90:9b:2f:04:26:4f:0e:
61:59:66:46:a0:cb:bf:30:4f:29:86:30:b4:3d:39:61:c5:2f:
04:5f:12:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 14:53:41 2023 by rpki-client on console-ams.rpki-client.org