Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/baaf44eb22b77b73be1a064fdea3474565e8cfa3.roa
File: baaf44eb22b77b73be1a064fdea3474565e8cfa3.roa (raw, json)
Hash identifier: 0ATqdyPsb47czG8G3Nh3ogTvv0dxlgXAIrAbzSgwIY0=
Subject key identifier: 96:F8:87:A9:D3:07:11:4C:67:FC:BD:4E:3D:8F:DB:B0:4C:D2:3D:E7
Certificate issuer: /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial: 1FA7F9
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/baaf44eb22b77b73be1a064fdea3474565e8cfa3.roa
Signing time: Mon 08 May 2023 22:26:53 +0000
ROA not before: Sun 07 May 2023 22:26:52 +0000
ROA not after: Thu 08 May 2025 22:26:52 +0000
asID: 52468
IP address blocks: 181.78.80.0/21 maxlen: 24
181.78.88.0/22 maxlen: 24
181.78.92.0/22 maxlen: 24
181.78.98.0/23 maxlen: 24
181.78.100.0/22 maxlen: 24
181.78.104.0/21 maxlen: 24
181.78.112.0/21 maxlen: 24
181.78.98.0/23 maxlen: 24
181.78.100.0/22 maxlen: 24
181.78.104.0/21 maxlen: 24
181.78.112.0/20 maxlen: 24
181.79.220.0/24 maxlen: 24
181.119.113.0/24 maxlen: 24
181.119.114.0/23 maxlen: 24
181.119.122.0/24 maxlen: 24
181.119.124.0/23 maxlen: 24
181.119.126.0/24 maxlen: 24
181.78.64.0/20 maxlen: 24
181.78.64.0/19 maxlen: 24
181.119.64.0/24 maxlen: 24
181.78.0.0/19 maxlen: 24
181.119.66.0/23 maxlen: 24
181.119.68.0/23 maxlen: 24
181.119.70.0/24 maxlen: 24
181.119.82.0/23 maxlen: 24
181.119.84.0/22 maxlen: 24
181.119.88.0/21 maxlen: 24
181.119.96.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074617 (0x1fa7f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Validity
Not Before: May 7 22:26:52 2023 GMT
Not After : May 8 22:26:52 2025 GMT
Subject: CN=baaf44eb22b77b73be1a064fdea3474565e8cfa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:19:7d:a0:4f:b2:b2:e5:67:4b:d4:7f:ee:
24:c9:7b:c5:2c:cc:a9:ac:0d:dd:fd:c8:cc:86:fe:
8f:cf:33:09:23:87:10:ee:b4:70:1b:ac:dc:8a:11:
02:fc:89:bf:45:f9:f5:93:0e:f4:d1:a5:27:c8:0f:
ea:a7:e6:00:c7:ef:12:7c:41:27:5f:8f:b6:23:95:
25:fe:7c:aa:12:d1:a0:b9:76:39:72:d0:f0:15:57:
87:b1:82:7b:47:b9:ac:e4:19:f4:25:bb:3a:22:79:
f7:02:81:81:70:9c:0d:70:25:94:90:a9:35:ec:d0:
be:78:f1:80:d3:13:6b:54:08:52:90:1b:d7:0d:d5:
d5:00:bc:29:68:15:ba:ea:86:df:c1:68:b2:38:86:
b1:c7:d2:de:c0:e3:b1:83:fb:10:a7:70:fb:33:28:
8a:25:6c:8d:c2:ed:a9:b3:f7:78:f3:7b:ed:b4:aa:
5b:12:70:7c:c3:a2:3e:84:8e:0e:a1:92:63:fa:32:
fd:0a:03:4d:5e:42:90:d0:a9:55:b6:f0:a2:ee:e2:
2f:8f:53:db:59:5e:cb:b0:cb:b0:99:5d:f3:83:9d:
ab:5e:63:63:9e:f5:84:ee:f9:0c:41:f6:c4:d8:a8:
97:06:40:3e:ac:47:9b:26:1a:18:d4:61:44:be:1a:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F8:87:A9:D3:07:11:4C:67:FC:BD:4E:3D:8F:DB:B0:4C:D2:3D:E7
X509v3 Authority Key Identifier:
keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/baaf44eb22b77b73be1a064fdea3474565e8cfa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.78.0.0/19
181.78.64.0/19
181.78.98.0-181.78.127.255
181.79.220.0/24
181.119.64.0/24
181.119.66.0-181.119.70.255
181.119.82.0-181.119.111.255
181.119.113.0-181.119.115.255
181.119.122.0/24
181.119.124.0-181.119.126.255
Signature Algorithm: sha256WithRSAEncryption
73:b6:76:a7:14:fe:f2:7a:58:61:c9:66:e3:5b:6e:83:5b:c9:
b0:c5:2e:7a:0c:16:aa:65:b6:5c:5c:88:ce:b7:7a:27:ec:a5:
3d:7a:8a:9a:9d:b3:9a:4c:96:ed:72:90:73:6e:a6:e9:d1:cf:
89:01:89:fc:b0:7a:40:1b:c6:17:e8:d0:5e:c4:b9:6e:48:c5:
ff:0c:2d:95:3a:bd:34:a1:1b:ab:c5:f3:d0:ef:73:e5:e3:5e:
5d:56:12:75:5c:93:9d:fc:0b:84:0b:98:e6:e8:7f:41:dc:be:
3f:4d:cb:62:8b:ac:7e:f5:37:0d:92:96:90:b2:f5:95:75:35:
12:1b:a4:de:f7:7f:55:17:0f:41:90:ba:19:17:b1:40:d1:f4:
5e:73:b4:8c:49:71:b1:f8:53:c4:77:46:85:47:24:25:ec:38:
92:66:fe:7b:78:f5:71:6f:4f:57:ce:6f:c8:fa:0c:e7:ba:8a:
f5:08:93:71:67:4b:d7:89:11:e8:48:b2:5a:8c:ec:f5:61:5d:
3f:04:42:56:1b:ce:0e:f2:cf:f8:e1:1a:5f:12:16:95:59:b3:
61:0a:c4:37:52:84:97:40:34:fe:92:6b:f3:5a:bc:10:70:98:
22:72:0c:d1:54:9e:e5:a7:08:37:64:7e:9e:05:a5:90:26:b5:
a3:ac:1c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:09 2023 by rpki-client on console-fra.rpki-client.org