Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/fb6a0afee9907ac5f6af84e638c1afbefa0a6a83.roa
File: fb6a0afee9907ac5f6af84e638c1afbefa0a6a83.roa (raw, json)
Hash identifier: 4qQOFa62eRA/1+wSfdFe93wi2Kg86FRLbB8ehgV56R8=
Subject key identifier: E7:AD:71:D4:0F:8B:74:97:EF:41:27:4B:37:39:6E:5C:E6:0D:78:40
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 0DF402
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/fb6a0afee9907ac5f6af84e638c1afbefa0a6a83.roa
Signing time: Wed 24 Mar 2021 14:29:00 +0000
ROA not before: Wed 24 Mar 2021 14:28:59 +0000
ROA not after: Tue 24 Mar 2026 14:28:59 +0000
asID: 28075
IP address blocks: 131.72.1.0/24 maxlen: 24
181.118.102.0/24 maxlen: 24
181.118.103.0/24 maxlen: 24
181.118.115.0/24 maxlen: 24
201.190.220.0/24 maxlen: 24
201.190.244.0/24 maxlen: 24
201.190.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914434 (0xdf402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Mar 24 14:28:59 2021 GMT
Not After : Mar 24 14:28:59 2026 GMT
Subject: CN=fb6a0afee9907ac5f6af84e638c1afbefa0a6a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:6b:84:71:9c:f1:76:76:4b:18:f3:36:18:
6d:3d:e3:de:13:4d:38:5e:d2:41:e6:57:86:cf:0b:
f6:f8:56:23:2b:d6:65:60:ee:77:e4:71:5e:85:52:
eb:26:14:43:98:53:ce:36:a3:23:1d:e2:6c:32:98:
53:81:b0:94:a5:2f:5a:4c:a0:1d:10:ca:1b:6a:be:
b5:4a:da:3f:54:d5:5e:83:06:40:09:36:2d:62:62:
ce:37:f5:c1:8c:dd:b5:7c:0c:b0:01:30:41:bb:96:
81:b6:da:c2:41:68:e6:eb:33:cd:f1:c5:b1:99:38:
09:f5:af:66:bd:4a:2c:82:87:8d:a1:5d:75:45:82:
ad:63:86:37:8d:73:dc:10:85:cb:dc:58:b9:8e:4d:
0c:58:99:1f:95:c4:38:7c:14:62:bc:64:60:7b:62:
5a:38:30:64:de:1a:06:3e:88:7e:30:5f:46:16:f2:
7b:d2:cb:36:60:e0:94:61:aa:77:e0:68:a4:7f:ed:
64:81:61:6f:97:bb:3a:a4:04:9b:80:8b:55:bd:78:
1e:d6:2f:37:99:bd:a6:f0:61:48:8d:e7:41:6c:35:
61:4f:5e:0b:f9:a4:e0:67:f7:a6:1f:0b:d8:5e:cf:
b4:55:99:09:8b:a7:11:3f:ed:3e:9a:e0:b9:3a:75:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AD:71:D4:0F:8B:74:97:EF:41:27:4B:37:39:6E:5C:E6:0D:78:40
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/fb6a0afee9907ac5f6af84e638c1afbefa0a6a83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.1.0/24
181.118.102.0/23
181.118.115.0/24
201.190.220.0/24
201.190.244.0/24
201.190.247.0/24
Signature Algorithm: sha256WithRSAEncryption
77:85:e9:80:be:54:ae:a0:f8:d4:c2:ed:c1:a6:12:e5:e7:21:
d9:08:2a:e3:79:d5:61:0a:09:40:af:96:d7:f6:12:73:74:85:
50:7b:38:22:fc:2a:1e:61:0c:b0:64:8a:e1:88:61:36:75:8b:
c1:21:a1:42:a9:3f:af:c9:9a:9e:84:be:44:84:43:32:c6:f9:
2a:a5:81:17:2d:a9:ac:d3:fb:88:54:af:71:e3:16:e2:37:88:
d9:cf:1f:94:70:23:61:7f:31:73:30:e1:e3:7c:b5:8e:bb:74:
e3:fc:a4:43:24:90:51:b6:f6:c5:8f:23:76:83:0e:e6:48:37:
4c:05:4e:28:2e:ac:07:e7:da:8d:39:37:5e:d2:ce:73:ac:12:
4e:4a:03:cf:a4:b3:b1:03:82:20:24:3a:c4:61:42:ae:d2:2d:
de:2c:ca:c5:13:c8:35:38:f6:b9:6f:4a:a2:b5:10:ec:fb:54:
9f:8b:19:80:91:cc:ce:3b:44:97:59:61:d1:d1:40:52:07:72:
c1:f3:85:a2:c7:67:d1:71:3e:52:41:b5:32:0a:f9:99:36:93:
1c:1f:a2:0a:25:bb:20:2e:26:74:71:1a:00:d3:22:19:f8:a0:
64:ff:23:d8:37:ed:83:d9:b6:00:3d:9d:d5:4f:5a:47:78:52:
83:2d:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org