Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/69a43c7c2af029e01efb00595d3ad1e3795f84cb.roa
File: 69a43c7c2af029e01efb00595d3ad1e3795f84cb.roa (raw, json)
Hash identifier: bmXIW+iQDWL2XIJqT4fZUvb7ZsVy7XiWVXHzGStBDSQ=
Subject key identifier: F5:7F:DD:30:90:CC:DB:83:14:DC:C2:4D:52:EB:62:37:40:A1:9C:EB
Certificate issuer: /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial: 101AF6
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/69a43c7c2af029e01efb00595d3ad1e3795f84cb.roa
Signing time: Mon 05 Jul 2021 18:49:01 +0000
ROA not before: Mon 05 Jul 2021 03:00:00 +0000
ROA not after: Wed 05 Jul 2023 03:00:00 +0000
asID: 6535
IP address blocks: 200.14.204.0/24 maxlen: 24
200.14.211.0/24 maxlen: 24
200.14.228.0/23 maxlen: 24
200.14.230.0/24 maxlen: 24
200.27.128.0/24 maxlen: 24
200.29.200.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1055478 (0x101af6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Validity
Not Before: Jul 5 03:00:00 2021 GMT
Not After : Jul 5 03:00:00 2023 GMT
Subject: CN=69a43c7c2af029e01efb00595d3ad1e3795f84cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:e0:57:24:5a:3c:68:26:de:eb:57:bb:c8:
41:b3:a5:27:6d:a8:53:04:41:8f:12:8d:2b:4c:98:
f1:cb:54:bf:5c:3c:9f:4b:30:66:ec:3c:a1:16:fe:
94:13:4a:e5:ae:9b:1e:d1:e3:95:d8:5f:03:a0:e6:
d2:d0:ea:3b:9b:d3:ab:4d:10:66:51:70:83:32:57:
b5:76:78:d1:27:ac:1d:21:90:a7:45:2b:df:ef:f8:
82:77:ed:23:e7:e4:47:c4:15:65:df:3f:19:5b:75:
d6:6c:63:65:c3:e5:1c:b4:7d:6a:eb:f4:ce:85:e7:
c7:54:ff:8f:b1:99:af:fb:0a:f1:f0:5d:3d:fa:0c:
f3:50:1e:1f:c9:0d:ba:5a:a9:a8:b0:2d:81:6a:27:
bf:6e:96:c9:70:0d:2a:64:00:2f:e7:90:7f:2e:55:
8d:51:fb:5b:d3:e7:00:6f:03:51:96:65:ee:b1:10:
2c:4a:b5:79:4f:1b:60:fa:de:bd:82:f8:cd:81:3b:
43:bb:05:5d:9c:c9:e8:40:6e:d7:ed:93:80:0e:45:
e1:c3:0b:04:6f:9d:1b:1a:be:44:ab:5f:7a:53:d3:
57:20:0e:89:0f:c7:07:92:22:f5:37:a2:ed:1a:ea:
e9:f0:af:7b:d9:5e:fe:13:8c:f0:16:e7:3e:a3:74:
eb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7F:DD:30:90:CC:DB:83:14:DC:C2:4D:52:EB:62:37:40:A1:9C:EB
X509v3 Authority Key Identifier:
keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/69a43c7c2af029e01efb00595d3ad1e3795f84cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.204.0/24
200.14.211.0/24
200.14.228.0-200.14.230.255
200.27.128.0/24
200.29.200.0/21
Signature Algorithm: sha256WithRSAEncryption
26:9e:d0:86:cd:3f:95:42:43:0c:42:5b:73:1d:11:26:47:32:
e9:6e:b2:44:32:86:b9:bd:e8:03:03:5f:ee:7c:d4:b1:43:35:
f6:96:ee:db:a8:7f:e5:89:25:fd:91:28:13:a4:b3:fd:38:e1:
6e:55:cf:fc:ef:c4:41:45:1f:66:61:f8:4f:2d:6a:10:0a:3c:
f2:3c:ed:8e:d1:5f:25:ed:8c:d0:f4:e2:f1:be:e6:64:48:21:
6e:43:ac:be:4c:60:1c:d1:c7:c7:e3:e7:f3:2c:6f:2d:15:0b:
a2:b3:8d:2f:91:50:ae:82:e1:b0:7f:5b:43:e4:05:ca:f2:dc:
cd:df:fd:17:54:66:d2:94:48:3a:6c:33:9a:37:00:d2:f8:b0:
68:5f:86:11:c5:ee:9f:83:c1:ac:e5:c8:10:4a:a1:3d:cd:00:
24:51:14:d6:68:b6:eb:d1:e1:03:7a:c7:9d:85:c2:f2:ea:7b:
ea:c6:aa:50:5c:32:0d:b0:4a:62:c7:ce:4a:ff:0f:64:5a:4c:
3b:bd:05:2c:57:9a:79:3f:1f:ec:d2:0c:da:7f:90:56:70:03:
af:9e:7d:68:a3:1d:f6:39:44:ee:36:dc:28:1f:1e:90:81:51:
44:09:4a:6d:b7:bf:e8:11:26:a8:54:2b:71:1f:47:c3:b7:cf:
15:12:e6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org