Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/e180c4c3ef9667595153fb02ad2ccbafdeedc8aa.roa
File: e180c4c3ef9667595153fb02ad2ccbafdeedc8aa.roa (raw, json)
Hash identifier: O0ZzLNBNGmTgdyQDkImQ8WqKpM068udHuuOnJ2HIyM8=
Subject key identifier: A1:7E:5D:89:E7:06:CA:81:21:45:1A:69:A0:C1:F5:C9:15:19:C5:1F
Certificate issuer: /CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Certificate serial: 13A3B6
Authority key identifier: 3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/e180c4c3ef9667595153fb02ad2ccbafdeedc8aa.roa
Signing time: Wed 29 Dec 2021 20:18:17 +0000
ROA not before: Wed 29 Dec 2021 03:00:00 +0000
ROA not after: Fri 29 Dec 2023 03:00:00 +0000
asID: 8048
IP address blocks: 200.35.130.0/23 maxlen: 24
200.35.134.0/23 maxlen: 24
200.35.136.0/22 maxlen: 24
200.35.140.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1287094 (0x13a3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e
Validity
Not Before: Dec 29 03:00:00 2021 GMT
Not After : Dec 29 03:00:00 2023 GMT
Subject: CN=e180c4c3ef9667595153fb02ad2ccbafdeedc8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:9b:2f:9b:4d:76:e8:1d:ca:b0:4e:12:45:
f6:20:8a:70:02:2c:79:e3:f9:49:af:34:6e:2b:89:
54:32:00:30:f9:e9:f4:ac:07:64:67:ff:1f:1b:de:
ae:0f:1c:6a:72:54:0d:53:8d:15:05:74:17:6d:ae:
e1:c8:34:ac:de:6f:79:f7:f4:4a:f8:56:69:e0:9e:
6d:8c:ea:68:16:f2:54:a5:ce:9d:f3:ad:4f:1a:7d:
d5:f1:09:85:93:f6:a2:8e:e4:fa:06:5f:a2:17:13:
e2:6d:8d:52:d3:4a:22:26:fa:e8:e3:d8:b3:69:67:
99:a3:b6:66:c2:9b:fd:9d:f5:33:e2:7a:76:c8:47:
6e:33:34:00:16:e4:a9:4e:5b:ab:1e:dd:e2:eb:d5:
79:cb:3b:ca:f9:e2:4c:83:3c:9f:0d:b2:0d:3b:e4:
29:25:3b:75:b7:0e:fb:63:26:0b:2c:92:07:21:d2:
eb:38:88:57:60:83:c5:7d:95:ca:fe:c3:96:12:57:
56:36:fc:b4:11:90:dd:4a:3b:fc:24:00:51:e2:73:
d7:74:2e:5e:a4:b6:11:1b:76:fc:b8:92:64:c7:c6:
20:32:51:b0:9f:a7:ce:7e:13:aa:e7:13:e5:83:be:
4e:fd:81:25:01:9f:be:ee:ee:28:f5:3b:3f:63:d1:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7E:5D:89:E7:06:CA:81:21:45:1A:69:A0:C1:F5:C9:15:19:C5:1F
X509v3 Authority Key Identifier:
keyid:3F:46:A7:68:94:87:EC:8F:A5:6D:E1:97:A4:70:6E:9F:46:71:F0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/e180c4c3ef9667595153fb02ad2ccbafdeedc8aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa428381-f941-4cd2-9700-2c1db07c48f9/ec5d59cf5bbab2fdc7c74e92ab962e3b11bb1a9e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.130.0/23
200.35.134.0-200.35.141.255
Signature Algorithm: sha256WithRSAEncryption
5c:0d:49:6a:95:ae:d3:8d:0c:54:dd:4a:3c:6b:a8:7f:a6:20:
85:bb:98:d4:e0:41:00:96:64:26:25:8a:a5:7d:73:cd:53:97:
0f:75:0b:4c:a7:9f:fb:41:49:e2:b6:a6:83:dd:70:34:fe:85:
de:56:6a:ea:1e:20:3c:ee:b2:4c:f6:1d:3d:5d:ca:37:93:5a:
7b:b2:36:cc:28:39:60:63:47:43:d6:70:4c:c4:39:cc:40:0a:
e2:3a:8e:72:a4:b6:dd:43:6c:a7:15:9e:f0:8c:e0:7f:df:72:
36:d1:9a:5c:1b:76:29:0e:11:42:5e:f5:a4:14:6a:a4:e9:06:
e5:1d:dd:24:ea:8c:f4:1a:a7:a0:d5:e2:7e:47:1b:00:fc:20:
16:59:20:c7:4f:cd:b4:24:73:a4:a4:8b:81:98:2f:66:57:b8:
2b:aa:29:3a:10:39:26:93:c2:b9:f3:6b:43:46:a1:f2:f4:f2:
8a:3c:5a:28:e8:9c:9c:59:d3:9a:08:72:17:8f:42:0e:bf:87:
4d:ce:cc:bf:1c:ff:25:c2:7c:cf:92:4a:14:b7:b7:ab:03:1e:
82:28:dc:c6:7f:c8:d8:eb:c7:9f:be:e6:4c:e1:2c:f9:76:b4:
95:ca:73:3a:d2:64:d9:f2:21:59:89:79:62:44:48:eb:88:b6:
cf:72:a9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org