Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/df002ccce956d6d2aa0c57c786f2cc3d820b9965.roa
File: df002ccce956d6d2aa0c57c786f2cc3d820b9965.roa (raw, json)
Hash identifier: AWXhdY6qYdSM3vF0drTGzTrOkJ1gk1EFszoBIwDgTJg=
Subject key identifier: A9:B6:6C:8D:62:FD:40:01:E5:E9:A5:27:BB:00:39:E8:67:6F:F8:CD
Certificate issuer: /CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Certificate serial: 170CCA
Authority key identifier: E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/df002ccce956d6d2aa0c57c786f2cc3d820b9965.roa
Signing time: Mon 11 Apr 2022 23:07:51 +0000
ROA not before: Mon 11 Apr 2022 03:00:00 +0000
ROA not after: Thu 11 Apr 2024 03:00:00 +0000
asID: 272043
IP address blocks: 200.25.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1510602 (0x170cca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97eb9b253fa546f87b3f76167f283bcc3700361
Validity
Not Before: Apr 11 03:00:00 2022 GMT
Not After : Apr 11 03:00:00 2024 GMT
Subject: CN=df002ccce956d6d2aa0c57c786f2cc3d820b9965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:94:d1:1e:9a:37:7c:91:b5:40:17:1f:bb:79:
c8:37:ce:fe:29:4e:ff:80:97:8c:7d:51:f1:0e:03:
52:7c:7a:1b:3e:e4:d6:fd:1f:60:ac:8c:62:da:c8:
3d:87:3a:da:87:c6:b9:51:94:42:48:aa:3c:1b:cf:
ea:23:96:9d:41:42:d4:0c:e6:17:a1:a4:35:fd:73:
ad:c1:ae:c2:8a:a5:38:6d:c1:8c:05:04:6d:3c:c6:
ec:20:86:5a:4a:52:be:09:d7:b4:60:0f:c2:8a:e6:
31:80:c1:13:22:98:d8:61:01:b2:fd:b4:35:05:b1:
b0:a7:5b:2b:8e:68:5f:7c:33:2e:71:25:81:3d:f5:
36:f7:64:16:db:a5:db:c4:cc:5d:5c:60:e1:a0:9f:
26:3e:0e:fe:78:4b:c7:08:55:69:bd:8e:12:3f:52:
6a:1f:ed:98:e4:61:11:21:ee:37:a4:69:b2:74:07:
61:70:19:ee:01:01:9b:83:2a:da:c3:ab:3e:89:88:
54:d2:1a:0a:dd:e9:71:ea:9f:e4:c5:b9:31:18:5e:
8c:5a:22:f9:b9:12:4d:3f:47:f1:aa:7a:b5:2d:5f:
7d:20:0e:1d:c8:07:c1:b3:0d:97:9c:14:e0:5e:cc:
47:8c:b6:40:09:33:6e:f5:94:21:e0:37:dc:90:69:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B6:6C:8D:62:FD:40:01:E5:E9:A5:27:BB:00:39:E8:67:6F:F8:CD
X509v3 Authority Key Identifier:
keyid:E8:08:63:BC:E2:22:01:93:47:84:98:44:4E:17:D0:45:0D:5F:50:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f97eb9b253fa546f87b3f76167f283bcc3700361.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/df002ccce956d6d2aa0c57c786f2cc3d820b9965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e7f5cd14-add7-4b70-9c3a-4371633f55da/f97eb9b253fa546f87b3f76167f283bcc3700361.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.25.64.0/24
Signature Algorithm: sha256WithRSAEncryption
50:27:21:22:10:ca:41:ad:68:02:11:ab:9e:16:3b:5f:7f:f0:
7c:d2:12:81:16:c7:db:8c:2d:ba:d6:10:9d:e1:ea:e4:97:29:
80:76:8b:f3:61:df:6d:09:fd:16:cb:10:5f:4f:8a:48:c1:43:
fd:75:1e:b4:01:46:f4:5b:82:fd:28:71:13:94:3a:3e:d6:f8:
21:4d:97:13:d3:cd:5b:33:f9:93:3c:ac:e5:f4:6d:a2:75:01:
8b:55:4f:b7:5d:e6:9d:98:66:d1:ba:58:66:fa:87:92:fe:46:
eb:7f:40:0e:c7:22:a5:9e:4b:c4:21:fa:e4:73:90:1a:50:1c:
d4:8c:f7:84:ae:1c:f0:ef:ff:58:87:a2:42:9e:97:cc:65:f6:
68:a0:04:07:f8:95:f8:67:1d:f8:4a:66:9a:cb:f3:f1:eb:25:
28:6a:02:31:73:3c:8b:f9:49:28:d1:b5:e8:a5:50:10:c3:f5:
33:0e:91:30:22:67:9e:d0:c7:d0:7c:8e:4e:be:38:6e:b4:20:
43:95:e3:66:0a:9c:29:33:08:0c:73:24:0a:df:66:ad:f6:54:
b8:29:70:ca:32:3f:69:9a:1a:ed:5f:6a:e7:a7:d9:37:6a:ca:
70:06:61:a3:2a:e8:47:84:ea:fc:8a:ef:87:73:41:49:82:8f:
db:72:67:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-fra.rpki-client.org