Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e5bd1d7979105c284d32601bcf43a75134bed98b.roa
File: e5bd1d7979105c284d32601bcf43a75134bed98b.roa (raw, json)
Hash identifier: l0IoACNYU5qM03VS1ptn09a+QRMuSHAGtTAEdMfFpCg=
Subject key identifier: 07:93:CC:3F:C0:00:AC:6D:6A:A1:46:8B:7E:19:1E:98:E9:5A:25:B9
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 1CC1AF
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e5bd1d7979105c284d32601bcf43a75134bed98b.roa
Signing time: Thu 07 Jul 2022 22:58:00 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 14080
IP address blocks: 186.86.28.0/22 maxlen: 24
186.144.124.0/22 maxlen: 24
190.147.138.0/23 maxlen: 24
186.144.32.0/22 maxlen: 24
190.156.206.0/23 maxlen: 24
181.51.20.0/22 maxlen: 24
186.87.108.0/22 maxlen: 24
186.145.0.0/16 maxlen: 24
186.81.102.0/23 maxlen: 24
186.81.196.0/22 maxlen: 22
190.84.28.0/22 maxlen: 22
190.156.48.0/22 maxlen: 22
190.159.136.0/22 maxlen: 22
200.118.236.0/22 maxlen: 22
190.144.224.0/19 maxlen: 19
181.56.28.0/22 maxlen: 22
186.83.68.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1884591 (0x1cc1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=e5bd1d7979105c284d32601bcf43a75134bed98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:de:7f:7b:9a:7c:b2:51:37:f8:3c:83:01:
50:bd:4d:49:ee:0f:82:0e:50:c5:6c:e5:77:dd:99:
04:aa:17:7c:cc:0a:3f:10:2e:b0:ec:18:00:ec:70:
20:f2:e2:61:2d:71:2e:e5:d0:aa:72:e6:23:12:cd:
d7:28:6c:36:25:f1:e8:9b:8d:82:0a:e5:22:2b:7b:
eb:ae:fa:ca:1b:63:13:37:1a:97:97:eb:78:6b:28:
4b:32:85:a2:e1:ab:55:39:ed:5a:61:92:30:dd:d2:
27:e3:52:9e:c2:71:e9:b9:3b:34:22:4b:8c:c3:76:
3a:fd:38:0d:61:e2:8a:cf:26:83:99:5a:40:7a:90:
7a:d9:ac:9b:6e:db:42:fc:41:9e:b0:6c:ec:ec:6c:
73:ac:b2:a9:bd:df:b0:0a:d9:28:1a:6b:37:ff:5b:
14:0e:0c:7e:b9:98:d4:5f:0a:09:98:76:16:4f:e9:
2e:99:4d:35:6b:b3:a8:4c:41:e9:a5:3f:45:d9:01:
6c:b6:17:97:e1:c4:f9:a6:48:75:20:f2:6b:55:bf:
03:72:3c:e5:ff:4b:db:a5:5c:a8:8e:76:2c:f3:ea:
b8:84:68:dc:5e:9e:1e:f3:b4:5b:07:68:9b:b4:db:
42:d7:99:23:60:5d:1e:91:8e:18:48:34:88:79:52:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:93:CC:3F:C0:00:AC:6D:6A:A1:46:8B:7E:19:1E:98:E9:5A:25:B9
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e5bd1d7979105c284d32601bcf43a75134bed98b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.51.20.0/22
181.56.28.0/22
186.81.102.0/23
186.81.196.0/22
186.83.68.0/22
186.86.28.0/22
186.87.108.0/22
186.144.32.0/22
186.144.124.0/22
186.145.0.0/16
190.84.28.0/22
190.144.224.0/19
190.147.138.0/23
190.156.48.0/22
190.156.206.0/23
190.159.136.0/22
200.118.236.0/22
Signature Algorithm: sha256WithRSAEncryption
19:a8:8d:dd:73:6c:0f:67:03:08:89:f1:80:7e:4d:ab:0c:1d:
1e:18:bd:1a:c2:95:29:41:2a:95:95:b5:44:72:00:8d:b1:25:
b7:ba:8a:92:08:15:02:71:3e:78:76:39:7a:7c:0e:f8:26:f9:
fe:d1:a6:73:27:b0:49:bb:c7:9e:e7:ed:0c:e5:d5:aa:01:55:
12:68:97:91:13:74:09:e5:f3:26:c2:29:0e:78:fd:0d:25:36:
97:5f:13:97:9e:ff:02:54:7e:50:6f:aa:95:93:62:77:ba:87:
ad:8f:65:55:dd:ae:11:df:b6:2e:7e:99:bb:dd:3e:e8:18:8e:
98:d5:fe:c3:a9:7b:b7:63:56:05:47:41:1e:ac:35:97:66:1e:
9d:9d:74:ac:7e:dc:38:52:58:50:28:cc:b1:66:b6:f5:30:26:
b6:1c:4b:a8:b8:cb:20:7f:88:2e:5d:b8:3c:ab:c1:62:eb:cf:
87:7a:4d:15:46:6a:d1:98:2a:b1:1f:ae:63:e1:16:e2:1a:04:
17:fb:01:3d:a6:86:14:86:70:ee:0c:50:f6:6c:fb:60:91:3c:
e7:55:76:3b:ac:9f:08:bc:09:4a:3f:94:84:4c:1c:d1:c3:95:
a0:60:2f:18:07:c5:fa:b2:d9:ca:4b:66:a2:36:60:66:64:2d:
88:92:f6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org