Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/0b80284afa76f80048417cf229d1ef6ee86bf8af.roa
File: 0b80284afa76f80048417cf229d1ef6ee86bf8af.roa (raw, json)
Hash identifier: FEtqdCTeL1nHLJsBjNs2nrvpHe4WrZzNviFMDc8z71A=
Subject key identifier: 7D:51:36:19:FE:C3:FF:DD:08:5A:3A:FC:8A:68:72:41:93:4C:DB:FF
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 0E023B
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/0b80284afa76f80048417cf229d1ef6ee86bf8af.roa
Signing time: Wed 24 Mar 2021 14:29:00 +0000
ROA not before: Wed 24 Mar 2021 14:28:59 +0000
ROA not after: Tue 24 Mar 2026 14:28:59 +0000
asID: 28075
IP address blocks: 181.118.106.0/24 maxlen: 24
181.118.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918075 (0xe023b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Mar 24 14:28:59 2021 GMT
Not After : Mar 24 14:28:59 2026 GMT
Subject: CN=0b80284afa76f80048417cf229d1ef6ee86bf8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:29:d0:cd:8b:74:8d:6f:00:39:c2:c1:35:c8:
50:fb:25:b4:8d:06:e3:3a:28:24:cc:d3:e1:d3:8c:
97:98:18:7c:ed:67:86:70:6e:7f:99:87:be:15:72:
8c:38:27:ed:6f:72:18:dc:d7:13:f9:e4:d0:61:4a:
55:b6:5f:8f:1a:6a:02:02:40:f7:67:3f:64:ba:8e:
e5:9b:6c:da:e7:2a:72:41:5a:d8:41:e5:92:56:fc:
ff:5c:53:48:9c:31:dd:13:77:8d:3b:73:aa:e4:dd:
42:bf:e2:da:21:92:d4:e5:07:5a:a5:96:17:ce:a1:
aa:f7:53:7b:c6:19:17:b8:2d:42:6e:b5:81:ac:38:
bc:36:b0:a1:28:87:f0:2d:ce:96:aa:c1:00:69:1a:
9f:1c:42:b8:88:91:93:a1:33:64:62:59:dd:0c:7e:
39:cc:6e:b7:a0:dc:fb:0f:f0:e6:86:cf:f5:51:3d:
69:46:a3:57:51:de:51:28:c5:4e:75:e1:e1:9e:6b:
51:2f:31:76:5d:d6:53:c9:92:f3:56:bf:94:1d:bc:
e4:a6:0a:63:1c:35:b7:4e:c2:06:1c:0d:02:71:6b:
ca:72:3d:82:90:e5:9e:4a:b4:78:03:b3:79:15:1a:
bf:6f:64:b9:47:2b:cc:e0:95:6f:0c:ce:a8:8a:a9:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:51:36:19:FE:C3:FF:DD:08:5A:3A:FC:8A:68:72:41:93:4C:DB:FF
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/0b80284afa76f80048417cf229d1ef6ee86bf8af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.118.106.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:ee:14:51:ef:da:c6:5c:ee:9f:a7:d6:b1:1a:e0:64:c6:cd:
62:f9:d6:61:63:02:1d:ef:4c:40:fa:c3:56:29:5f:03:e5:69:
d7:b6:a3:ba:58:e5:d3:da:5c:d2:ee:7b:03:f5:24:93:8a:3b:
53:ad:bf:20:a7:bd:76:3d:e3:fb:0a:7b:ed:d0:a1:80:49:63:
d6:89:90:29:7c:77:99:3f:0f:16:2a:b9:7e:e9:c3:a2:51:2a:
e3:d3:72:fc:25:04:a4:26:1f:65:67:bd:0f:31:1c:36:19:74:
14:20:81:28:6d:49:57:4b:a4:17:94:a3:88:89:1c:cf:22:ea:
b1:c9:d5:7d:a9:af:c5:41:2c:94:8d:e4:6d:c1:51:51:36:a9:
bc:3e:31:96:d4:a0:1a:8f:90:8c:79:da:85:72:8a:7c:88:4f:
2d:b6:9d:ae:2a:75:e7:12:44:ff:84:98:a4:f8:82:18:f7:2f:
4c:a8:36:18:aa:3e:a6:ce:b3:55:f3:02:b6:ce:c5:a3:ab:65:
86:fd:61:be:39:c6:7c:da:ae:20:61:b3:1e:6a:98:dd:c4:7a:
b8:73:64:5f:1c:27:20:e2:6a:ab:24:1f:56:05:f5:b5:62:dd:
ae:2a:bd:bb:66:7f:6c:e8:41:70:73:a5:2d:7a:92:67:6e:80:
a1:86:ae:fb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDgI7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
ZDNiMzhmYjliZmNlZDU3YzZhZDVlYjE2MGMxMzBhY2YzMjY0MWMwHhcNMjEwMzI0
MTQyODU5WhcNMjYwMzI0MTQyODU5WjAzMTEwLwYDVQQDEygwYjgwMjg0YWZhNzZm
ODAwNDg0MTdjZjIyOWQxZWY2ZWU4NmJmOGFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgCnQzYt0jW8AOcLBNchQ+yW0jQbjOigkzNPh04yXmBh87WeG
cG5/mYe+FXKMOCftb3IY3NcT+eTQYUpVtl+PGmoCAkD3Zz9kuo7lm2za5ypyQVrY
QeWSVvz/XFNInDHdE3eNO3Oq5N1Cv+LaIZLU5QdapZYXzqGq91N7xhkXuC1CbrWB
rDi8NrChKIfwLc6WqsEAaRqfHEK4iJGToTNkYlndDH45zG63oNz7D/Dmhs/1UT1p
RqNXUd5RKMVOdeHhnmtRLzF2XdZTyZLzVr+UHbzkpgpjHDW3TsIGHA0CcWvKcj2C
kOWeSrR4A7N5FRq/b2S5RyvM4JVvDM6oiqljOwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFH1RNhn+w//dCFo6/IpockGTTNv/MB8GA1UdIwQYMBaAFPsbKsFJ3WU0RJWG
NPmzt6e3aen4MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODhkM2Iz
OGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQxYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjAxNWM0NmItMTU0MC00OWViLWI5NjktMGYzYzQw
ZTAwMTQwLzBiODAyODRhZmE3NmY4MDA0ODQxN2NmMjI5ZDFlZjZlZTg2YmY4YWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMDE1YzQ2Yi0xNTQwLTQ5ZWItYjk2OS0wZjNj
NDBlMDAxNDAvODhkM2IzOGZiOWJmY2VkNTdjNmFkNWViMTYwYzEzMGFjZjMyNjQx
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAbV2ajANBgkqhkiG9w0BAQsFAAOCAQEAfe4UUe/axlzun6fW
sRrgZMbNYvnWYWMCHe9MQPrDVilfA+Vp17ajuljl09pc0u57A/Ukk4o7U62/IKe9
dj3j+wp77dChgElj1omQKXx3mT8PFiq5funDolEq49Ny/CUEpCYfZWe9DzEcNhl0
FCCBKG1JV0ukF5SjiIkczyLqscnVfamvxUEslI3kbcFRUTapvD4xltSgGo+QjHna
hXKKfIhPLbadrip15xJE/4SYpPiCGPcvTKg2GKo+ps6zVfMCts7Fo6tlhv1hvjnG
fNquIGGzHmqY3cR6uHNkXxwnIOJqqyQfVgX1tWLdriq9u2Z/bOhBcHOlLXqSZ26A
oYau+w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:58 2023 by rpki-client on console-ams.rpki-client.org