Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/7f1fc26c35586f3f03deee3da2b106035e6ded04.roa
File: 7f1fc26c35586f3f03deee3da2b106035e6ded04.roa (raw, json)
Hash identifier: 0oQS6nk7XXh53fLc0cKki4vAv9QpM0JXgwylDcZJ4+E=
Subject key identifier: 93:67:19:C5:B3:7C:33:2A:8D:8C:6D:6E:1E:D9:8B:0F:C4:11:60:AF
Certificate issuer: /CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Certificate serial: 13A002
Authority key identifier: 3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/7f1fc26c35586f3f03deee3da2b106035e6ded04.roa
Signing time: Wed 29 Dec 2021 19:59:13 +0000
ROA not before: Wed 29 Dec 2021 03:00:00 +0000
ROA not after: Fri 29 Dec 2023 03:00:00 +0000
asID: 28089
IP address blocks: 200.35.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1286146 (0x13a002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Validity
Not Before: Dec 29 03:00:00 2021 GMT
Not After : Dec 29 03:00:00 2023 GMT
Subject: CN=7f1fc26c35586f3f03deee3da2b106035e6ded04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:2e:0e:d5:69:db:66:0e:d7:06:fa:1a:dd:
6c:47:30:67:85:b1:8d:97:80:ba:2d:42:dc:0e:b8:
69:23:f6:85:58:4f:85:01:1a:59:38:f1:7a:ca:38:
8a:5d:6f:01:54:92:3c:b3:13:32:c9:dd:9b:6c:16:
8e:c4:cf:b9:78:9d:27:e7:d8:37:7a:92:7f:3f:e8:
50:31:90:5c:42:64:03:3a:d7:23:a8:86:e0:63:7f:
fe:5e:f0:e9:23:90:a2:80:59:d8:9c:04:76:e5:cf:
35:b0:ea:6a:ee:09:2e:c3:0b:24:b7:11:ee:47:7d:
fa:3e:26:80:3c:9c:53:6d:e3:48:33:24:77:30:0e:
2e:db:60:3e:1d:1b:5a:3b:e3:00:81:e8:50:85:6e:
93:e6:fa:70:52:31:12:5d:d5:29:71:f7:82:f2:f7:
19:f0:a9:e2:31:f3:a2:d4:81:75:05:a7:cf:f9:bd:
37:bb:c1:91:ca:6d:ce:3e:46:e1:13:82:d7:83:cd:
ea:75:11:9e:8c:00:21:2c:c6:6a:a5:12:eb:61:00:
5b:9c:2e:89:c5:87:9c:7d:00:5d:84:da:66:76:c7:
78:d3:2e:55:34:b2:74:33:6f:a2:74:8e:0c:19:06:
2d:7e:e1:da:c7:5c:75:c8:28:fd:62:9b:04:49:95:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:67:19:C5:B3:7C:33:2A:8D:8C:6D:6E:1E:D9:8B:0F:C4:11:60:AF
X509v3 Authority Key Identifier:
keyid:3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/7f1fc26c35586f3f03deee3da2b106035e6ded04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.133.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d5:1e:8c:41:eb:9f:3e:ce:f7:43:5e:28:4b:e7:6c:57:59:
12:73:27:70:2c:0a:56:8d:ba:52:69:7b:b4:ef:a9:6f:c7:3f:
08:6b:aa:58:6a:53:fb:7d:94:c0:2f:2d:12:9c:95:7b:69:f4:
