Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/57eec1fdada9f1ee2737ee92a283c67501951270.roa
File: 57eec1fdada9f1ee2737ee92a283c67501951270.roa (raw, json)
Hash identifier: ie6bZA/1dP6Vub3IEDuDXkMfkXgj0kWxs0dbUtGx5Eo=
Subject key identifier: 5B:48:DE:F7:9A:7B:1D:6B:D0:52:F9:3D:63:0A:59:E7:E8:41:98:D0
Certificate issuer: /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial: 146DB1
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/57eec1fdada9f1ee2737ee92a283c67501951270.roa
Signing time: Mon 28 Feb 2022 22:02:47 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 52468
IP address blocks: 181.119.87.0/24 maxlen: 24
181.78.0.0/19 maxlen: 24
181.119.64.0/24 maxlen: 24
181.119.66.0/24 maxlen: 24
181.119.67.0/24 maxlen: 24
181.119.68.0/24 maxlen: 24
181.119.69.0/24 maxlen: 24
181.119.70.0/24 maxlen: 24
181.119.82.0/24 maxlen: 24
181.119.83.0/24 maxlen: 24
181.119.84.0/24 maxlen: 24
181.119.85.0/24 maxlen: 24
181.119.86.0/24 maxlen: 24
181.119.88.0/24 maxlen: 24
181.119.89.0/24 maxlen: 24
181.119.90.0/24 maxlen: 24
181.119.91.0/24 maxlen: 24
181.119.92.0/24 maxlen: 24
181.119.93.0/24 maxlen: 24
181.119.94.0/24 maxlen: 24
181.119.95.0/24 maxlen: 24
181.119.96.0/24 maxlen: 24
181.119.97.0/24 maxlen: 24
181.119.98.0/24 maxlen: 24
181.119.99.0/24 maxlen: 24
181.119.100.0/24 maxlen: 24
181.119.101.0/24 maxlen: 24
181.119.102.0/24 maxlen: 24
181.119.103.0/24 maxlen: 24
181.119.104.0/24 maxlen: 24
181.119.105.0/24 maxlen: 24
181.119.106.0/24 maxlen: 24
181.119.107.0/24 maxlen: 24
181.119.108.0/24 maxlen: 24
181.119.109.0/24 maxlen: 24
181.119.110.0/24 maxlen: 24
181.119.111.0/24 maxlen: 24
181.119.113.0/24 maxlen: 24
181.119.114.0/24 maxlen: 24
181.119.115.0/24 maxlen: 24
181.119.122.0/24 maxlen: 24
181.119.124.0/24 maxlen: 24
181.119.125.0/24 maxlen: 24
181.119.126.0/24 maxlen: 24
181.78.120.0/24 maxlen: 24
181.78.121.0/24 maxlen: 24
181.78.122.0/24 maxlen: 24
181.78.123.0/24 maxlen: 24
181.78.124.0/24 maxlen: 24
181.78.125.0/24 maxlen: 24
181.78.126.0/24 maxlen: 24
181.78.127.0/24 maxlen: 24
181.78.64.0/20 maxlen: 20
181.78.64.0/24 maxlen: 24
181.78.65.0/24 maxlen: 24
181.78.66.0/24 maxlen: 24
181.78.67.0/24 maxlen: 24
181.78.68.0/24 maxlen: 24
181.78.69.0/24 maxlen: 24
181.78.70.0/24 maxlen: 24
181.78.71.0/24 maxlen: 24
181.78.72.0/24 maxlen: 24
181.78.73.0/24 maxlen: 24
181.78.74.0/24 maxlen: 24
181.78.75.0/24 maxlen: 24
181.78.76.0/24 maxlen: 24
181.78.77.0/24 maxlen: 24
181.78.78.0/24 maxlen: 24
181.78.79.0/24 maxlen: 24
181.78.88.0/22 maxlen: 22
181.78.88.0/24 maxlen: 24
181.78.89.0/24 maxlen: 24
