Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/83d1b447bd0d36c8723fb7ab10682e63787c2dba.roa
File: 83d1b447bd0d36c8723fb7ab10682e63787c2dba.roa (raw, json)
Hash identifier: PulRa1GcyayyDMa9FMuFCVGLSe12g8Uab/MV2Qpni38=
Subject key identifier: 8B:9A:EF:51:D3:EB:EE:CF:62:EF:6E:4E:B8:5D:DD:13:BE:11:66:64
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 0DEE8B
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/83d1b447bd0d36c8723fb7ab10682e63787c2dba.roa
Signing time: Wed 24 Mar 2021 14:28:59 +0000
ROA not before: Wed 24 Mar 2021 14:28:59 +0000
ROA not after: Tue 24 Mar 2026 14:28:59 +0000
asID: 28075
IP address blocks: 181.118.64.0/23 maxlen: 23
181.118.84.0/22 maxlen: 22
181.118.88.0/22 maxlen: 22
181.118.96.0/22 maxlen: 22
181.118.100.0/24 maxlen: 24
190.113.160.0/24 maxlen: 24
190.113.161.0/24 maxlen: 24
190.113.167.0/24 maxlen: 24
190.113.170.0/23 maxlen: 23
190.113.180.0/24 maxlen: 24
190.113.181.0/24 maxlen: 24
190.113.182.0/23 maxlen: 23
190.113.184.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 913035 (0xdee8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Mar 24 14:28:59 2021 GMT
Not After : Mar 24 14:28:59 2026 GMT
Subject: CN=83d1b447bd0d36c8723fb7ab10682e63787c2dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d4:72:40:84:29:38:2e:7e:87:d8:f1:13:05:
9c:17:c5:91:b9:e0:55:0e:f4:2a:2b:f6:56:f6:fc:
09:e6:a5:91:e9:7c:fa:1c:48:a9:05:32:af:1b:f8:
e9:2d:68:a7:9f:3f:88:17:c8:33:fa:5d:5d:6b:1e:
a7:f1:13:f4:ca:1c:60:f7:26:bb:c6:a7:3a:e3:7c:
0b:e9:4a:35:1c:30:80:2a:93:6c:4b:7d:5a:c8:09:
36:c5:93:df:6d:53:9e:c4:d9:2a:f1:2d:1f:ea:7f:
dc:3a:a2:d9:8e:7c:54:49:ea:7a:e7:70:2e:bb:9c:
32:c9:78:23:34:7f:55:16:c9:61:8b:af:01:75:17:
38:06:1d:5a:9f:df:a1:02:0a:af:a7:4a:e2:44:3d:
76:a0:ef:92:cc:ea:1f:c7:7e:3c:27:ec:d4:8a:5d:
5d:19:cd:c9:c6:48:73:43:f9:cb:de:94:e4:95:0b:
7c:d2:49:2f:f8:02:c1:bd:9c:83:e7:7e:75:d3:ef:
e3:c4:11:0b:c6:06:73:9d:1a:48:e8:70:1c:6c:ab:
36:b1:d5:71:51:01:a0:86:54:3e:54:09:7c:40:b4:
36:49:b2:a0:93:a4:bb:39:4a:20:f5:1f:2b:d9:cc:
41:a6:22:4d:39:2f:ac:59:72:ac:18:29:88:b7:10:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9A:EF:51:D3:EB:EE:CF:62:EF:6E:4E:B8:5D:DD:13:BE:11:66:64
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/83d1b447bd0d36c8723fb7ab10682e63787c2dba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.118.64.0/23
181.118.84.0-181.118.91.255
181.118.96.0-181.118.100.255
190.113.160.0/23
190.113.167.0/24
190.113.170.0/23
190.113.180.0-190.113.185.255
Signature Algorithm: sha256WithRSAEncryption
31:db:64:6f:de:b4:31:26:22:a6:d4:19:9a:d8:01:4e:88:35:
9b:24:37:34:54:86:fe:75:24:4e:2f:53:85:2d:a7:f4:17:b9:
b3:2c:e1:fc:e0:18:8f:ed:28:61:1d:c7:a1:df:28:05:5c:6f:
59:a8:27:9c:06:93:fe:2e:b7:84:8e:e3:eb:9d:c1:7f:77:88:
2c:86:1b:58:f7:d3:92:50:88:dd:e5:8e:14:c3:59:bd:9e:50:
dd:75:4d:aa:1f:76:72:d4:04:c4:0e:ed:1d:c7:47:bb:e4:39:
16:8f:2b:d5:d7:09:32:bc:65:e1:32:cf:82:f7:b2:1f:32:d3:
88:d9:9f:b1:c9:f0:a6:66:13:66:78:dc:81:3b:65:6d:1c:e5:
6f:be:55:75:8a:3b:84:c9:83:b1:72:61:9f:2b:45:bb:50:4f:
d3:f1:69:91:73:72:30:6c:ac:32:12:24:d6:61:60:40:4f:d3:
ba:e2:42:78:8f:37:15:c8:90:4c:90:e4:e5:e7:4d:dd:ea:c8:
9d:65:cc:05:14:cb:44:dd:2f:70:17:f3:02:80:bf:b6:53:d0:
3b:cf:9a:7f:70:c2:e0:ce:a2:6f:c4:57:f9:d7:95:0e:20:e5:
c2:32:51:02:69:24:a6:da:7e:9e:d3:9a:24:45:ba:b8:6e:e9:
3f:05:65:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org