Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/3fb482bc53874d2e9e671a733288fd859a5699dd.roa
File: 3fb482bc53874d2e9e671a733288fd859a5699dd.roa (raw, json)
Hash identifier: OsnJrFKQ/NzfJmo2SEUXiNJIqRX3xZKx4qYmvIMzuNk=
Subject key identifier: 9B:4D:91:2B:FD:F5:81:57:A4:AD:D2:14:24:65:05:F8:B4:09:26:5D
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 10B8FA
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/3fb482bc53874d2e9e671a733288fd859a5699dd.roa
Signing time: Tue 24 Oct 2023 16:01:19 +0000
ROA not before: Tue 24 Oct 2023 16:00:56 +0000
ROA not after: Tue 24 Oct 2028 16:00:56 +0000
asID: 27754
IP address blocks: 186.38.89.0/24 maxlen: 24
186.38.90.0/23 maxlen: 24
186.38.92.0/24 maxlen: 24
186.38.108.0/24 maxlen: 24
186.38.110.0/24 maxlen: 24
186.56.39.0/24 maxlen: 24
186.56.50.0/24 maxlen: 24
201.251.73.0/24 maxlen: 24
201.251.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095930 (0x10b8fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Oct 24 16:00:56 2023 GMT
Not After : Oct 24 16:00:56 2028 GMT
Subject: CN=3fb482bc53874d2e9e671a733288fd859a5699dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:ec:44:a3:68:78:d6:70:61:2a:d2:ac:0a:
c6:56:9c:ab:5a:ef:88:73:fe:c4:e4:af:1a:89:5f:
f2:8e:5d:e0:30:98:92:56:e5:ad:2d:aa:43:97:b9:
d4:4c:93:4e:88:20:b6:2a:b5:61:cc:f4:79:fd:97:
78:3e:83:ac:52:de:4e:da:28:5d:20:6d:03:99:5e:
fe:3c:8c:2e:3d:c0:dc:66:80:d5:0a:df:d6:5d:05:
1a:93:aa:0e:12:af:b9:14:1d:e0:51:2b:91:1f:56:
fb:30:48:1d:3e:c6:9b:3b:a8:1a:45:5f:2b:a5:cd:
28:c4:c9:6b:8b:28:38:8d:cc:4f:b5:95:3d:3c:6f:
f1:f4:72:09:3a:74:f3:04:b0:43:ce:1a:75:e2:77:
9f:b6:a2:d1:7f:44:38:5b:cc:74:bb:d6:0f:5c:05:
39:df:c3:56:09:8c:b5:15:1b:dd:6e:fd:84:10:9a:
63:69:ca:f7:2b:bc:70:8a:a9:c7:cc:ca:a2:78:dc:
79:d1:61:5a:35:64:53:7b:81:c7:d6:3f:37:01:4c:
7d:86:a7:f6:90:62:32:9f:b0:6a:f6:2e:13:ea:1a:
35:7f:03:fb:86:2d:d7:26:65:11:0b:8e:66:8d:1e:
ac:98:5c:b4:33:0b:e8:b4:40:cd:80:43:7c:00:de:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4D:91:2B:FD:F5:81:57:A4:AD:D2:14:24:65:05:F8:B4:09:26:5D
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/3fb482bc53874d2e9e671a733288fd859a5699dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.38.89.0-186.38.92.255
186.38.108.0/24
186.38.110.0/24
186.56.39.0/24
186.56.50.0/24
201.251.73.0/24
201.251.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:b9:0a:91:3b:c6:09:ef:17:f0:4d:11:e1:bf:35:38:ed:ba:
b7:1a:e4:4f:6a:b5:1a:4a:6f:ba:80:57:1b:24:5e:39:eb:9f:
c7:33:b4:82:8e:88:52:be:16:e0:ff:2a:20:78:90:5d:fa:bc:
36:14:b4:e6:de:cf:74:5a:84:29:25:48:9f:eb:48:b9:8e:34:
03:5b:2c:66:02:d0:fc:81:02:41:5e:24:24:02:32:51:a7:1c:
5c:84:fb:08:05:74:42:a1:86:01:f9:f5:77:62:32:a5:d1:34:
bb:5a:42:9c:e1:04:a8:76:c7:f0:6d:4a:eb:2f:1c:d0:cf:9e:
c7:b9:32:cc:c3:75:69:ee:50:94:b9:52:c6:0e:d9:00:6a:be:
44:d7:d8:75:fb:3f:33:ef:e5:dc:61:a1:3f:5c:32:10:55:91:
36:1b:7b:35:7d:94:b0:67:db:32:71:15:88:71:fe:3b:bc:0b:
09:c1:52:04:b9:43:63:64:67:68:6c:49:05:f1:58:4a:23:1c:
a0:f1:70:af:23:7e:0a:60:8b:31:da:5f:02:65:ea:b9:c2:b3:
3d:ef:65:8f:80:28:00:5a:36:b9:a8:c6:a8:a6:af:16:cd:77:
e8:e2:6a:76:ef:28:73:29:97:3c:2b:4b:c8:f8:3c:f6:5d:42:
08:50:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 20:34:01 2023 by rpki-client on console-ams.rpki-client.org