Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/1459cf7f273d686484703a0c4b30c2eeb20a2661.roa
File: 1459cf7f273d686484703a0c4b30c2eeb20a2661.roa (raw, json)
Hash identifier: wVK/Z44FV6gtY1KSHcAFrig9xMsrSDqcAlAe3xTrUPQ=
Subject key identifier: 52:F7:14:16:C6:37:89:BB:13:F3:D1:C8:77:35:9E:58:8B:DB:87:B5
Certificate issuer: /CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Certificate serial: 13A6A6
Authority key identifier: 3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/1459cf7f273d686484703a0c4b30c2eeb20a2661.roa
Signing time: Wed 29 Dec 2021 20:25:10 +0000
ROA not before: Wed 29 Dec 2021 03:00:00 +0000
ROA not after: Fri 29 Dec 2023 03:00:00 +0000
asID: 8048
IP address blocks: 200.35.130.0/23 maxlen: 24
200.35.134.0/23 maxlen: 24
200.35.136.0/22 maxlen: 24
200.35.140.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1287846 (0x13a6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Validity
Not Before: Dec 29 03:00:00 2021 GMT
Not After : Dec 29 03:00:00 2023 GMT
Subject: CN=1459cf7f273d686484703a0c4b30c2eeb20a2661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:c1:49:02:bf:8e:ff:40:ce:9e:45:3e:f7:
ba:a5:8a:96:c7:1b:5c:dc:21:9f:9b:03:46:0b:76:
5c:b5:30:44:37:18:99:f9:0a:95:b0:19:86:79:81:
20:ad:22:fd:67:cb:23:55:c7:d8:3e:6c:72:39:9e:
17:73:91:9d:9a:e6:f1:c9:91:ae:05:ef:b2:21:4b:
f1:64:2f:6f:a9:c6:7b:e0:79:7d:4b:07:a3:19:42:
90:03:49:ee:40:2e:76:8f:2e:1a:5d:df:18:84:5c:
5b:11:30:eb:1e:45:ae:88:80:52:85:93:58:e8:f6:
93:9e:41:17:c5:c4:71:6b:e7:18:8b:76:0c:86:7d:
e9:d8:19:41:60:5e:d4:ec:0a:ce:7a:ed:7f:49:0c:
da:60:b4:57:e1:c7:e6:d6:e0:58:da:44:98:77:82:
97:94:69:5a:63:85:60:8f:8d:69:57:ba:e4:d0:45:
07:dc:09:7b:c1:38:23:22:f2:d4:1d:05:03:75:e4:
1b:18:22:ee:85:4e:39:97:c1:53:be:1c:fd:43:a7:
48:a8:c6:c6:96:1c:29:66:27:0d:f7:c5:b1:bd:cd:
67:d3:4a:a4:e9:a5:9c:d2:4b:7f:d5:7e:b8:58:60:
95:4d:07:0c:b0:6f:e6:e8:af:2e:dd:57:40:ec:aa:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F7:14:16:C6:37:89:BB:13:F3:D1:C8:77:35:9E:58:8B:DB:87:B5
X509v3 Authority Key Identifier:
keyid:3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/1459cf7f273d686484703a0c4b30c2eeb20a2661.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.130.0/23
200.35.134.0-200.35.141.255
Signature Algorithm: sha256WithRSAEncryption
2d:eb:10:15:36:12:60:bb:77:3b:59:43:7a:b2:b9:74:9c:31:
ab:a1:01:f0:90:30:b2:ef:58:12:2c:8a:e0:06:33:40:5c:d3:
22:da:4c:fd:d4:a1:fd:44:4b:d8:2d:f0:0b:51:04:21:64:72:
fd:59:60:62:fe:d5:4d:63:ce:3f:87:20:d3:70:26:57:47:0c:
fb:60:84:c8:5f:58:70:37:2c:10:16:de:c0:e1:7a:13:51:b8:
96:ad:93:17:05:38:50:a4:42:fc:a8:55:80:96:0e:af:12:f3:
24:3b:44:7f:71:7a:97:8a:99:9f:0d:e8:5b:8f:bb:76:2c:3a:
af:8a:ed:ad:a0:6d:b2:bc:04:46:db:38:ae:8e:85:41:b1:e1:
8a:d8:0a:ed:fe:25:7a:7a:b8:a2:13:da:7b:45:72:da:8c:f0:
d6:08:79:bf:b2:31:af:ee:dd:9e:0a:ae:fb:34:5f:2b:a1:fb:
02:7e:f8:58:90:c1:17:ac:89:8f:cf:58:f3:03:ab:ee:14:03:
3f:ed:1d:02:1f:9a:54:f5:98:7d:c0:3e:4b:c2:cb:ed:ac:26:
1c:3d:fb:e1:a5:6e:c1:dd:a6:78:41:70:f5:cd:8a:57:6e:4b:
6e:c9:68:a0:c6:e7:0c:7c:26:9a:80:a7:0e:ef:58:85:60:75:
a4:73:b5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org