Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/67a9a87cb57fdfdae42af8bdbd23e60acc4a12be.roa
File: 67a9a87cb57fdfdae42af8bdbd23e60acc4a12be.roa (raw, json)
Hash identifier: CxDhOOVEw0au6HUqlXy5c2/md2OmyyXXN5JMflQWbBk=
Subject key identifier: 7A:7C:C5:21:70:9B:E6:2A:67:D1:D7:E5:01:AA:11:C2:4A:15:A5:D3
Certificate issuer: /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial: 1AB521
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/67a9a87cb57fdfdae42af8bdbd23e60acc4a12be.roa
Signing time: Mon 03 Oct 2022 19:50:48 +0000
ROA not before: Mon 03 Oct 2022 19:36:37 +0000
ROA not after: Thu 03 Oct 2024 20:36:37 +0000
asID: 6306
IP address blocks: 200.35.88.0/22 maxlen: 22
200.35.92.0/22 maxlen: 22
200.35.64.0/23 maxlen: 23
200.35.66.0/23 maxlen: 23
200.35.76.0/22 maxlen: 22
200.35.72.0/22 maxlen: 22
200.35.80.0/22 maxlen: 22
200.35.104.0/22 maxlen: 22
200.35.112.0/22 maxlen: 22
200.35.120.0/22 maxlen: 22
200.35.124.0/22 maxlen: 22
200.35.116.0/22 maxlen: 22
200.35.108.0/22 maxlen: 22
200.35.96.0/21 maxlen: 21
200.35.84.0/22 maxlen: 22
200.35.68.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1750305 (0x1ab521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Validity
Not Before: Oct 3 19:36:37 2022 GMT
Not After : Oct 3 20:36:37 2024 GMT
Subject: CN=67a9a87cb57fdfdae42af8bdbd23e60acc4a12be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:11:98:11:32:ff:b6:2e:41:3b:89:0d:d9:
6a:a1:ee:9f:e5:2b:30:a3:44:b0:3d:89:4d:1d:d2:
df:c4:b4:8f:1d:1e:69:78:3a:09:0f:17:bb:9c:e5:
4e:40:cd:86:bc:59:0a:33:d7:13:67:5b:f6:fa:53:
e3:4d:c6:4c:6f:62:c9:26:e4:1f:d5:e6:ef:56:3e:
74:b0:c7:8d:eb:32:25:92:ec:01:88:e7:9f:fe:53:
c9:7f:76:7c:fc:10:1c:97:5d:ff:45:f5:01:4c:f8:
04:cc:49:5d:b7:cc:90:fd:76:67:1f:3b:a3:cb:6d:
ce:f8:74:a8:de:5e:9b:d3:f4:99:56:7b:93:0d:6c:
6b:44:88:4d:df:75:c3:36:dd:ac:ab:e0:8e:a9:7c:
f4:30:69:0d:03:ba:3a:af:fd:5e:78:cf:f9:4c:2b:
5d:ab:c3:e0:b5:83:d3:e4:40:46:45:9d:91:c7:83:
4d:e5:5c:ef:6c:b9:df:e3:37:8f:2c:02:db:ce:30:
56:8d:56:5c:b2:44:94:ad:c1:27:0c:2d:1d:1e:fe:
59:7f:fa:2a:4f:7e:ba:ee:e5:52:d6:07:dd:a1:5d:
80:3d:a3:0a:30:a3:0f:89:b4:4e:f5:33:cc:a1:e0:
c9:ee:84:8d:12:90:5f:fd:a4:df:df:cd:ec:94:fc:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7C:C5:21:70:9B:E6:2A:67:D1:D7:E5:01:AA:11:C2:4A:15:A5:D3
X509v3 Authority Key Identifier:
keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/67a9a87cb57fdfdae42af8bdbd23e60acc4a12be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:2d:03:25:d7:81:c1:03:75:95:16:e0:27:f4:56:04:d7:39:
68:64:45:2c:d0:a7:fe:bb:d8:44:a7:bc:39:6d:22:29:a8:9a:
7a:43:e6:b2:46:50:68:44:ce:9d:f4:81:00:a9:90:23:13:f0:
d1:70:b1:48:20:2a:b9:0f:f5:91:ce:0f:01:de:2a:28:2d:de:
4e:e5:b1:27:23:ee:fb:d4:54:a9:c2:62:93:52:5a:93:81:6c:
9f:20:3b:56:23:2d:91:33:ca:36:0f:b0:16:15:d4:0d:7e:62:
35:71:6c:3f:da:0c:e6:b3:1c:50:26:ec:e9:94:a4:a1:f8:6c:
5a:3d:24:18:db:66:a6:51:8a:ee:55:36:05:db:a1:c7:76:d0:
a8:7d:7c:55:98:5a:eb:f3:ae:f5:75:77:43:2b:22:7e:4a:ed:
56:9a:9e:a0:6d:03:c2:a0:9e:a8:63:98:2d:df:df:54:73:3f:
8b:f9:b4:95:9d:80:5e:1b:ac:e6:49:a1:33:68:14:26:3e:7e:
56:ed:80:a0:98:28:bb:dd:6f:73:f6:bc:5d:73:16:44:8f:9a:
65:5a:fd:89:c2:05:00:9b:aa:b7:b8:5b:77:5f:d7:44:d1:b1:
d9:bf:65:6d:f0:f9:52:52:4f:7e:23:a0:68:4d:53:48:ef:76:
19:9b:d9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 20:51:40 2023 by rpki-client on console-ams.rpki-client.org