181.78.90.0/24 maxlen: 24
181.78.91.0/24 maxlen: 24
181.78.92.0/23 maxlen: 23
181.78.92.0/24 maxlen: 24
181.78.93.0/24 maxlen: 24
181.78.94.0/23 maxlen: 23
181.78.94.0/24 maxlen: 24
181.78.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1338801 (0x146db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=57eec1fdada9f1ee2737ee92a283c67501951270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f5:1e:af:8d:df:67:4d:66:62:78:69:c9:da:
6d:41:13:cb:55:2b:2f:23:75:84:ab:96:09:60:b4:
57:ab:56:b3:80:05:6a:6d:a9:05:5c:bb:76:24:80:
72:18:9a:ba:a2:17:be:9a:11:0b:53:c4:01:c8:e5:
f5:4e:2c:e3:a2:06:75:00:b6:28:d6:fa:c2:70:15:
0f:58:36:5b:a6:cf:39:b5:a9:30:5b:c2:73:02:30:
be:69:8d:94:1e:4f:48:22:4a:b8:a1:d1:7f:72:a7:
91:9a:bf:0b:4a:99:a4:1a:9b:ec:5b:ad:3b:b9:92:
20:92:14:ae:99:06:5a:9c:8a:c9:9e:43:a0:a1:b2:
c0:44:51:28:47:08:f3:8d:74:7d:91:92:96:18:30:
22:d1:38:5c:4d:13:2e:8d:eb:87:a5:80:10:97:42:
c3:c4:a7:f5:eb:08:d1:d1:46:75:8e:6b:2b:2c:c2:
22:d9:83:80:98:98:95:2b:ff:13:be:64:b5:35:a4:
d1:41:48:16:01:c2:b6:d9:29:cb:10:55:03:d0:2e:
10:42:9f:5e:a5:88:c0:65:d3:52:51:46:83:1d:30:
d2:b5:1d:bc:d0:d5:41:37:57:dc:15:55:f2:c2:41:
fb:6d:d3:93:20:47:49:a7:f8:dc:ee:f5:91:07:77:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:48:DE:F7:9A:7B:1D:6B:D0:52:F9:3D:63:0A:59:E7:E8:41:98:D0
X509v3 Authority Key Identifier:
keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/57eec1fdada9f1ee2737ee92a283c67501951270.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.78.0.0/19
181.78.64.0/20
181.78.88.0/21
181.78.120.0/21
181.119.64.0/24
181.119.66.0-181.119.70.255
181.119.82.0-181.119.111.255
181.119.113.0-181.119.115.255
181.119.122.0/24
181.119.124.0-181.119.126.255
Signature Algorithm: sha256WithRSAEncryption
61:e3:53:90:b0:66:3d:35:b3:a8:b3:db:6a:82:5e:f1:a8:58:
db:72:02:a8:69:9d:52:80:cc:63:74:44:80:ae:15:2e:38:a7:
02:4b:fc:88:f7:84:15:6d:1d:92:cb:9a:d1:7a:2d:e6:b2:f1:
48:91:01:70:21:11:24:a5:c7:1f:99:78:52:c6:23:65:f2:49:
7d:91:ba:0f:95:b9:a5:ae:a2:ef:45:af:76:a7:c9:ef:3c:0b:
44:ce:71:c0:ee:41:9e:95:54:0c:d1:c6:30:f7:05:ab:9d:de:
b6:b1:e6:90:41:26:36:5c:9f:f0:99:01:83:65:ac:c2:a0:64:
2a:db:9e:5e:95:07:ca:ac:a4:1c:38:d6:7e:8c:9b:be:51:5e:
6b:4e:59:1c:68:d6:25:ed:1b:e4:e5:d8:48:6d:fb:c9:d1:0c:
1e:21:4f:a4:88:71:e0:63:1d:b9:58:69:3b:b0:4e:8b:5c:da:
ff:58:4e:27:ad:18:00:8a:0d:95:82:3c:b5:c5:18:e5:f8:55:
01:93:ff:3c:c8:b9:54:58:a9:a0:33:91:25:e5:07:17:6d:0a:
53:5e:4e:f2:fc:5f:55:44:f3:d9:16:69:da:41:17:5b:22:d0:
c8:27:46:50:65:75:65:92:fa:bc:0e:db:62:a3:01:8d:72:91:
2d:e4:a2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org