Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/b11e20735d74c1a68f674e648f480544d6470832.roa
File: b11e20735d74c1a68f674e648f480544d6470832.roa (raw, json)
Hash identifier: RtXNMD3Q/7Bl6EHYgSAzNYJSkrnjCCDP5OXuXOicnws=
Subject key identifier: 42:30:A1:9B:14:9B:FD:2A:1B:AC:17:D1:FF:27:E2:27:95:21:6C:FB
Certificate issuer: /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial: 1B59B8
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/b11e20735d74c1a68f674e648f480544d6470832.roa
Signing time: Mon 21 Nov 2022 19:04:52 +0000
ROA not before: Sat 20 Mar 2021 14:30:56 +0000
ROA not after: Tue 24 Mar 2026 14:30:56 +0000
asID: 18747
IP address blocks: 181.78.0.0/15 maxlen: 15
181.79.0.0/19 maxlen: 24
181.79.0.0/24 maxlen: 24
181.79.1.0/24 maxlen: 24
181.79.2.0/24 maxlen: 24
181.79.3.0/24 maxlen: 24
181.79.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792440 (0x1b59b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Validity
Not Before: Mar 20 14:30:56 2021 GMT
Not After : Mar 24 14:30:56 2026 GMT
Subject: CN=b11e20735d74c1a68f674e648f480544d6470832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:29:0b:fd:aa:ef:11:29:58:96:94:ff:b1:
e4:4d:40:0b:73:e4:54:92:66:59:ee:be:7e:e6:50:
11:69:ef:e5:02:0f:1f:30:13:5a:b6:63:cf:4b:60:
1a:71:60:cc:81:c8:de:22:42:87:f6:e8:66:b8:9f:
f5:88:d6:7c:3a:0b:50:00:76:d6:32:bb:ed:20:de:
b8:a8:ca:cb:95:fe:02:6b:66:da:f8:91:66:49:c4:
fd:bd:7f:6f:c6:19:9a:4b:ea:4c:38:bd:84:0a:84:
60:6f:54:83:5b:63:43:d0:89:fe:f5:84:a2:b2:a3:
d6:38:3b:58:c9:06:72:d2:fe:e3:10:31:99:06:86:
74:cd:b7:fe:fb:e1:a8:84:65:36:ce:c2:08:5f:99:
26:7f:1f:28:52:d4:b8:7f:1a:c4:84:64:0e:e0:f0:
65:47:f0:ee:92:36:43:0f:7d:8d:ef:0d:f3:10:e1:
89:bb:92:ca:c9:32:01:61:ae:9b:b3:bb:83:cd:87:
c9:81:e7:11:55:b2:1f:8b:7a:18:a9:d3:9d:2d:5a:
89:8b:c2:6c:39:fc:1f:c8:ae:22:33:61:a1:28:7a:
3f:67:c3:b0:f5:83:b8:b0:09:73:0e:55:99:ba:0a:
cd:fa:cc:93:52:10:42:00:83:5c:18:6e:d8:86:17:
0b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:30:A1:9B:14:9B:FD:2A:1B:AC:17:D1:FF:27:E2:27:95:21:6C:FB
X509v3 Authority Key Identifier:
keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/b11e20735d74c1a68f674e648f480544d6470832.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.78.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3f:eb:07:c7:e6:d6:3d:68:2a:98:cf:2d:bf:82:c8:8b:24:0f:
57:4f:2c:3d:d7:75:2b:08:0f:e0:1a:8a:b8:e1:d7:5d:5f:d1:
0c:ee:1f:98:c1:eb:5a:ef:c1:d3:81:b0:df:9d:5e:12:9d:9e:
