Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/148976f75678234856983560d8641e8db3f8973a.roa
File: 148976f75678234856983560d8641e8db3f8973a.roa (raw, json)
Hash identifier: GkEiBTv2GY/UfguJaGlSeumD/c8iJdPC4WeNlWHEwRA=
Subject key identifier: 86:8E:28:50:0D:9D:47:42:92:F2:14:41:F8:B3:38:A1:41:04:1C:A0
Certificate issuer: /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial: 171F5B
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/148976f75678234856983560d8641e8db3f8973a.roa
Signing time: Fri 10 Jun 2022 02:57:41 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Fri 24 Mar 2023 03:00:00 +0000
asID: 18747
IP address blocks: 181.78.128.0/18 maxlen: 18
181.78.128.0/19 maxlen: 19
181.78.160.0/21 maxlen: 21
181.78.192.0/18 maxlen: 18
181.78.192.0/19 maxlen: 19
181.78.224.0/21 maxlen: 21
181.78.64.0/18 maxlen: 18
181.78.64.0/19 maxlen: 19
181.78.96.0/21 maxlen: 21
181.79.64.0/21 maxlen: 21
181.79.72.0/23 maxlen: 23
181.79.220.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1515355 (0x171f5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2023 GMT
Subject: CN=148976f75678234856983560d8641e8db3f8973a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1e:db:73:9b:6d:c9:dd:b4:1e:60:88:08:2c:
aa:b3:36:e9:e1:b9:78:a9:ab:78:1c:72:e6:2a:c1:
7e:90:48:63:cc:63:94:10:57:b8:8c:b7:79:cb:c4:
c2:93:70:79:1f:b9:12:81:43:dc:45:45:8f:48:6e:
de:44:42:db:9c:06:fd:0e:cb:89:7e:b4:86:77:e5:
9d:fa:ed:09:df:b9:84:a6:62:5a:82:da:55:75:91:
96:77:82:67:f3:aa:9e:b4:d0:ed:06:d7:de:27:97:
97:cb:64:d1:36:4c:11:81:74:8f:13:50:c4:1f:5f:
49:50:dc:1d:ab:c3:a8:30:46:bf:e9:1b:97:fa:d4:
8b:6c:05:9b:f3:d6:a0:39:f0:5f:7c:64:00:87:cf:
48:88:0a:44:4e:43:9b:f9:97:e3:b4:9b:19:b1:39:
dc:51:67:db:e1:46:82:b7:33:49:db:47:76:81:d5:
a8:e7:f6:a4:20:75:e8:06:fe:2e:76:b0:c4:90:94:
e3:e3:2e:c2:a3:e9:1d:71:37:cb:ef:28:7b:ab:dd:
c0:32:4f:a1:bb:48:0f:ed:43:d1:ba:44:a4:ae:39:
e5:93:85:d3:7f:14:93:d0:b2:83:a5:85:6d:95:69:
ee:0b:41:2c:f0:0e:be:ea:16:ff:c8:fa:08:68:44:
5c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8E:28:50:0D:9D:47:42:92:F2:14:41:F8:B3:38:A1:41:04:1C:A0
X509v3 Authority Key Identifier:
keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/148976f75678234856983560d8641e8db3f8973a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.78.64.0-181.78.255.255
181.79.64.0-181.79.73.255
181.79.220.0/22
Signature Algorithm: sha256WithRSAEncryption
49:62:9b:65:46:04:1b:8d:8f:a7:3f:23:d4:f7:f4:da:80:bf:
3d:8a:74:54:31:f5:cb:f6:61:10:86:17:52:fa:16:31:f0:3c:
33:b2:dd:d1:bf:26:12:5b:74:7c:db:9e:e0:d9:9e:42:a9:8d:
51:b6:92:20:0c:e7:c8:78:52:71:3b:e0:04:1c:fc:60:8a:9b:
27:b0:a8:81:23:a6:2a:09:97:6a:a9:eb:2e:11:87:30:af:96:
e0:01:96:f7:f6:0e:16:6f:8a:4b:4b:a4:4a:a2:c8:f3:c3:d3:
8f:08:b7:e1:a8:aa:e5:8a:83:91:1a:94:a2:b7:cc:b6:bc:83:
06:43:31:b0:2b:85:4a:80:19:03:52:44:aa:8d:58:d8:fa:f6:
b8:9c:8e:2a:04:f3:08:aa:69:fa:4b:dc:b3:76:11:53:0e:01:
89:4d:6e:d2:09:7e:0d:cf:c1:4c:ca:bc:ba:1b:69:87:d8:33:
77:2c:c4:a3:d3:1b:d2:31:09:94:18:2a:97:af:95:67:93:e1:
72:c3:6e:67:06:e2:b2:2f:ad:5b:7d:83:a0:8d:b4:c4:ee:93:
ab:b0:34:7e:54:62:80:00:3f:4b:a8:6b:d0:9f:7f:90:09:cb:
b3:6b:46:0e:5c:93:fb:89:da:bb:ea:93:d7:02:d3:12:6d:6a:
3c:5a:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org