Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f6dac41d63f4a893309ba02a7c44b3ebba8e3c74.roa
File: f6dac41d63f4a893309ba02a7c44b3ebba8e3c74.roa (raw, json)
Hash identifier: FjfY6UBLo/Fq4SilAetgkEMtL3/IyphczI3DmFr1kKs=
Subject key identifier: 31:7F:15:99:8A:4B:F6:BC:88:2A:65:BA:E7:30:74:8E:D6:28:DA:75
Certificate issuer: /CN=f2cbbb792ff42fa718619507a50663798055643b
Certificate serial: 0D5F2C
Authority key identifier: AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f6dac41d63f4a893309ba02a7c44b3ebba8e3c74.roa
Signing time: Wed 24 Mar 2021 14:28:39 +0000
ROA not before: Wed 24 Mar 2021 14:28:39 +0000
ROA not after: Tue 24 Mar 2026 14:28:39 +0000
asID: 52308
IP address blocks: 181.114.192.0/24 maxlen: 24
181.174.156.0/24 maxlen: 24
181.174.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876332 (0xd5f2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cbbb792ff42fa718619507a50663798055643b
Validity
Not Before: Mar 24 14:28:39 2021 GMT
Not After : Mar 24 14:28:39 2026 GMT
Subject: CN=f6dac41d63f4a893309ba02a7c44b3ebba8e3c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9f:3a:43:a2:bc:64:a5:62:07:29:fa:ca:2a:
98:b4:c1:87:e9:9a:04:03:02:0c:d4:5a:98:9f:f7:
1e:26:ec:3c:d3:bd:4d:93:f9:ac:80:46:d4:d8:4c:
14:97:3e:bb:9e:28:b5:f5:b0:3d:fe:fd:e9:b7:af:
de:89:1e:d0:ee:34:41:cd:a8:8d:02:5b:8a:32:78:
f2:d2:1c:b3:27:ee:be:b4:85:9e:4e:52:50:9c:6f:
43:63:d7:58:4c:43:2d:4e:77:13:6f:8a:f7:5a:74:
cc:19:09:0b:bb:8d:e0:c8:aa:eb:19:81:35:ca:bd:
32:3e:96:94:1a:2f:52:63:3b:65:72:e0:5a:d2:e3:
e1:a6:cf:87:6b:2e:2e:f1:07:4b:9f:a6:4d:17:ff:
95:8e:08:5c:e0:62:5e:8d:72:c9:6e:55:ac:2a:a8:
30:b7:ad:55:5b:a3:6a:6e:b2:57:31:7c:be:ac:96:
b8:5e:46:66:0f:58:eb:ec:fc:79:05:cb:ea:2a:4f:
39:7d:9e:df:f1:43:01:29:32:4c:b8:38:9b:76:31:
f0:b2:a2:b6:e7:8f:d9:ed:a4:74:21:65:54:6f:7c:
15:76:b2:01:79:c9:7e:80:16:d6:f7:69:a8:62:a1:
b1:b6:20:ea:4b:c7:9a:db:ef:14:a9:1e:db:b8:c6:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7F:15:99:8A:4B:F6:BC:88:2A:65:BA:E7:30:74:8E:D6:28:DA:75
X509v3 Authority Key Identifier:
keyid:AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f6dac41d63f4a893309ba02a7c44b3ebba8e3c74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f2cbbb792ff42fa718619507a50663798055643b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.114.192.0/24
181.174.156.0/24
181.174.158.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ca:18:52:b0:6a:02:f6:b5:c0:17:6b:bd:e7:21:87:41:fb:
a9:d0:c7:fa:91:a8:0f:28:5d:e9:da:1c:53:c1:4e:3e:80:8a:
f1:66:72:6c:65:ad:14:06:53:76:a9:89:66:49:b9:64:1f:73:
bd:db:dc:7a:b4:54:72:74:48:8f:69:7b:78:b9:0f:49:c1:47:
fc:fb:f9:f0:5d:70:c9:fc:6c:fe:b2:1f:6b:b4:1a:98:3e:70:
0c:88:ba:78:e6:16:d5:d1:87:ee:9e:b7:f1:8a:bd:bf:b5:40:
3c:31:50:9f:d9:75:07:a7:bd:87:38:a4:ef:ca:34:fe:61:34:
69:70:e0:d1:49:dd:55:0e:3a:03:6f:0c:dc:c8:dc:e4:06:6b:
ad:39:ae:10:79:58:1e:84:37:15:88:71:3c:38:0b:68:fe:9d:
91:e6:1f:10:87:ed:06:75:29:cb:7a:28:a5:55:71:8d:2b:c2:
27:be:78:98:a2:fd:a8:1f:f3:76:33:60:0e:1e:72:75:03:4e:
2b:12:90:9d:25:2a:32:bf:00:a9:da:6d:be:62:26:c9:ef:26:
bf:48:78:58:1d:74:70:d0:2c:42:ef:a8:6e:45:1e:50:4f:42:
72:bf:61:96:61:79:55:2d:db:93:af:9e:ed:44:09:7f:72:aa:
83:71:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 16:03:50 2023 by rpki-client on console-fra.rpki-client.org