Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/ff33d834ff4f648ac2daa2cb90fb2902493bd996.roa
File: ff33d834ff4f648ac2daa2cb90fb2902493bd996.roa (raw, json)
Hash identifier: 4lJ2XGkWCt7YgK6PbArDWUy4uCxAZo4ScJnKz2MT4Ss=
Subject key identifier: 54:DC:19:E2:4A:F9:9A:CB:B4:0A:50:FF:CF:0F:09:20:A0:44:E8:01
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 0DEE56
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/ff33d834ff4f648ac2daa2cb90fb2902493bd996.roa
Signing time: Wed 24 Mar 2021 14:28:59 +0000
ROA not before: Wed 24 Mar 2021 14:28:59 +0000
ROA not after: Tue 24 Mar 2026 14:28:59 +0000
asID: 28075
IP address blocks: 181.118.108.0/24 maxlen: 24
181.118.70.0/24 maxlen: 24
181.118.71.0/24 maxlen: 24
181.118.73.0/24 maxlen: 24
181.118.109.0/24 maxlen: 24
181.118.110.0/23 maxlen: 23
201.190.222.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 912982 (0xdee56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Mar 24 14:28:59 2021 GMT
Not After : Mar 24 14:28:59 2026 GMT
Subject: CN=ff33d834ff4f648ac2daa2cb90fb2902493bd996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:e5:68:62:0f:2c:6a:a4:85:6a:78:c3:dc:
33:d9:71:e6:3d:8c:c6:02:c2:53:19:83:e6:25:bf:
b7:b2:fd:aa:10:fa:ea:bb:fe:98:b4:c9:d7:d5:01:
ed:4d:6e:01:46:ba:1e:9d:09:ad:79:05:fc:6f:83:
78:3f:38:e5:31:9d:de:a5:10:01:a3:f1:da:43:34:
a2:d8:5c:29:42:a2:5d:21:39:0b:3c:cc:ea:25:b1:
40:45:42:53:be:43:e4:82:e0:fd:78:79:ac:bd:13:
15:ee:dc:e4:91:36:51:8b:8f:74:4c:88:d2:0f:da:
c7:54:f4:b3:d0:e0:6c:0e:79:85:58:f7:b3:ff:03:
5d:da:fa:26:e4:ed:85:7a:1d:d9:0e:ca:48:72:82:
b2:03:8d:c7:71:fe:25:60:a4:4b:8c:bd:ac:dd:65:
7c:03:ec:61:b2:2a:50:a1:1f:f5:35:78:de:11:ec:
fd:94:80:4e:dd:70:04:f1:6e:42:f0:d0:97:9e:25:
91:07:85:29:d6:7b:ea:9a:72:29:32:e8:22:0d:52:
6c:06:b8:1b:e1:85:f9:69:90:68:17:9b:2d:5a:d1:
31:9e:0c:ac:05:2e:30:23:0a:9e:d5:fb:c3:ec:4c:
a4:48:54:c5:11:49:ce:11:6f:82:19:46:25:2b:9a:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DC:19:E2:4A:F9:9A:CB:B4:0A:50:FF:CF:0F:09:20:A0:44:E8:01
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/ff33d834ff4f648ac2daa2cb90fb2902493bd996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.118.70.0/23
181.118.73.0/24
181.118.108.0/22
201.190.222.0/23
Signature Algorithm: sha256WithRSAEncryption
66:da:63:3d:02:7a:85:14:1d:93:31:b3:95:2b:43:a7:00:46:
20:04:be:d2:a7:82:30:22:ce:87:c1:9e:a5:14:ce:9b:e3:98:
4b:8f:9c:d1:cb:2d:9f:28:89:1e:84:ca:5e:51:c5:bf:2a:cb:
2c:f2:c8:6d:99:07:fa:19:d7:1d:50:06:6c:8c:f5:de:84:11:
f3:2d:84:1e:8e:8f:8d:71:0d:68:a2:5f:4b:27:30:f4:e2:e6:
ad:e2:e5:82:e6:16:4b:3f:f2:ec:9f:7f:cf:85:7b:d6:1d:91:
80:64:99:b2:35:46:5f:3f:8b:f0:06:49:d1:7c:07:e9:fb:d6:
b8:8e:2a:7e:10:5d:20:88:15:20:61:b6:7a:75:40:cf:d1:03:
a7:9a:ef:61:a0:ca:33:85:a4:2c:71:09:c2:e8:e3:68:32:cc:
75:7c:8f:8a:33:c3:5a:f4:6d:13:29:62:86:be:ef:18:b1:56:
62:85:e8:a2:44:7e:0f:2f:8d:1d:0c:cf:61:eb:f9:fa:28:29:
b9:fd:15:64:c3:9f:e6:67:5f:8c:a0:cb:b8:68:65:b5:b9:04:
ed:0a:ec:75:af:e4:96:e1:9e:43:6a:df:f9:18:d3:be:de:a0:
8c:bd:af:23:97:ca:4b:49:b6:cc:13:9e:57:c8:0e:e0:4c:d3:
29:f0:c0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org