Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/5889902502b983a44f235fd580da0657e5aef9ff.roa
File: 5889902502b983a44f235fd580da0657e5aef9ff.roa (raw, json)
Hash identifier: SlMNdL/uoFWuiWL8sst15wlSt5ZxiR/tdQYAJkmjh10=
Subject key identifier: A5:FE:61:22:BC:85:9C:C5:86:61:A2:EE:F9:32:1A:38:60:1E:FF:E6
Certificate issuer: /CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Certificate serial: 23C358
Authority key identifier: E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/5889902502b983a44f235fd580da0657e5aef9ff.roa
Signing time: Wed 22 Nov 2023 12:53:50 +0000
ROA not before: Wed 22 Nov 2023 12:53:50 +0000
ROA not after: Sat 22 Nov 2025 12:53:50 +0000
asID: 263684
IP address blocks: 200.115.24.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 05 Feb 2024 18:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2343768 (0x23c358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Validity
Not Before: Nov 22 12:53:50 2023 GMT
Not After : Nov 22 12:53:50 2025 GMT
Subject: CN=5889902502b983a44f235fd580da0657e5aef9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:33:69:1b:13:7d:7d:bb:82:f2:aa:56:55:d0:
82:53:d7:37:47:8e:d6:6d:46:d3:f9:f5:f1:77:dc:
2f:5c:22:0b:b7:f6:f3:44:88:5d:3c:cc:2a:71:dd:
d9:1f:25:03:94:c9:67:bd:7c:7d:4b:45:a4:b9:33:
f8:10:3a:bc:2d:cb:95:bc:20:c9:56:ed:ee:7e:72:
45:9d:59:48:5f:3c:28:f1:78:87:00:30:6f:fe:ea:
98:4d:df:8c:ef:cd:59:bf:3c:09:56:aa:1b:83:9a:
be:c2:a7:ee:bf:31:28:ef:35:e4:e2:f5:c2:ed:0f:
a4:f9:34:d9:80:06:d7:b8:81:40:4f:f8:df:95:0d:
f3:06:01:5d:6f:3b:b2:11:72:7c:ad:e3:91:6c:73:
d2:cd:d0:1b:3f:f4:99:b7:97:0b:e7:fa:1c:5f:a3:
60:e9:d6:c8:05:bb:3e:17:d1:89:ae:47:69:48:2b:
a0:4b:ea:d5:d0:5e:85:88:1f:8d:c2:5f:b4:aa:4c:
34:c6:60:0a:85:c7:d4:41:82:22:a1:ce:70:e0:45:
92:00:8a:0a:9a:1e:cf:97:4a:a7:9c:cc:d3:7c:16:
8a:8a:36:c8:dc:05:8b:20:c2:79:d8:0a:5e:d0:bc:
9f:aa:87:f1:db:89:44:fd:06:e0:22:ac:89:fd:c1:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FE:61:22:BC:85:9C:C5:86:61:A2:EE:F9:32:1A:38:60:1E:FF:E6
X509v3 Authority Key Identifier:
keyid:E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/5889902502b983a44f235fd580da0657e5aef9ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.24.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:89:17:64:61:8c:e1:28:8d:c6:09:5e:c0:b0:b3:2b:55:e0:
69:ac:70:f7:40:e6:4d:d1:02:5d:90:b7:45:e6:2a:88:b0:4d:
3c:ca:d9:7c:96:bb:2b:f5:d8:b2:37:62:2d:ee:d9:18:ce:be:
78:62:72:e9:11:37:96:db:6d:e2:55:b5:33:0f:a4:b6:52:e7:
f1:83:e1:1f:89:cc:f4:1d:eb:0c:53:d0:d7:a3:98:22:23:8c:
0c:7c:33:d1:94:28:a6:99:cf:9d:6f:12:94:6e:80:50:77:49:
0b:12:3d:46:c1:79:33:d9:ba:da:93:b7:af:ee:8f:b0:18:6b:
f9:a3:53:ec:69:1f:00:21:ca:37:cc:34:e3:53:71:5e:52:c5:
9c:ad:02:fd:e5:51:78:d7:01:0f:27:50:b0:a3:4c:2f:e8:90:
ec:c6:a7:ab:b3:a7:74:99:00:71:1c:3e:d0:38:e4:10:2e:73:
38:13:d8:ca:c5:eb:54:08:4f:37:2a:8f:46:16:24:f3:fe:10:
c6:19:d9:d1:4b:6e:30:25:ce:b2:8c:9a:8f:09:66:85:2d:f3:
dc:5a:d5:f4:06:c0:f3:17:46:6a:53:59:12:d5:e0:59:a2:27:
e2:69:85:e3:f5:7b:a6:f2:0e:e2:ac:99:aa:03:1e:fa:59:9e:
54:76:55:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 22:57:46 2024 by rpki-client on console-fra.rpki-client.org