Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/4354fcd10133b2667c332dee36f70ec3a84180de.roa
File: 4354fcd10133b2667c332dee36f70ec3a84180de.roa (raw, json)
Hash identifier: C1qsROzpEI4NSLQlCes7B5BKXwpq5ALU3CUrI6/IYKA=
Subject key identifier: 48:A2:C6:50:8A:33:73:E5:68:0D:CA:AD:31:61:B0:B5:76:53:CF:F8
Certificate issuer: /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial: 201A3D
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/4354fcd10133b2667c332dee36f70ec3a84180de.roa
Signing time: Fri 24 Mar 2023 08:31:26 +0000
ROA not before: Thu 23 Mar 2023 08:31:26 +0000
ROA not after: Sat 22 Mar 2025 08:31:26 +0000
asID: 27947
IP address blocks: 186.3.0.0/18 maxlen: 24
186.3.0.0/24 maxlen: 24
186.3.128.0/17 maxlen: 24
186.3.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2103869 (0x201a3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Validity
Not Before: Mar 23 08:31:26 2023 GMT
Not After : Mar 22 08:31:26 2025 GMT
Subject: CN=4354fcd10133b2667c332dee36f70ec3a84180de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:e9:9a:fb:22:29:28:65:dd:24:d1:3c:e7:
96:dd:4c:2a:9d:44:05:74:02:ee:82:46:fb:ff:23:
8f:29:b8:15:04:f4:a2:a3:69:be:9f:5e:8a:66:ed:
17:68:81:c8:40:b8:b8:da:64:56:00:e5:fb:3b:c5:
85:f4:25:18:aa:ad:44:f1:01:42:2a:54:e5:eb:2e:
66:2e:35:8c:00:e6:e4:89:7b:81:26:89:09:fb:47:
15:ab:6b:d4:55:9a:93:ca:3c:57:78:6b:b4:7b:e7:
74:f9:96:36:7c:0f:6e:c5:10:ae:df:7c:59:78:ab:
4b:5f:86:dc:21:54:7d:a4:69:24:8a:15:55:9f:e8:
0e:4e:80:66:c4:b5:f0:0b:f3:ca:52:b2:ee:de:73:
78:bb:80:61:5c:08:d6:63:9e:24:07:75:d0:96:a5:
de:d8:06:36:92:a9:a3:59:0d:59:8d:8f:a7:dd:d3:
4e:58:bb:83:b9:94:bf:ab:5e:de:d2:e4:31:67:d1:
a3:e9:96:ef:f7:47:f9:eb:cf:d1:40:6f:7a:c0:ba:
ff:84:49:0a:c2:8c:bb:0c:54:b1:88:fb:e8:47:a5:
c4:29:60:27:3c:43:17:3a:02:67:c4:20:18:df:7b:
0c:4c:99:28:47:fb:64:eb:f6:ef:61:50:b1:8b:c7:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A2:C6:50:8A:33:73:E5:68:0D:CA:AD:31:61:B0:B5:76:53:CF:F8
X509v3 Authority Key Identifier:
keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/4354fcd10133b2667c332dee36f70ec3a84180de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:81:b0:d9:97:57:8c:9d:5a:ef:88:18:af:e2:0c:54:ad:3a:
73:ae:10:44:61:14:d6:4d:6e:80:9e:c1:8f:79:49:08:91:2d:
49:ba:21:ed:df:d1:c2:36:95:fc:9e:64:3b:4f:91:ab:84:cb:
b1:2a:f2:c1:a1:0f:fc:08:1d:c7:25:45:b8:ba:57:f5:93:3c:
2c:b7:96:d2:a2:e4:5a:bd:e9:75:12:bd:e5:e0:5a:2e:31:96:
ab:b5:68:c9:b9:be:60:86:b0:f7:bc:aa:bd:f3:82:72:e7:64:
a3:aa:9b:d4:51:96:41:e6:a7:8b:22:c5:95:ce:e1:fb:95:62:
03:89:08:95:a1:47:97:72:dd:b3:e7:3c:8a:21:36:2b:e5:32:
42:12:65:49:c9:7f:7d:2c:f7:13:8f:9f:11:12:6e:3c:d7:23:
18:23:2b:da:d2:6f:98:f9:51:bc:97:a2:4f:b5:3f:8e:57:a6:
77:bf:41:8d:19:52:84:a5:70:98:8c:e1:a1:f2:9d:34:99:60:
97:cf:9b:65:72:a6:63:c3:2f:34:a3:7e:bb:37:02:9e:e2:2c:
40:b0:d7:0d:73:20:71:47:62:0a:a1:f2:16:f4:2e:70:ad:95:
78:82:7c:2a:89:eb:bf:29:d9:e4:d1:1a:2a:d2:4f:45:86:7b:
49:58:43:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 17:34:07 2023 by rpki-client on console-fra.rpki-client.org