Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/422ab4d65804541db3ea48c7615a9ee25193d5f7.roa
File: 422ab4d65804541db3ea48c7615a9ee25193d5f7.roa (raw, json)
Hash identifier: TRbSoTudsiFFBNC4xsJSgcjzuMowkf3F9ml5WfbeCSE=
Subject key identifier: C8:E6:4B:E1:79:DA:0A:97:60:32:60:57:73:79:DA:AA:9E:BB:D4:06
Certificate issuer: /CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Certificate serial: 0EA884
Authority key identifier: 34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/422ab4d65804541db3ea48c7615a9ee25193d5f7.roa
Signing time: Tue 04 May 2021 22:27:25 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 27714
IP address blocks: 200.85.128.0/21 maxlen: 21
200.85.128.0/21 maxlen: 24
200.85.128.0/24 maxlen: 24
200.85.129.0/24 maxlen: 24
200.85.130.0/24 maxlen: 24
200.85.131.0/24 maxlen: 24
200.85.132.0/24 maxlen: 24
200.85.133.0/24 maxlen: 24
200.85.134.0/24 maxlen: 24
200.85.135.0/24 maxlen: 24
200.85.140.0/24 maxlen: 24
200.85.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 960644 (0xea884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=422ab4d65804541db3ea48c7615a9ee25193d5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ba:13:58:44:a8:20:17:72:c8:34:26:d4:cf:
3a:8e:1e:dc:78:06:60:1c:26:06:39:59:6c:df:ae:
69:4b:de:fd:af:7e:4a:d2:a1:c8:54:53:56:2e:4e:
79:29:ba:dc:4a:5e:4c:d7:5b:61:f1:dc:52:17:59:
b8:06:79:f5:82:de:14:56:6d:3d:19:5c:1c:40:78:
50:71:44:d2:72:73:b6:cf:f9:18:ed:45:21:f8:b9:
a5:37:49:43:24:a8:4b:c8:79:80:a1:fd:7b:72:b6:
72:c6:c2:fa:5a:31:42:63:4f:ef:fe:00:84:62:1d:
1c:ae:c3:02:cd:76:f5:0a:06:2c:30:13:66:20:08:
ab:2e:0e:12:de:a5:39:d2:c3:38:bf:6e:ee:a9:bb:
bb:f3:c4:80:2b:2c:9d:e4:66:7b:33:39:8d:db:1e:
7b:d3:61:e8:c8:5c:49:64:3b:57:31:e2:9d:3d:32:
a6:ec:99:c7:de:5e:10:c6:9c:a0:72:8e:08:40:76:
d9:3b:3e:6b:93:3e:2e:49:28:e7:1c:90:28:96:34:
f2:2f:6d:e8:e3:4a:02:fe:ca:49:fd:84:fa:b1:c1:
94:24:de:b4:0e:5d:c9:f8:95:ad:78:57:60:0a:74:
58:b2:3e:d8:e8:9c:cc:e8:b9:50:8e:5d:f6:c9:72:
58:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E6:4B:E1:79:DA:0A:97:60:32:60:57:73:79:DA:AA:9E:BB:D4:06
X509v3 Authority Key Identifier:
keyid:34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/422ab4d65804541db3ea48c7615a9ee25193d5f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.128.0/21
200.85.140.0/23
Signature Algorithm: sha256WithRSAEncryption
38:10:50:2a:5c:11:36:02:9a:98:43:59:94:c5:57:84:3d:0d:
ec:d6:e2:99:49:10:cd:bc:89:d1:b7:47:e0:ba:68:a5:bd:54:
2c:0a:63:3d:88:b5:1b:63:6f:33:cc:8d:1d:c4:8b:52:e2:24:
c9:68:bf:8f:9a:a0:c0:df:19:13:b2:e8:a7:1b:d9:2c:4b:c6:
27:1b:4c:50:14:16:d3:be:1b:be:4b:4a:ba:7b:90:d9:33:bf:
8e:db:d2:d8:83:15:25:5a:7c:4d:fc:94:bc:f3:b2:99:74:79:
72:e7:16:7b:c9:28:42:19:aa:df:18:c5:2c:81:f9:4b:e8:9c:
41:03:9b:0d:1c:db:87:04:a9:d5:26:aa:94:9f:3b:74:27:85:
1b:84:94:dc:ab:a4:ce:5b:20:4b:79:48:cb:11:c7:17:16:f9:
07:f0:88:3f:34:ae:df:81:40:86:19:5a:8b:60:d6:11:b1:a1:
d0:fd:28:ca:a5:52:dc:29:c5:c7:10:e2:93:1c:cf:c8:a8:02:
3e:6d:13:6f:81:3d:d2:ab:99:29:97:e8:9e:04:03:f0:c8:20:
e7:bc:31:87:ba:99:a7:8c:b9:31:e7:2e:92:22:db:50:d5:e7:
3d:c1:e4:ff:2e:1a:e1:85:aa:2c:c0:e6:19:7f:42:2d:80:65:
56:12:a2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org