Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/97786b13512241cd4bf1de78aa2edf50d9ca0510.roa
File: 97786b13512241cd4bf1de78aa2edf50d9ca0510.roa (raw, json)
Hash identifier: kwzL8i0XnpV5909f+9I1BuA14F9guebtEhmepvSFQhA=
Subject key identifier: 5D:0E:0E:C3:CC:BF:A8:F1:E3:6C:BA:3C:7F:79:79:63:B0:2A:15:87
Certificate issuer: /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial: 0D3285
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/97786b13512241cd4bf1de78aa2edf50d9ca0510.roa
Signing time: Wed 24 Mar 2021 14:43:09 +0000
ROA not before: Wed 24 Mar 2021 14:43:08 +0000
ROA not after: Tue 24 Mar 2026 14:43:08 +0000
asID: 30167
IP address blocks: 201.174.30.0/24 maxlen: 24
201.174.31.0/24 maxlen: 24
201.174.43.0/24 maxlen: 24
201.174.44.0/24 maxlen: 24
201.174.100.0/24 maxlen: 24
201.174.106.0/24 maxlen: 24
201.174.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 864901 (0xd3285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Validity
Not Before: Mar 24 14:43:08 2021 GMT
Not After : Mar 24 14:43:08 2026 GMT
Subject: CN=97786b13512241cd4bf1de78aa2edf50d9ca0510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:90:37:9e:85:3a:c0:3a:c1:89:d5:0c:c7:
86:2b:99:3f:23:ed:72:6c:50:4f:a1:5a:8a:0e:5d:
79:76:17:2c:3e:69:c0:99:ab:b7:8d:bc:29:09:5f:
ad:ed:14:a7:3f:70:59:8f:4a:26:0b:d3:85:59:ac:
0b:1f:93:3f:01:6b:40:e5:8b:d2:8b:4f:d0:c2:a4:
1c:06:67:13:5b:22:6d:00:3a:c1:0c:53:7b:42:99:
92:4b:2f:ea:95:d1:ed:41:8b:09:5c:f7:03:4a:54:
5c:ed:99:4f:30:7b:e7:91:2b:82:31:ee:fc:8c:5e:
bd:ee:11:10:e9:ad:35:3f:15:96:de:7c:23:7f:c8:
83:fe:a5:a1:6f:39:d7:f0:3c:23:20:52:9f:dd:b8:
08:c3:38:a2:55:88:46:42:15:68:94:d2:e5:1f:1b:
c6:23:c8:d4:d1:d6:a8:16:b5:62:77:5b:03:93:0c:
58:f1:5f:f3:3e:9c:5d:e7:8a:82:be:06:0f:b7:0d:
43:9b:aa:16:29:db:3d:10:14:f0:9d:47:26:cc:ba:
36:0f:e2:33:f1:79:26:19:1f:84:6e:1c:fe:6b:63:
53:07:2c:ab:a2:a9:65:e7:a6:36:93:85:0a:18:2e:
9e:66:bf:dd:0d:ae:08:e3:51:81:86:f2:39:c5:38:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0E:0E:C3:CC:BF:A8:F1:E3:6C:BA:3C:7F:79:79:63:B0:2A:15:87
X509v3 Authority Key Identifier:
keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/97786b13512241cd4bf1de78aa2edf50d9ca0510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.174.30.0/23
201.174.43.0-201.174.44.255
201.174.100.0/24
201.174.106.0/24
201.174.245.0/24
Signature Algorithm: sha256WithRSAEncryption
58:3b:6c:ce:f0:fe:00:5a:ef:ff:2f:d3:5b:a9:75:d9:91:d5:
ed:4c:46:ee:7e:e2:05:3e:45:da:e5:16:87:75:90:2b:59:78:
d9:3c:f7:ba:c4:1d:5a:96:a1:51:0c:15:2a:fb:03:3b:b9:bc:
87:a2:7b:f9:22:ee:c5:68:56:35:76:0b:21:de:d4:23:56:90:
d5:79:b0:37:6f:d4:d1:0e:2b:44:5e:af:ff:7d:f2:c5:06:58:
07:b7:73:78:51:58:76:d8:22:0c:07:5e:90:d5:c1:29:d1:92:
91:5e:d7:e2:2f:0f:9c:1a:d8:4c:35:08:c0:1a:11:00:56:82:
86:c6:bc:39:3e:eb:c8:9f:ed:e0:31:c1:14:0e:1a:2f:9f:ee:
4a:6d:6e:a5:30:aa:3b:2b:01:ea:e1:03:44:3a:46:63:9c:93:
7f:3e:2c:34:54:00:b2:92:6b:03:d5:57:9d:fa:f0:e6:59:17:
1d:c0:d0:e1:26:be:c1:32:65:1c:43:69:04:1e:d9:b2:e4:ec:
47:f0:6f:7d:af:7e:e6:b9:0d:65:bc:c7:e2:36:b2:7e:ff:5f:
3a:00:f9:df:65:7c:ff:c4:2a:40:e5:c5:24:1f:60:08:3c:a1:
f5:63:0f:4e:9f:27:4d:aa:f9:fe:e1:23:69:41:f8:e9:14:b7:
30:68:77:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-ams.rpki-client.org