Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9d91a7bcff6e32917a34690d2a21124b97a19354.roa
File: 9d91a7bcff6e32917a34690d2a21124b97a19354.roa (raw, json)
Hash identifier: GwK9pcj4fkuNDKmOHWNDxaFu1o/93DcxJmUfOaAsNsY=
Subject key identifier: 58:93:7A:D6:18:8E:0B:E0:9D:76:40:BC:C7:41:0A:31:AA:46:59:D2
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 264F7B
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9d91a7bcff6e32917a34690d2a21124b97a19354.roa
Signing time: Sun 16 Apr 2023 21:11:56 +0000
ROA not before: Sat 15 Apr 2023 21:11:49 +0000
ROA not after: Wed 16 Apr 2025 21:11:49 +0000
asID: 265686
IP address blocks: 181.105.233.0/24 maxlen: 24
181.105.234.0/23 maxlen: 24
181.94.252.0/22 maxlen: 24
190.228.177.0/24 maxlen: 24
181.105.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2510715 (0x264f7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Apr 15 21:11:49 2023 GMT
Not After : Apr 16 21:11:49 2025 GMT
Subject: CN=9d91a7bcff6e32917a34690d2a21124b97a19354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:ae:f2:8a:d3:97:c1:02:40:b3:8c:a2:f3:
be:14:77:31:42:bc:f4:35:b6:80:9a:b6:44:26:7a:
9f:46:24:ff:48:52:bd:2a:da:e3:76:bd:59:da:d0:
f5:c5:0e:a4:f1:92:fb:d9:1c:07:3d:81:49:c9:ef:
42:c3:d6:cf:7c:9a:1c:07:0b:eb:6d:3d:04:e8:64:
e3:11:3d:fb:29:c8:54:f5:c4:fa:53:e2:cc:bc:3b:
aa:4a:8d:44:77:5e:95:c6:82:64:fb:01:48:37:52:
50:73:06:a4:30:20:87:bc:22:41:65:e5:eb:f1:d6:
87:19:e0:f8:42:09:b5:7d:a1:2e:ea:46:bb:c1:09:
6b:bb:38:db:5a:3a:07:5a:8c:ce:70:2c:a7:e3:5a:
dd:ce:83:c7:cf:4b:0c:bc:28:9f:de:5c:41:c7:31:
8d:7f:08:25:94:04:76:e6:62:ea:fe:33:b3:15:9b:
c0:51:24:b6:96:12:07:fd:df:02:80:02:7f:6c:d4:
33:1c:8b:e7:11:b1:13:55:9a:f7:aa:15:57:9d:1d:
47:a0:35:69:1c:24:4f:79:24:f5:1a:a5:bd:03:b5:
ea:30:4f:cf:5b:d4:8a:cd:8b:d4:02:20:79:7e:14:
69:dc:20:73:7a:96:91:3d:9b:9a:a7:8a:67:58:be:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:93:7A:D6:18:8E:0B:E0:9D:76:40:BC:C7:41:0A:31:AA:46:59:D2
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/9d91a7bcff6e32917a34690d2a21124b97a19354.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.94.252.0/22
181.105.221.0/24
181.105.233.0-181.105.235.255
190.228.177.0/24
Signature Algorithm: sha256WithRSAEncryption
41:25:d4:fa:93:e6:2d:1f:ff:7f:90:09:ff:e4:2d:da:3f:f6:
3f:2f:54:36:b9:93:a9:76:53:4f:b8:e4:10:5b:e0:04:7b:17:
e3:c6:03:26:d8:0c:46:79:f9:f8:c0:47:97:a4:54:44:25:9b:
a4:d9:d5:3b:25:70:49:cd:1f:91:57:2c:d4:0d:61:99:9b:b6:
b3:d0:6a:af:47:50:73:c3:31:ea:9d:23:e6:fd:b2:63:e2:7e:
f0:97:ac:92:7f:44:2b:27:03:a5:ba:1f:99:f1:5c:c4:24:78:
bd:a6:1d:16:7a:c3:9c:ed:e4:f1:2c:df:66:32:fc:04:5d:09:
73:4c:df:d7:90:57:11:59:56:61:47:b7:f3:a7:1e:23:b5:45:
20:0f:b9:a3:c8:c5:ca:0a:5d:00:27:1c:93:db:bc:2d:fe:16:
9e:72:ed:14:a6:b4:b8:49:46:0d:be:58:7d:0a:8e:23:0c:cb:
f0:73:67:36:38:31:b2:77:bd:4e:ff:11:0f:47:39:7b:4f:01:
c4:3c:33:4f:16:86:84:81:b6:8c:1b:60:bc:de:56:41:13:1b:
55:50:55:b3:00:21:a3:ca:48:f8:0d:5c:16:14:37:ab:14:9e:
f2:e8:84:d9:c4:ef:c4:27:ea:fb:f0:dd:21:53:33:a2:8c:97:
1a:2c:be:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org