Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/e32621dd4a016a35b73768c8e2594896e33a6f19.roa
File: e32621dd4a016a35b73768c8e2594896e33a6f19.roa (raw, json)
Hash identifier: cLwbmKR9YqaL7XcZ5SNumENzGUXEvPZk6tW8oct+tOU=
Subject key identifier: 2E:E5:47:54:E0:23:87:1C:47:DA:DD:C8:0E:84:96:7E:0F:04:97:DA
Certificate issuer: /CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Certificate serial: 1CAC60
Authority key identifier: 34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/e32621dd4a016a35b73768c8e2594896e33a6f19.roa
Signing time: Sat 26 Nov 2022 01:44:35 +0000
ROA not before: Sun 25 Apr 2021 03:00:00 +0000
ROA not after: Fri 28 Apr 2023 03:00:00 +0000
asID: 271906
IP address blocks: 200.85.128.0/21 maxlen: 24
200.85.128.0/24 maxlen: 24
200.85.129.0/24 maxlen: 24
200.85.130.0/24 maxlen: 24
200.85.131.0/24 maxlen: 24
200.85.132.0/24 maxlen: 24
200.85.133.0/24 maxlen: 24
200.85.134.0/24 maxlen: 24
200.85.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1879136 (0x1cac60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
Validity
Not Before: Apr 25 03:00:00 2021 GMT
Not After : Apr 28 03:00:00 2023 GMT
Subject: CN=e32621dd4a016a35b73768c8e2594896e33a6f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fc:39:e8:bf:ac:ff:d3:85:5d:47:b4:94:64:
23:d7:fa:50:36:26:32:64:62:49:c4:6f:ef:d0:69:
a7:7f:eb:40:29:e4:b1:e2:ea:bc:20:fd:e3:06:fb:
d6:3b:d1:44:15:22:53:a4:d5:e5:8b:80:5e:ec:e7:
f0:76:b9:76:d9:8d:d5:70:1f:5d:af:fd:2d:0e:51:
f0:00:b0:77:78:6d:c9:29:ce:53:ad:5f:6b:4e:a6:
16:41:39:7a:7f:0d:db:d2:69:04:31:c0:d7:be:43:
a6:6c:3e:da:53:4f:43:0d:7a:99:8c:45:64:52:ac:
a4:76:0a:ae:bc:9b:2d:76:a9:06:9e:4b:fe:09:e5:
01:9d:15:78:8a:47:6a:5e:5f:10:ab:11:77:a2:66:
a9:ea:b3:7e:fa:05:dd:63:84:d1:43:ae:7e:22:e5:
9a:65:d7:08:b4:0e:51:d3:f0:0c:db:51:3a:11:be:
77:70:fe:b3:73:4d:89:0d:1e:7d:d3:01:e5:4c:81:
98:dc:9f:f8:bf:4d:46:79:6b:4c:c2:00:ad:a7:e7:
f4:80:7b:0d:ce:1c:4f:c0:fa:4b:87:7f:55:95:ea:
fa:70:32:68:7f:0d:9e:00:f8:44:0d:d6:98:90:10:
8e:1e:ea:48:08:a9:2f:a9:17:c7:82:82:c7:51:44:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E5:47:54:E0:23:87:1C:47:DA:DD:C8:0E:84:96:7E:0F:04:97:DA
X509v3 Authority Key Identifier:
keyid:34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/e32621dd4a016a35b73768c8e2594896e33a6f19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.85.128.0/21
Signature Algorithm: sha256WithRSAEncryption
78:dc:ff:ff:fc:1c:6e:ff:27:c8:9e:cb:52:af:63:76:1e:a2:
7d:8e:3d:28:27:51:83:7f:05:0d:b2:1a:45:b8:7d:12:e7:cf:
a9:b6:58:f7:56:41:f6:b8:32:b0:38:a0:92:54:4c:06:a2:d0:
fb:1e:a6:eb:fc:d8:13:60:02:38:c8:62:3f:fe:30:0d:86:7d:
1f:38:0a:47:f7:21:81:47:54:9a:08:c6:e8:88:80:7b:fa:a2:
93:1c:ea:6b:89:3d:c4:70:71:eb:2c:b6:e1:be:29:88:ce:e4:
0b:53:cb:ae:ba:66:03:c6:5e:8d:4b:de:92:c6:4b:2d:37:63:
65:bb:7e:c4:5d:8e:83:be:c0:99:21:8a:52:45:e0:bc:c8:34:
47:7f:43:75:49:1a:a3:bf:fb:2f:f3:47:57:61:5c:05:dc:a7:
b5:51:e4:ab:d4:6c:1e:89:bb:a8:52:75:09:73:a0:4f:70:d3:
39:a8:07:2e:20:39:37:a5:e2:87:07:57:c7:44:7f:48:9f:3b:
bf:0a:11:7c:a4:85:88:9d:73:ef:98:85:b0:e7:f7:49:c0:13:
95:f3:92:e8:ab:a4:df:96:a0:11:60:e3:cc:28:65:99:3d:f7:
fb:ad:3e:82:84:75:9e:13:84:9f:30:13:24:92:0c:59:d1:ef:
6d:86:1f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org