ab:78:aa:65:a1:97:78:02:c9:ea:1a:bd:78:9e:71:ab:07:22:
a0:43:08:69:e5:f2:1e:57:0e:fb:76:af:8a:50:ac:92:ff:f9:
f5:f8:fd:59:e9:29:4d:cf:0b:d1:b7:5e:59:48:e9:ef:11:42:
2d:43:1c:c4:34:ca:6b:d5:ee:61:2c:4f:44:f6:86:97:dc:d9:
f6:59:fa:3a:d2:e5:b3:ab:fe:da:af:6d:be:31:6a:4e:53:31:
88:b5:b0:cd:f9:e0:29:3b:7b:94:b0:e5:98:25:31:14:b1:2d:
1d:75:9b:49:b1:12:66:19:a0:c0:ec:8e:65:06:73:3d:fa:58:
f1:a4:f3:21:d2:8d:0d:e8:e8:16:20:ec:fc:76:a8:0d:ed:07:
9d:66:83:04:1b:36:42:fd:85:ca:c5:d3:5c:0e:22:b1:89:27:
37:d4:36:1d:69:44:99:2c:d2:44:35:f5:65:87:b4:e5:d6:6c:
81:9d:42:48:c4:bc:34:99:64:f3:f5:64:65:48:d0:bf:75:5d:
15:8b:b5:c4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDE6ACMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVj
NWQ1OWNmNWJiYWIyZmRjN2M3NGU5MmFiOTYyZTNiMTFiYjFhOWUwHhcNMjExMjI5
MDMwMDAwWhcNMjMxMjI5MDMwMDAwWjAzMTEwLwYDVQQDEyg3ZjFmYzI2YzM1NTg2
ZjNmMDNkZWVlM2RhMmIxMDYwMzVlNmRlZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkZwuDtVp22YO1wb6Gt1sRzBnhbGNl4C6LULcDrhpI/aFWE+F
ARpZOPF6yjiKXW8BVJI8sxMyyd2bbBaOxM+5eJ0n59g3epJ/P+hQMZBcQmQDOtcj
qIbgY3/+XvDpI5CigFnYnAR25c81sOpq7gkuwwsktxHuR336PiaAPJxTbeNIMyR3
MA4u22A+HRtaO+MAgehQhW6T5vpwUjESXdUpcfeC8vcZ8KniMfOi1IF1BafP+b03
u8GRym3OPkbhE4LXg83qdRGejAAhLMZqpRLrYQBbnC6JxYecfQBdhNpmdsd40y5V
NLJ0M2+idI4MGQYtfuHax1x1yCj9YpsESZWOxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJNnGcWzfDMqjYxtbh7Ziw/EEWCvMB8GA1UdIwQYMBaAFD9Gp2iUh+yPpW3h
l6Rwbp9GcfC8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWM1ZDU5
Y2Y1YmJhYjJmZGM3Yzc0ZTkyYWI5NjJlM2IxMWJiMWE5ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE0MjgzODEtZjk0MS00Y2QyLTk3MDAtMmMxZGIw
N2M0OGY5LzdmMWZjMjZjMzU1ODZmM2YwM2RlZWUzZGEyYjEwNjAzNWU2ZGVkMDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTQyODM4MS1mOTQxLTRjZDItOTcwMC0yYzFk
YjA3YzQ4ZjkvZWM1ZDU5Y2Y1YmJhYjJmZGM3Yzc0ZTkyYWI5NjJlM2IxMWJiMWE5
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMgjhTANBgkqhkiG9w0BAQsFAAOCAQEANdUejEHrnz7O90Ne
KEvnbFdZEnMncCwKVo26Uml7tO+pb8c/CGuqWGpT+32UwC8tEpyVe2n0q3iqZaGX
eALJ6hq9eJ5xqwcioEMIaeXyHlcO+3avilCskv/59fj9WekpTc8L0bdeWUjp7xFC
LUMcxDTKa9XuYSxPRPaGl9zZ9ln6OtLls6v+2q9tvjFqTlMxiLWwzfngKTt7lLDl
mCUxFLEtHXWbSbESZhmgwOyOZQZzPfpY8aTzIdKNDejoFiDs/HaoDe0HnWaDBBs2
Qv2FysXTXA4isYknN9Q2HWlEmSzSRDX1ZYe05dZsgZ1CSMS8NJlk8/VkZUjQv3Vd
FYu1xA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org