Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/86b7a81bef0a0f5b6cd1242bf308dc3bc63ac858.roa
File: 86b7a81bef0a0f5b6cd1242bf308dc3bc63ac858.roa (raw, json)
Hash identifier: 1A5CmGbKCvJQZrA9fjtdaxdOIvJbYO0bcRxD0Kgdm3Q=
Subject key identifier: 4F:D5:C1:36:A7:E5:0C:4B:94:B0:17:D9:3C:4F:6B:FA:40:5A:68:ED
Certificate issuer: /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial: 15B50A
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/86b7a81bef0a0f5b6cd1242bf308dc3bc63ac858.roa
Signing time: Tue 04 Jan 2022 18:19:21 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 22368
IP address blocks: 181.174.0.0/18 maxlen: 23
190.124.96.0/19 maxlen: 24
190.13.0.0/20 maxlen: 23
190.13.24.0/21 maxlen: 23
190.13.32.0/21 maxlen: 22
190.13.40.0/21 maxlen: 22
190.184.128.0/18 maxlen: 24
190.96.128.0/21 maxlen: 22
190.96.160.0/20 maxlen: 24
190.96.176.0/21 maxlen: 23
190.96.192.0/21 maxlen: 24
190.96.208.0/20 maxlen: 24
201.221.128.0/20 maxlen: 24
201.221.144.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1422602 (0x15b50a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=86b7a81bef0a0f5b6cd1242bf308dc3bc63ac858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:4f:9e:65:3b:5f:8e:c1:ad:e4:05:15:5d:
a9:fc:1f:b4:b8:6a:5b:91:cf:d2:64:30:9b:e8:04:
c2:f6:5b:4f:6c:b0:d1:17:5d:ce:25:a7:9b:a3:2e:
1b:35:11:6a:ee:3e:4e:de:fb:fe:14:f9:84:1d:d7:
91:29:68:46:a2:42:4e:44:b6:a5:75:1d:18:ce:7f:
f4:cc:de:e1:8c:75:32:2c:10:1a:d4:c4:e3:28:6a:
73:a9:3a:b6:08:41:ca:a3:89:fd:e6:f4:9c:4f:f1:
43:21:a8:75:fe:6a:20:3a:59:b5:3f:8b:ba:88:f2:
cd:0a:c2:b3:57:27:2b:20:0e:71:fe:64:f4:8c:a6:
84:d6:d7:df:ae:8e:85:27:d5:23:37:52:fd:32:96:
1c:4e:a8:8a:98:e7:37:99:92:93:3a:0d:df:c0:16:
49:b9:d2:a7:78:73:da:53:6f:3e:6a:96:63:62:41:
e8:ea:7b:88:4c:a1:1a:51:7d:52:c5:34:12:ed:56:
64:9d:e3:fb:f7:ab:08:75:1f:66:fb:0e:a4:a4:f5:
18:cf:fd:fc:33:c0:69:c1:d6:d2:14:db:87:1b:4d:
a8:17:2d:b7:76:0e:1c:64:57:52:09:56:72:52:b6:
4f:4b:9c:6a:d3:9a:b9:0c:3e:94:43:9b:3a:77:2f:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:C1:36:A7:E5:0C:4B:94:B0:17:D9:3C:4F:6B:FA:40:5A:68:ED
X509v3 Authority Key Identifier:
keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/86b7a81bef0a0f5b6cd1242bf308dc3bc63ac858.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.174.0.0/18
190.13.0.0/20
190.13.24.0-190.13.47.255
190.96.128.0/21
190.96.160.0-190.96.183.255
190.96.192.0/21
190.96.208.0/20
190.124.96.0/19
190.184.128.0/18
201.221.128.0/19
Signature Algorithm: sha256WithRSAEncryption
c5:64:ea:3a:c6:3b:43:68:75:53:aa:ef:b1:b3:16:62:22:60:
03:61:a2:76:04:15:b3:ca:68:90:06:46:42:e3:5e:1c:2c:a5:
13:0f:c6:14:2e:bd:75:84:08:a2:fc:10:95:33:54:42:4d:f7:
29:a8:b0:dd:f3:c3:78:ca:32:62:a3:7e:62:2d:6d:b4:c9:2b:
9d:e6:c5:0c:8b:37:71:7e:31:a3:05:82:d2:78:78:96:6a:22:
65:38:dd:03:39:c4:f0:8f:dc:73:40:9e:6e:bf:fb:35:64:a8:
c0:43:8e:48:49:eb:74:9c:de:89:d2:a1:2d:cc:ea:05:11:c9:
83:69:a9:26:97:41:92:8a:d2:5f:58:3e:07:d9:0b:e3:94:da:
1f:15:ef:7d:08:8e:e7:5b:f3:96:a2:32:bc:cc:dd:df:ed:df:
c1:e2:68:f7:02:f6:ce:67:1b:4b:54:fe:19:9c:02:32:01:58:
9e:c7:ea:7a:74:9e:e1:1d:a9:04:61:91:a8:30:8a:da:bf:1d:
4c:74:27:a2:95:f5:d7:98:19:a7:64:f0:78:2d:9f:55:e9:23:
a9:66:f1:f2:33:02:0d:64:26:01:ff:4f:a6:13:54:f5:54:f2:
10:da:3e:87:b6:22:d9:88:3e:58:86:8b:ce:c2:fb:02:90:7f:
5b:76:a9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org