Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/d8d466592868c2e770e2846293daefb82437c971.roa
File: d8d466592868c2e770e2846293daefb82437c971.roa (raw, json)
Hash identifier: mUgza/d/Fkofi2tjcfeSJt6lNudXXXfCPDrCDQWYTOs=
Subject key identifier: 21:72:DA:40:12:48:52:78:48:4E:1D:4E:A7:79:01:15:C7:2D:B1:A2
Certificate issuer: /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial: 0E969C
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/d8d466592868c2e770e2846293daefb82437c971.roa
Signing time: Wed 24 Mar 2021 22:49:41 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 27968
IP address blocks: 200.125.192.0/24 maxlen: 24
200.125.224.0/24 maxlen: 24
200.125.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 956060 (0xe969c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=d8d466592868c2e770e2846293daefb82437c971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:32:23:e6:38:64:e4:df:6d:b2:80:d7:5a:8c:
83:a4:a1:82:33:0a:b3:9a:1c:95:83:4f:76:71:32:
f1:10:11:4d:f8:ca:e6:f1:e5:04:0c:23:9a:72:3a:
01:54:8e:c2:8c:13:c2:7b:0a:26:1d:ae:8e:8e:46:
9e:91:4a:2c:14:0b:5f:a4:cc:5e:74:54:fb:9d:bb:
07:ee:dc:aa:19:62:17:c3:7b:a4:ab:88:b9:3e:c8:
70:ee:1a:e6:6c:6e:7e:a4:4c:1a:03:ae:60:5e:88:
7f:fb:0a:3f:6a:03:43:6c:89:54:75:c5:4b:7b:79:
46:b5:cf:4a:82:f0:f1:47:85:32:84:7b:a9:92:4d:
b4:97:c8:e5:e9:f8:9d:1f:27:a2:af:0f:a8:f1:da:
80:e9:fb:45:b6:7b:15:bc:2d:02:58:77:a0:43:5d:
1c:f8:e3:26:6c:81:f3:1f:9a:ef:3e:64:4f:aa:d5:
f8:ae:6b:b4:d2:9d:73:5c:57:66:01:74:17:08:3f:
01:2e:57:04:be:db:c2:a3:86:df:0b:0f:fb:c4:a9:
53:ce:89:73:7b:17:4c:94:5f:a0:cd:53:9a:44:43:
d6:4c:2e:47:13:89:21:6a:56:8d:99:36:6f:44:d5:
25:d8:67:10:22:ad:ad:01:41:c6:d4:1c:18:13:14:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:72:DA:40:12:48:52:78:48:4E:1D:4E:A7:79:01:15:C7:2D:B1:A2
X509v3 Authority Key Identifier:
keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/d8d466592868c2e770e2846293daefb82437c971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.192.0/24
200.125.224.0/24
200.125.255.0/24
Signature Algorithm: sha256WithRSAEncryption
57:28:b2:17:4c:94:3e:20:12:92:54:a9:fb:cb:7c:6a:55:a3:
db:7a:21:c5:63:82:36:fd:4c:64:af:f7:db:c9:d4:e2:df:25:
1c:d5:91:c1:07:f2:74:4a:ac:1c:c4:34:29:2e:39:ce:14:15:
ca:ce:d8:b2:8c:2e:49:a6:f4:9d:3a:7c:71:38:a1:7d:2a:f1:
f2:f3:79:0d:b6:4d:75:aa:3a:1c:b3:08:37:94:ab:e5:ef:f3:
2c:a7:7b:ae:7d:82:8b:ef:3e:fb:dd:02:38:65:ca:92:57:98:
30:15:2b:2c:0d:7e:65:e1:4a:fa:0c:31:34:88:74:5d:fe:5e:
ba:8e:4b:2e:54:58:ce:e5:96:0a:71:44:6a:6d:7e:69:a5:d0:
21:0e:d0:ed:7f:26:4e:14:25:30:fc:5c:48:e2:b8:16:2c:4d:
28:b1:ef:84:7a:2d:a9:83:e9:36:23:a4:65:6a:02:ef:e2:95:
65:06:3e:68:97:95:b7:ee:81:a2:6a:bb:41:d2:4f:5e:24:94:
57:81:aa:e4:f2:0a:d2:7a:a2:8b:8c:04:3b:16:cb:86:0a:24:
03:38:fd:fb:44:2f:71:e3:4e:e1:08:01:6c:62:df:6d:63:71:
88:b9:2d:0b:b3:66:4a:fe:06:5f:fa:b4:83:3f:ba:a7:dc:fd:
cd:9b:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org