Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a761e542528b73f8ab5911aa23ab1adf403fc1fe.roa
File: a761e542528b73f8ab5911aa23ab1adf403fc1fe.roa (raw, json)
Hash identifier: ZxbxzLwxdhowmkoB+PSWeL5QM/uD80JmKY5aP+NwQWk=
Subject key identifier: DC:8E:5D:A4:CA:0A:09:6B:86:12:26:84:92:4E:CA:0F:B7:E3:CD:89
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 11D7A2
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a761e542528b73f8ab5911aa23ab1adf403fc1fe.roa
Signing time: Fri 16 Apr 2021 01:50:37 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 264767
IP address blocks: 181.13.151.0/24 maxlen: 24
181.13.153.0/24 maxlen: 24
181.13.185.0/24 maxlen: 24
181.13.186.0/24 maxlen: 24
181.13.239.0/24 maxlen: 24
186.125.160.0/24 maxlen: 24
190.136.18.0/24 maxlen: 24
190.228.100.0/24 maxlen: 24
190.228.126.0/24 maxlen: 24
190.228.132.0/24 maxlen: 24
190.228.73.0/24 maxlen: 24
190.228.74.0/24 maxlen: 24
190.228.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1169314 (0x11d7a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=a761e542528b73f8ab5911aa23ab1adf403fc1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:e9:df:a4:3b:c9:aa:f8:b8:d6:ef:6d:fb:
73:44:70:88:6a:0e:4c:98:2d:44:6b:78:4a:46:f3:
7e:e3:db:d7:90:49:86:70:0d:8d:b2:68:81:2d:9d:
1e:af:3a:b9:fd:29:0b:ab:43:03:a5:a5:7f:01:45:
36:ea:27:93:1d:b1:12:e4:94:05:f1:7d:18:4f:4d:
9c:a6:a1:29:6f:73:9d:ee:f6:fc:5f:f3:92:4c:dc:
06:df:84:b2:07:0b:45:3d:6b:0f:b9:bf:ab:6e:da:
05:4e:fa:d2:f6:0f:f0:1c:19:19:ac:7b:6a:84:1e:
9a:fa:6d:82:4f:05:19:be:71:78:59:a9:00:01:8f:
9b:f0:e0:0e:cf:7b:c0:ad:c2:97:7d:ce:cc:25:1a:
ce:89:e8:d7:24:ca:0b:82:00:a2:68:77:10:09:42:
3e:61:bb:3f:e4:6f:2a:60:26:d9:a7:e1:5c:f1:48:
65:7b:a9:00:2e:f3:eb:f6:0f:65:82:36:69:a8:72:
5c:c0:0e:62:ea:18:5b:d9:fd:88:05:3c:91:b2:6c:
47:1c:0c:e6:38:0d:ef:65:5f:e8:08:9b:a3:54:59:
fa:b1:14:5a:5f:2e:11:70:3b:36:ee:6e:58:bf:a0:
93:65:14:42:03:37:9f:02:31:fd:85:dc:4e:02:e3:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8E:5D:A4:CA:0A:09:6B:86:12:26:84:92:4E:CA:0F:B7:E3:CD:89
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a761e542528b73f8ab5911aa23ab1adf403fc1fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.13.151.0/24
181.13.153.0/24
181.13.185.0-181.13.186.255
181.13.239.0/24
186.125.160.0/24
190.136.18.0/24
190.228.73.0-190.228.74.255
190.228.99.0-190.228.100.255
190.228.126.0/24
190.228.132.0/24
Signature Algorithm: sha256WithRSAEncryption
99:47:3c:9f:23:08:30:c0:50:58:b0:75:b1:f1:89:8c:1f:a2:
ca:8e:05:a7:52:d7:5c:38:c1:90:7c:06:50:b9:37:59:c4:05:
b0:a9:c0:5a:d8:c3:9f:ca:f5:f8:c0:8d:ac:cd:3f:cb:1d:b0:
ef:4b:41:88:08:7b:29:ca:3f:54:34:62:26:c8:ec:9f:6d:11:
d0:8d:99:a1:59:c8:9d:66:53:3b:50:50:4e:b0:b3:a2:cb:3d:
8a:95:c4:f3:12:90:1a:ee:5d:33:00:2e:4a:78:58:f5:eb:80:
71:a4:ca:66:48:57:36:46:04:47:d9:2f:b2:81:da:c2:2a:5d:
48:33:45:f6:e6:e7:fd:d0:90:8f:07:9c:6c:d9:eb:33:55:22:
01:c3:34:fd:43:cc:92:a1:77:1e:82:2f:d5:02:84:a4:91:74:
0a:54:76:61:26:fe:2f:e5:f1:8b:f8:3e:06:a5:f2:f0:e0:e5:
8c:f8:4b:18:70:14:c8:c7:1d:d8:4c:ae:c6:f6:43:82:ef:64:
38:f7:75:13:29:c1:b1:c6:2a:35:0f:19:3d:8f:c7:87:31:16:
65:23:0c:27:82:4c:80:84:ed:65:a1:1d:84:44:02:74:46:c5:
3a:08:bf:81:52:12:e4:25:62:25:16:07:a8:66:34:48:d2:51:
21:02:d3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org