Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/cb3f2127b18f96f0a43d14ca408d6a68d72bde83.roa
File: cb3f2127b18f96f0a43d14ca408d6a68d72bde83.roa (raw, json)
Hash identifier: B2M1is6tRNlzwK8mNfKGjGzevZcpS5R9+He+C2gMLXk=
Subject key identifier: 9C:77:98:EF:DB:29:54:1A:FA:9A:6C:53:51:A8:7C:2D:A4:F7:E2:BF
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 1B3CD5
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/cb3f2127b18f96f0a43d14ca408d6a68d72bde83.roa
Signing time: Wed 18 May 2022 22:13:15 +0000
ROA not before: Thu 26 Aug 2021 03:00:00 +0000
ROA not after: Sat 26 Aug 2023 03:00:00 +0000
asID: 14080
IP address blocks: 186.147.0.0/16 maxlen: 24
186.80.0.0/16 maxlen: 24
186.81.0.0/16 maxlen: 24
186.82.0.0/16 maxlen: 24
186.83.0.0/16 maxlen: 24
181.49.76.0/22 maxlen: 24
190.145.228.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1785045 (0x1b3cd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Aug 26 03:00:00 2021 GMT
Not After : Aug 26 03:00:00 2023 GMT
Subject: CN=cb3f2127b18f96f0a43d14ca408d6a68d72bde83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:c4:ba:b0:00:68:66:8e:69:19:52:98:78:
30:64:7f:7c:b6:ca:df:5a:7f:13:7b:57:9f:c2:bc:
46:50:e1:e3:00:e6:18:fe:a6:92:89:44:1c:5e:b2:
12:5b:b7:ed:39:0f:10:58:f5:7e:bf:4f:44:b2:33:
81:ce:9b:b8:3f:d4:3f:a1:3f:ac:cd:64:59:8d:15:
0d:ba:9d:6a:54:2b:95:b9:1a:a9:5c:11:d3:a4:87:
99:78:77:b3:e8:e2:08:a1:0d:56:cc:b2:31:9a:2c:
c4:24:99:2c:c4:6c:e5:08:22:d4:10:31:a6:eb:18:
71:a5:11:9d:72:73:1e:e2:51:76:ea:87:68:3a:7e:
41:f2:20:31:d2:6c:00:48:8b:b5:5d:ad:84:80:82:
e5:52:60:2d:5b:e0:07:1d:63:cc:88:80:83:d8:b8:
c2:7d:73:68:10:b9:3c:7f:6d:25:99:9a:84:4b:cf:
c2:00:89:4f:d3:9a:98:89:2d:4e:30:29:1d:f1:9c:
d6:3f:6c:f7:e8:4b:ca:ae:3c:14:2e:e0:ca:39:c8:
78:d1:93:ff:77:ee:43:ad:f5:95:9b:f5:f0:0a:05:
40:01:88:50:2c:87:8b:f4:1b:44:d2:8e:8f:20:45:
a0:e9:31:b1:bd:ce:e5:bc:1a:f0:0a:76:f5:44:4d:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:77:98:EF:DB:29:54:1A:FA:9A:6C:53:51:A8:7C:2D:A4:F7:E2:BF
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/cb3f2127b18f96f0a43d14ca408d6a68d72bde83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.49.76.0/22
186.80.0.0/14
186.147.0.0/16
190.145.228.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:c2:0b:3a:de:06:81:69:5e:2b:5d:54:c9:3e:f7:73:46:19:
e4:89:3a:16:2e:aa:87:b3:d6:18:be:4e:5c:6f:94:4a:4c:e1:
da:9b:24:a8:4a:cf:da:d4:04:2b:c1:82:cd:9a:65:16:ac:e3:
41:d5:4d:7e:4d:6c:17:60:f2:22:61:f3:57:dc:a7:14:9c:ba:
40:c0:a6:19:69:72:42:c4:37:2f:5b:41:1e:d0:3c:e1:b6:c4:
ab:69:31:eb:9d:4a:f1:db:66:74:f0:6d:a1:9d:6b:a1:8f:15:
77:a8:0d:c0:ec:ea:16:8c:9b:14:7a:cf:aa:c1:a1:c2:55:6b:
d6:35:2e:09:92:1e:a5:ed:94:97:09:f4:da:b6:90:b7:64:72:
dc:38:f7:17:28:ff:11:83:e4:bb:93:8a:52:66:a0:ac:f4:50:
b2:90:22:ac:77:e1:51:58:2a:81:d5:cf:ae:c0:c6:eb:bc:10:
42:37:d4:c2:43:ab:5b:bf:ad:22:c9:4b:f7:df:e9:c5:70:02:
08:7b:f4:54:0b:23:a3:e1:6f:9c:03:2a:22:f6:82:63:2b:2c:
ad:ca:a0:53:5e:3f:86:f4:85:29:59:6a:d6:4d:a0:e3:a2:4c:
cd:1c:d8:42:6e:bd:19:7e:be:f9:25:22:9a:8a:47:11:f8:f4:
8c:5c:65:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 09:05:13 2023 by rpki-client on console-ams.rpki-client.org