Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/ffff711ba9bc6967c97e8be3188c51b011590376.roa
File: ffff711ba9bc6967c97e8be3188c51b011590376.roa (raw, json)
Hash identifier: QijF5K7Rx+FuiOOuspc1kqzthMbcsWM0CwGeSG/CqFY=
Subject key identifier: 81:9F:FD:49:8C:88:CB:B4:F2:4D:21:C7:51:91:64:EB:36:13:8E:95
Certificate issuer: /CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
Certificate serial: 0DC4D5
Authority key identifier: FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/ffff711ba9bc6967c97e8be3188c51b011590376.roa
Signing time: Wed 24 Mar 2021 14:32:06 +0000
ROA not before: Wed 24 Mar 2021 14:32:06 +0000
ROA not after: Tue 24 Mar 2026 14:32:06 +0000
asID: 10617
IP address blocks: 200.69.32.0/21 maxlen: 23
200.69.40.0/23 maxlen: 24
200.69.43.0/24 maxlen: 24
200.69.44.0/22 maxlen: 23
200.69.49.0/24 maxlen: 24
200.69.50.0/23 maxlen: 23
200.69.53.0/24 maxlen: 24
200.69.54.0/23 maxlen: 24
200.69.60.0/22 maxlen: 24
200.81.160.0/20 maxlen: 24
200.81.176.0/21 maxlen: 23
200.81.184.0/22 maxlen: 23
200.81.188.0/24 maxlen: 24
200.81.190.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 902357 (0xdc4d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fef0d186e1a114e74266f0fa736fc6cd86f8af7
Validity
Not Before: Mar 24 14:32:06 2021 GMT
Not After : Mar 24 14:32:06 2026 GMT
Subject: CN=ffff711ba9bc6967c97e8be3188c51b011590376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:a7:09:e4:25:1d:f3:85:f2:27:a3:b8:46:
a4:70:5c:01:20:64:48:6b:4b:f5:1f:e6:5e:b3:2b:
68:bf:80:88:14:90:dd:d2:44:3c:08:d3:f1:9f:2a:
b3:81:03:07:36:91:ca:aa:73:63:a0:e6:73:24:07:
c0:eb:ba:1b:f5:e5:42:34:15:d4:69:4f:05:0a:ee:
72:35:61:1a:5f:72:9f:a0:39:32:5b:40:8f:05:fa:
ea:e9:6d:d2:3b:14:52:ea:44:17:b2:a4:d9:fe:f9:
7a:78:97:b8:b4:51:67:63:6c:78:a1:ab:dd:d4:e8:
ff:22:6a:6b:3e:b4:0a:d4:5b:3e:97:57:f4:4a:8b:
92:b2:fa:c0:4f:29:56:f8:9d:9b:ea:77:0c:17:87:
2e:b9:94:5b:04:76:3e:02:d8:8a:49:9b:6e:3a:e2:
0f:22:8c:8a:4b:0f:a9:de:61:ed:f1:d9:d6:f6:75:
f6:5b:a9:a7:a5:01:92:a4:b6:c5:1a:c5:65:b1:c9:
ef:c8:4b:84:3c:79:2f:f5:fd:ba:e7:cc:61:22:87:
ab:91:90:e3:6b:84:6a:f3:3a:3d:e0:cc:04:4f:ba:
98:c5:6c:c1:4b:f6:e1:d0:d9:db:f8:4e:89:cd:5d:
04:f4:de:4f:6c:38:c1:1b:f9:76:ca:5c:83:1f:11:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9F:FD:49:8C:88:CB:B4:F2:4D:21:C7:51:91:64:EB:36:13:8E:95
X509v3 Authority Key Identifier:
keyid:FC:E7:E1:96:3C:2C:94:05:77:EB:FF:52:A6:33:15:F0:11:F9:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/ffff711ba9bc6967c97e8be3188c51b011590376.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcafe930-0cee-4282-af79-72b2537d7ea9/3fef0d186e1a114e74266f0fa736fc6cd86f8af7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.69.32.0-200.69.41.255
200.69.43.0-200.69.47.255
200.69.49.0-200.69.51.255
200.69.53.0-200.69.55.255
200.69.60.0/22
200.81.160.0-200.81.188.255
200.81.190.0/23
Signature Algorithm: sha256WithRSAEncryption
55:a2:c7:6b:8b:10:0b:55:47:2c:6b:5c:09:23:a6:9e:2f:9d:
b3:3b:9b:1a:d5:b1:f4:92:21:8e:9b:2d:76:bc:0a:e1:5e:0e:
48:c2:00:5f:fd:f0:09:c6:da:d0:6c:fd:ef:f7:82:cf:c0:7c:
0d:13:5f:69:5d:61:79:f9:90:3e:50:dd:11:47:e9:51:bd:77:
aa:75:81:7f:6c:0a:54:e6:a5:98:06:eb:89:9d:8c:dd:9b:6b:
71:9d:24:d3:65:02:ef:c0:d3:a2:81:c5:0f:33:56:2c:39:5e:
35:0b:0d:c3:17:79:2d:e1:da:b8:76:78:37:35:9d:99:6f:bb:
0a:52:fb:6e:a8:01:8a:fa:1d:f2:5f:a7:1c:98:fd:aa:a9:70:
83:aa:18:90:71:a1:20:6c:be:5e:0b:70:0a:66:cd:f3:f6:3c:
16:c9:4f:67:d5:cf:09:0f:0d:2c:b5:de:f8:11:8e:d7:db:b4:
5e:9f:02:dc:61:18:0b:82:0b:3d:4c:76:e3:bf:8a:56:38:16:
33:43:a8:0f:6c:46:30:ba:6e:e9:8c:c2:e8:10:b0:ba:e2:e2:
2f:dc:da:99:b8:8a:ed:7a:68:d8:03:e1:e4:35:f4:d8:0e:6f:
5b:e9:c0:3c:30:8f:ad:c5:a9:1b:43:22:7e:30:3c:cc:61:c1:
57:6d:2a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 19:38:33 2023 by rpki-client on console-fra.rpki-client.org