Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/52ecbaa315b4dc6367b0e13f42e2867843ab7983.roa
File: 52ecbaa315b4dc6367b0e13f42e2867843ab7983.roa (raw, json)
Hash identifier: /zCn/Tp/X1IisjQXOG1soP5fDzboM+lEGhRyKjUZ0M4=
Subject key identifier: 19:B7:8E:96:1E:9E:CC:E2:BB:C5:1D:C2:4A:7E:44:7F:99:E3:C5:50
Certificate issuer: /CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Certificate serial: 13AEE7
Authority key identifier: 3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/52ecbaa315b4dc6367b0e13f42e2867843ab7983.roa
Signing time: Thu 30 Dec 2021 14:10:05 +0000
ROA not before: Thu 30 Dec 2021 03:00:00 +0000
ROA not after: Sat 30 Dec 2023 03:00:00 +0000
asID: 28089
IP address blocks: 200.35.128.0/23 maxlen: 24
200.35.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1289959 (0x13aee7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Validity
Not Before: Dec 30 03:00:00 2021 GMT
Not After : Dec 30 03:00:00 2023 GMT
Subject: CN=52ecbaa315b4dc6367b0e13f42e2867843ab7983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:78:7f:58:84:62:cb:59:a9:33:83:4e:73:
77:14:8e:0a:15:19:6f:f9:a5:d5:6b:10:17:22:87:
fe:2b:a9:7e:f1:63:0c:93:86:73:a1:b6:01:cc:f1:
36:a3:5f:3d:36:79:38:fc:16:d7:23:b7:13:c9:e1:
c5:ba:ba:33:d5:72:80:a6:b9:f2:e9:cb:fe:fa:17:
7a:33:a1:49:c9:d3:b1:f1:52:89:83:ce:5c:e9:ba:
8f:b0:14:88:de:93:85:54:63:32:88:4c:97:3d:75:
8e:a2:fc:b6:78:1c:00:3c:f3:85:ac:5b:6c:82:56:
0b:c2:b4:da:83:ea:70:91:ef:b2:d1:60:fe:d1:82:
fa:17:f2:67:06:6c:dd:5d:57:db:96:26:db:c5:3d:
38:96:e1:ff:a8:46:a5:7f:20:c5:dc:45:4c:27:85:
25:7b:54:ef:1c:24:c3:3f:52:1e:26:eb:ed:bb:60:
17:be:53:e9:64:4e:f4:8b:da:f8:32:d5:70:70:d8:
6c:08:8d:da:e1:5c:9b:e4:c7:84:40:6d:05:b0:2e:
0d:3e:f6:d8:a7:0f:87:ff:05:97:dd:d9:62:b6:c2:
7f:cc:3c:bf:3b:92:99:19:d8:21:5d:c8:61:d0:09:
98:e7:04:ba:ab:83:5c:5d:bc:b6:f6:93:3b:76:57:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B7:8E:96:1E:9E:CC:E2:BB:C5:1D:C2:4A:7E:44:7F:99:E3:C5:50
X509v3 Authority Key Identifier:
keyid:3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/52ecbaa315b4dc6367b0e13f42e2867843ab7983.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.128.0/23
200.35.132.0/24
Signature Algorithm: sha256WithRSAEncryption
78:4a:d7:af:71:95:0e:6e:fa:a2:9d:16:0c:0b:f3:1f:f4:83:
80:92:3d:9a:83:7e:a7:b2:70:ec:f0:1f:79:c7:dd:6b:40:de:
c0:14:cc:3d:60:23:05:0b:c6:83:c5:e9:dd:37:89:34:e7:cd:
