Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/0778e0428742abce545dc7b189e83ec8c3044e78.roa
File: 0778e0428742abce545dc7b189e83ec8c3044e78.roa (raw, json)
Hash identifier: HJ4mAoXOLx/HPBVviMPhBK2VxiL20foCVO50OP6jlew=
Subject key identifier: E6:2A:F7:D6:35:3E:CC:72:83:66:38:53:2E:12:21:ED:31:20:54:EE
Certificate issuer: /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial: 0DD558
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/0778e0428742abce545dc7b189e83ec8c3044e78.roa
Signing time: Wed 24 Mar 2021 14:30:47 +0000
ROA not before: Wed 24 Mar 2021 14:30:47 +0000
ROA not after: Tue 24 Mar 2026 14:30:47 +0000
asID: 52347
IP address blocks: 186.177.228.0/22 maxlen: 22
186.177.232.0/21 maxlen: 21
186.177.240.0/24 maxlen: 24
190.93.40.0/23 maxlen: 24
190.93.43.0/24 maxlen: 24
190.111.56.0/24 maxlen: 24
190.111.60.0/24 maxlen: 24
190.111.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906584 (0xdd558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
Validity
Not Before: Mar 24 14:30:47 2021 GMT
Not After : Mar 24 14:30:47 2026 GMT
Subject: CN=0778e0428742abce545dc7b189e83ec8c3044e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:c0:0c:e6:4b:47:79:0d:03:50:51:f3:d2:
54:e0:c2:b0:e2:c0:5d:e8:0c:55:cb:dd:73:4c:41:
8f:a8:bb:ab:ca:5d:6a:da:a2:5a:59:27:59:25:4d:
69:20:ca:02:df:03:82:67:81:93:35:7a:0e:56:40:
b9:06:d4:a0:ea:e7:99:d1:5d:55:b3:db:8f:d0:d3:
f3:02:ba:8c:aa:e7:ac:fd:48:f4:7e:33:3d:39:ff:
ca:cd:20:c0:b8:74:cb:b2:0d:31:58:82:11:da:31:
46:29:e8:e8:d7:58:67:5a:f1:a3:35:ad:f5:d7:dd:
51:d0:24:a2:2f:1d:38:e9:16:2a:3c:5d:bf:17:6f:
ba:b4:33:10:7d:5d:10:04:93:b2:7c:d7:7e:74:17:
35:b9:16:f8:1d:20:91:d3:38:79:90:01:73:bb:2a:
e5:00:2e:14:bb:57:94:9b:ed:a8:ce:8b:8e:b3:b2:
fd:4a:9c:63:ca:5f:83:f5:0c:90:3c:a8:d7:bd:13:
ef:83:78:e4:4b:ff:c2:79:92:e0:d1:6b:70:38:9c:
34:f7:12:8f:4c:67:64:8d:d5:ef:32:9c:bd:2e:63:
58:40:28:11:1c:96:17:b5:7d:74:f3:ae:1f:0f:3d:
35:f9:48:c7:b4:49:44:3f:1e:34:5e:1c:8b:56:63:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2A:F7:D6:35:3E:CC:72:83:66:38:53:2E:12:21:ED:31:20:54:EE
X509v3 Authority Key Identifier:
keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/0778e0428742abce545dc7b189e83ec8c3044e78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.177.228.0-186.177.240.255
190.93.40.0/23
190.93.43.0/24
190.111.56.0/24
190.111.60.0/24
190.111.63.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a5:b5:af:91:a9:9d:9c:6c:7f:33:4d:7e:4f:27:b0:f5:30:
73:77:9c:6c:92:78:64:5e:da:54:39:76:9c:b1:a5:4c:f2:bb:
3e:2f:dc:b6:8b:47:4a:5b:0b:08:ad:dd:26:7a:0a:77:88:00:
4a:ef:2e:03:0c:49:44:02:c2:fd:61:60:69:4c:59:19:08:85:
8b:30:0a:c0:48:0d:5b:7a:14:68:26:12:66:d6:c6:1b:d6:f2:
0d:e0:8b:7e:5b:a3:ac:56:3d:48:38:b8:cc:86:94:58:87:f2:
23:db:f6:17:a9:7b:60:08:5b:12:99:cb:45:62:86:73:0e:27:
06:09:ee:79:ce:13:b6:7f:a7:fa:24:ec:94:e2:1d:bd:97:81:
b8:45:bf:5e:a2:ce:7a:75:5f:ba:b5:37:0f:f2:f2:bf:91:4c:
36:ed:f2:69:7d:77:b2:ad:79:23:a5:31:3a:f8:16:af:88:37:
07:e0:8a:2e:e2:0b:7f:97:63:1b:a6:a1:2c:5d:87:b3:56:aa:
9e:a8:5e:40:11:6c:46:b1:53:7c:2a:c3:21:33:5c:51:16:25:
4b:25:56:a2:94:e7:c2:5e:a8:8c:1a:7a:0c:99:59:94:85:1e:
26:3e:66:3e:1f:82:1b:ea:e0:13:e1:19:ef:39:2c:6c:07:99:
2c:00:2a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org