Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/40287f50527626de23911c9c8f4c1536e0893246.roa
File: 40287f50527626de23911c9c8f4c1536e0893246.roa (raw, json)
Hash identifier: HSbCX4vvHGyMzP8ex6V9WXwbHGu15I6RgGG3iRQUJOU=
Subject key identifier: A3:D9:55:E9:59:77:87:39:00:76:58:EC:72:68:92:80:14:91:FB:4A
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 117554
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/40287f50527626de23911c9c8f4c1536e0893246.roa
Signing time: Thu 15 Apr 2021 23:20:43 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 264715
IP address blocks: 181.81.248.0/22 maxlen: 22
186.153.128.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1144148 (0x117554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=40287f50527626de23911c9c8f4c1536e0893246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:c4:b8:f4:20:71:d2:ea:cc:b1:f9:67:00:
e4:8c:86:fa:ff:5e:57:15:77:c3:1f:2d:80:79:f8:
7d:0d:64:7f:6b:9d:d1:20:36:bd:85:a8:0a:cd:c2:
0f:1d:15:81:4b:23:79:46:d1:e3:7a:55:a4:ac:84:
3d:b7:8e:b9:d1:4b:68:e7:6f:9e:42:9b:cb:ed:bd:
40:44:b0:c1:d9:63:0a:0d:b4:ef:9a:4a:be:0a:9a:
bc:43:a4:45:27:08:91:b6:dc:83:86:f8:ba:7d:72:
9a:95:1e:ad:b4:5b:6b:ff:5f:02:68:ae:18:55:f3:
a8:cc:b8:4a:b7:44:51:eb:66:51:2c:49:14:11:08:
51:4d:60:b0:df:13:e2:20:af:e0:6f:96:55:3b:82:
98:79:bf:29:20:09:ed:f7:6f:44:e9:f2:ec:e5:db:
91:46:6c:09:4f:d6:0d:03:1f:36:11:2e:e2:68:11:
52:db:c2:6d:ed:b9:b2:c6:5c:e8:b1:33:79:43:d5:
97:81:39:42:5d:ad:85:3b:38:d4:03:7f:49:fd:c8:
e1:f6:fe:6b:25:5a:03:db:ec:3a:55:c3:61:d2:2c:
ca:c6:f3:27:ab:31:6c:3d:be:8b:d5:97:54:87:27:
8b:23:86:27:7f:ed:e7:bb:a0:d8:fa:b8:84:00:ca:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D9:55:E9:59:77:87:39:00:76:58:EC:72:68:92:80:14:91:FB:4A
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/40287f50527626de23911c9c8f4c1536e0893246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.81.248.0/22
186.153.128.0/22
Signature Algorithm: sha256WithRSAEncryption
59:bb:27:0d:f4:02:a4:ef:47:18:72:98:76:d1:5b:b1:bf:c1:
97:ba:90:12:6b:fa:1b:a5:c5:58:69:7e:57:58:7e:95:9d:d7:
2d:9b:f3:aa:0c:e1:23:1f:2a:b5:69:60:fb:7f:e7:ff:53:f9:
4f:33:8f:85:0d:27:f1:91:d3:c4:33:a9:3e:ff:5b:9d:32:08:
ec:ed:23:07:60:4a:e0:09:35:44:90:88:fa:6f:b5:68:30:11:
5d:4f:93:fd:af:03:77:80:57:6c:26:80:78:e3:c7:40:37:06:
0c:01:71:ca:35:67:ed:ff:52:6d:85:52:c5:c1:89:bd:21:c2:
cf:7c:2d:1f:69:d6:55:48:3c:d1:71:f2:ff:5d:c1:dc:e7:c7:
b9:59:ca:4c:39:bf:f9:e2:5e:55:25:68:a1:a0:02:e4:40:54:
3a:bd:83:2f:09:73:6c:1d:f8:93:c1:ff:51:64:af:a8:db:db:
6c:1f:05:a3:65:66:45:aa:86:5d:c6:d5:f9:32:18:3e:aa:0b:
29:f8:b7:10:87:de:df:22:8e:f0:3f:e2:63:37:4d:81:6a:ec:
e0:5f:a8:59:86:e1:63:71:f8:31:f9:c8:dc:a8:58:e3:ca:ab:
5e:b7:f7:28:6d:b1:5c:74:c8:af:9b:e6:c0:87:df:01:25:80:
75:e7:55:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org