bf:0e:bc:b7:30:1c:84:45:2d:8a:f7:14:07:4f:8b:76:6b:ee:
b7:32:9b:6f:18:04:97:d0:51:6f:9b:7b:38:d8:58:e5:0c:7c:
af:38:81:5a:88:f8:b1:06:63:d7:51:35:63:42:2a:c1:c3:6a:
e2:b5:cb:ca:8e:72:74:52:66:25:38:96:15:02:5e:74:06:53:
d4:e5:40:83:bd:5c:45:22:c0:ca:58:b7:1a:92:33:91:9b:87:
42:ac:3c:87:f4:38:ee:20:50:ca:1c:b7:09:ad:41:3e:2c:9d:
9a:37:50:5b:5a:e3:47:36:8d:e6:cb:6a:55:89:1c:8d:e8:19:
6f:97:0f:d6:2d:1c:e8:f1:3d:3c:35:df:c0:d2:76:76:cc:35:
fd:e0:01:1a:ea:5b:cf:f6:fd:d4:60:bc:47:a2:71:5b:f5:3b:
27:0e:21:dc:1f:c8:b9:69:3e:f1:8c:09:37:00:a2:8f:e0:c7:
f4:9b:ff:ab:38:fc:b3:1f:79:50:63:2d:a9:66:d6:ab:7a:81:
56:62:28:d5
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDE67nMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVj
NWQ1OWNmNWJiYWIyZmRjN2M3NGU5MmFiOTYyZTNiMTFiYjFhOWUwHhcNMjExMjMw
MDMwMDAwWhcNMjMxMjMwMDMwMDAwWjAzMTEwLwYDVQQDEyg1MmVjYmFhMzE1YjRk
YzYzNjdiMGUxM2Y0MmUyODY3ODQzYWI3OTgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAml94f1iEYstZqTODTnN3FI4KFRlv+aXVaxAXIof+K6l+8WMM
k4ZzobYBzPE2o189Nnk4/BbXI7cTyeHFuroz1XKAprny6cv++hd6M6FJydOx8VKJ
g85c6bqPsBSI3pOFVGMyiEyXPXWOovy2eBwAPPOFrFtsglYLwrTag+pwke+y0WD+
0YL6F/JnBmzdXVfblibbxT04luH/qEalfyDF3EVMJ4Ule1TvHCTDP1IeJuvtu2AX
vlPpZE70i9r4MtVwcNhsCI3a4Vyb5MeEQG0FsC4NPvbYpw+H/wWX3dlitsJ/zDy/
O5KZGdghXchh0AmY5wS6q4NcXby29pM7dlcWTQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFBm3jpYensziu8Udwkp+RH+Z48VQMB8GA1UdIwQYMBaAFD9Gp2iUh+yPpW3h
l6Rwbp9GcfC8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWM1ZDU5
Y2Y1YmJhYjJmZGM3Yzc0ZTkyYWI5NjJlM2IxMWJiMWE5ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE0MjgzODEtZjk0MS00Y2QyLTk3MDAtMmMxZGIw
N2M0OGY5LzUyZWNiYWEzMTViNGRjNjM2N2IwZTEzZjQyZTI4Njc4NDNhYjc5ODMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTQyODM4MS1mOTQxLTRjZDItOTcwMC0yYzFk
YjA3YzQ4ZjkvZWM1ZDU5Y2Y1YmJhYjJmZGM3Yzc0ZTkyYWI5NjJlM2IxMWJiMWE5
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAcgjgAMEAMgjhDANBgkqhkiG9w0BAQsFAAOCAQEAeErXr3GV
Dm76op0WDAvzH/SDgJI9moN+p7Jw7PAfecfda0DewBTMPWAjBQvGg8Xp3TeJNOfN
vw68tzAchEUtivcUB0+LdmvutzKbbxgEl9BRb5t7ONhY5Qx8rziBWoj4sQZj11E1
Y0IqwcNq4rXLyo5ydFJmJTiWFQJedAZT1OVAg71cRSLAyli3GpIzkZuHQqw8h/Q4
7iBQyhy3Ca1BPiydmjdQW1rjRzaN5stqVYkcjegZb5cP1i0c6PE9PDXfwNJ2dsw1
/eABGupbz/b91GC8R6JxW/U7Jw4h3B/IuWk+8YwJNwCij+DH9Jv/qzj8sx95UGMt
qWbWq3qBVmIo1Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org