Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/c48af6ed6dc08cee9debb3094f0ac822b3f11e8c.roa
File: c48af6ed6dc08cee9debb3094f0ac822b3f11e8c.roa (raw, json)
Hash identifier: YtcZg3wmf6pCaZfMh1GOsIbRu2DTj+YwdY9rN/UEa50=
Subject key identifier: 5A:B1:92:DD:86:17:68:C1:13:28:F0:60:39:4A:05:53:0C:5E:4E:DC
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 0E047F
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/c48af6ed6dc08cee9debb3094f0ac822b3f11e8c.roa
Signing time: Wed 24 Mar 2021 14:29:00 +0000
ROA not before: Wed 24 Mar 2021 14:28:59 +0000
ROA not after: Tue 24 Mar 2026 14:28:59 +0000
asID: 28075
IP address blocks: 168.90.11.0/24 maxlen: 24
181.118.76.0/24 maxlen: 24
181.118.77.0/24 maxlen: 24
181.118.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918655 (0xe047f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Mar 24 14:28:59 2021 GMT
Not After : Mar 24 14:28:59 2026 GMT
Subject: CN=c48af6ed6dc08cee9debb3094f0ac822b3f11e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:31:0e:ba:df:45:2f:fd:0c:ce:41:2b:12:20:
2a:4e:62:b1:e4:6c:03:17:d3:84:e4:3c:4e:26:d7:
ec:c5:72:63:b8:2d:86:7d:8a:a7:34:9d:87:51:39:
93:b1:f3:7c:e3:d5:f5:98:ae:95:d5:9e:cd:5a:0e:
c0:a3:14:74:48:89:c2:65:04:14:3d:94:1e:f0:73:
f3:a0:54:04:86:e8:00:5e:b0:a9:95:26:fd:b0:da:
68:12:5e:af:4b:dc:e0:93:fc:ed:8a:05:dc:db:95:
92:82:d4:d5:5f:44:c5:da:34:ac:83:8f:fc:28:dd:
1b:5d:88:86:03:2e:76:23:51:2f:e7:d8:4f:fb:73:
70:72:ab:d6:52:41:b5:28:d4:bf:ba:be:a4:de:84:
e0:52:17:28:60:70:5b:79:a2:5d:84:fe:5f:53:db:
44:bd:d7:82:f3:7d:26:97:40:5b:3c:da:a1:27:cf:
3d:9b:60:2a:75:31:dd:83:20:bb:02:bc:1a:6f:89:
32:78:f0:d3:d5:3b:44:44:77:86:40:6e:96:8b:4d:
2d:d8:67:7b:77:37:f1:49:58:45:62:f6:a5:37:02:
e6:75:74:43:47:4a:31:08:4f:6f:b0:06:66:24:7b:
78:5f:4d:f3:54:35:bf:d0:9e:19:af:9b:ca:35:06:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B1:92:DD:86:17:68:C1:13:28:F0:60:39:4A:05:53:0C:5E:4E:DC
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/c48af6ed6dc08cee9debb3094f0ac822b3f11e8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.11.0/24
181.118.76.0-181.118.78.255
Signature Algorithm: sha256WithRSAEncryption
90:5c:0a:4e:72:0a:20:9d:b2:25:55:50:cf:37:d9:eb:e8:50:
97:3a:a6:98:8b:bf:66:9e:27:fa:cd:89:60:43:57:fc:0b:ce:
e2:c6:ec:c3:19:cc:16:2d:fe:d9:55:6c:74:96:b2:bd:35:a2:
2f:f7:0b:5c:21:48:1d:e5:56:2f:97:34:e5:11:32:34:3e:30:
58:3e:5e:8a:9b:17:72:c7:78:5a:f1:f6:5b:62:98:a9:e7:6a:
08:28:ed:18:fa:c0:85:b7:28:6d:63:8e:3d:8c:65:de:de:a5:
e6:42:35:7e:90:3b:dd:5d:50:93:8b:c7:9d:9b:ea:bc:62:1e:
9b:3c:79:b2:d1:58:88:e2:f2:58:71:e3:aa:78:26:14:23:64:
ca:9a:1a:f4:64:aa:5c:ec:c2:b0:9c:51:35:b4:52:de:ea:89:
b7:c8:95:a3:e7:aa:45:cb:cb:fe:82:53:1f:2a:92:2c:ff:3f:
1b:54:96:f7:0c:41:7e:10:e3:ca:6c:ce:4d:0f:00:4a:e7:f8:
b4:c7:b1:80:75:16:c2:af:7f:1d:dc:52:7f:72:cd:0d:79:6f:
3e:ba:d2:a2:c9:7f:31:65:cf:11:a4:1a:ca:22:2c:73:e6:5f:
ca:db:0c:fa:56:57:bb:e8:86:a7:1e:4c:64:37:45:fe:c4:c6:
72:4e:00:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org