7f:a5:57:81:09:6d:4b:ab:33:61:ae:9f:71:81:a2:88:ae:2d:
be:2c:7d:9c:95:92:9a:3a:d7:bf:75:43:10:80:07:92:ae:2a:
3e:a7:a1:e5:4e:3a:b1:a1:d7:05:ef:96:af:aa:0d:07:53:73:
12:b7:08:8c:26:b3:cd:44:92:e5:e0:7a:13:f2:63:2c:ac:35:
2b:1a:70:0a:5e:55:ac:59:d4:f8:67:7a:b1:6d:00:92:91:cf:
98:ab:63:bd:12:59:d5:61:e9:28:e6:fa:77:3e:40:4a:c2:8a:
e6:f9:a7:19:30:0c:26:5c:13:3f:f7:ce:0e:9c:e8:9a:d1:3c:
61:02:d0:df:dd:6e:28:c5:6d:f3:21:28:f2:2f:5d:33:52:30:
6d:89:c3:9b:bd:35:7d:b7:69:5a:67:43:92:75:5f:f1:4e:a9:
6a:72:07:42:60:ff:44:7d:cc:e8:e4:82:0e:74:85:a8:4a:47:
04:ce:1d:91:5a:cc:cf:2f:c8:8b:56:f7:c9:ec:97:ae:1b:e7:
ea:f4:d7:58
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDG1m4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMy
Y2ZjMzIxMjQ1NTQ2NGNkOGY4NTZhMzQ4YjJkNWNhZjczZGNkNzMwHhcNMjEwMzIw
MTQzMDU2WhcNMjYwMzI0MTQzMDU2WjAzMTEwLwYDVQQDEyhiMTFlMjA3MzVkNzRj
MWE2OGY2NzRlNjQ4ZjQ4MDU0NGQ2NDcwODMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo34pC/2q7xEpWJaU/7HkTUALc+RUkmZZ7r5+5lARae/lAg8f
MBNatmPPS2AacWDMgcjeIkKH9uhmuJ/1iNZ8OgtQAHbWMrvtIN64qMrLlf4Ca2ba
+JFmScT9vX9vxhmaS+pMOL2ECoRgb1SDW2ND0In+9YSisqPWODtYyQZy0v7jEDGZ
BoZ0zbf+++GohGU2zsIIX5kmfx8oUtS4fxrEhGQO4PBlR/DukjZDD32N7w3zEOGJ
u5LKyTIBYa6bs7uDzYfJgecRVbIfi3oYqdOdLVqJi8JsOfwfyK4iM2GhKHo/Z8Ow
9YO4sAlzDlWZugrN+syTUhBCAINcGG7YhhcLwwIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFEIwoZsUm/0qG6wX0f8n4ieVIWz7MB8GA1UdIwQYMBaAFO2XYCMHZoB2YyKf
bUEoBQfvncIpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzJjZmMz
MjEyNDU1NDY0Y2Q4Zjg1NmEzNDhiMmQ1Y2FmNzNkY2Q3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGVmNTY4NmQtZmM2Ni00YzhlLWJlNGYtZGE2OWZi
YzJiZmI1L2IxMWUyMDczNWQ3NGMxYTY4ZjY3NGU2NDhmNDgwNTQ0ZDY0NzA4MzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wZWY1Njg2ZC1mYzY2LTRjOGUtYmU0Zi1kYTY5
ZmJjMmJmYjUvYzJjZmMzMjEyNDU1NDY0Y2Q4Zjg1NmEzNDhiMmQ1Y2FmNzNkY2Q3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAbVOMA0GCSqGSIb3DQEBCwUAA4IBAQA/6wfH5tY9aCqYzy2/
gsiLJA9XTyw913UrCA/gGoq44dddX9EM7h+Yweta78HTgbDfnV4SnZ5/pVeBCW1L
qzNhrp9xgaKIri2+LH2clZKaOte/dUMQgAeSrio+p6HlTjqxodcF75avqg0HU3MS
twiMJrPNRJLl4HoT8mMsrDUrGnAKXlWsWdT4Z3qxbQCSkc+Yq2O9ElnVYeko5vp3
PkBKworm+acZMAwmXBM/984OnOia0TxhAtDf3W4oxW3zISjyL10zUjBticObvTV9
t2laZ0OSdV/xTqlqcgdCYP9Efczo5IIOdIWoSkcEzh2RWszPL8iLVvfJ7JeuG+fq
9NdY
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:09 2023 by rpki-client on console-fra.rpki-client.org