Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/518b05e3f20f3d35d659c18cff9a26174815dba8.roa
File: 518b05e3f20f3d35d659c18cff9a26174815dba8.roa (raw, json)
Hash identifier: UawFe6b2cwNvDLbfMUx6bGggDPEjzJ+vcmF3QJbqyFU=
Subject key identifier: 99:5C:FE:36:CA:54:59:C7:FB:BA:23:0C:31:6D:99:A0:5F:88:F1:6C
Certificate issuer: /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial: 22FC4E
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/518b05e3f20f3d35d659c18cff9a26174815dba8.roa
Signing time: Wed 16 Aug 2023 16:45:14 +0000
ROA not before: Tue 15 Aug 2023 16:45:14 +0000
ROA not after: Sat 16 Aug 2025 16:45:14 +0000
asID: 6306
IP address blocks: 181.185.128.0/17 maxlen: 17
179.20.128.0/17 maxlen: 17
179.45.128.0/17 maxlen: 17
181.184.128.0/17 maxlen: 17
186.184.128.0/17 maxlen: 20
186.166.0.0/16 maxlen: 24
186.186.64.0/18 maxlen: 18
161.255.0.0/16 maxlen: 16
179.44.128.0/17 maxlen: 17
200.35.64.0/18 maxlen: 23
161.234.0.0/16 maxlen: 16
181.183.128.0/17 maxlen: 17
179.21.128.0/17 maxlen: 17
186.24.0.0/15 maxlen: 24
181.182.128.0/17 maxlen: 17
186.185.0.0/16 maxlen: 20
2800:6b0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292814 (0x22fc4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Validity
Not Before: Aug 15 16:45:14 2023 GMT
Not After : Aug 16 16:45:14 2025 GMT
Subject: CN=518b05e3f20f3d35d659c18cff9a26174815dba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:b8:c4:63:21:0c:1b:c2:69:35:9d:01:68:
16:b4:62:7a:e0:58:3a:a6:8d:d3:53:76:4a:60:d6:
80:b8:34:57:a8:63:f3:84:b3:36:43:4a:95:12:60:
fa:84:45:47:e0:bd:30:4c:e9:0a:bc:4c:7e:25:07:
99:81:82:17:32:1b:6b:e2:ee:99:21:c7:c5:d4:dd:
5b:80:64:08:c8:56:38:07:b1:3f:da:f7:f4:09:9e:
88:3d:76:8f:38:2d:d0:11:51:ef:1c:49:16:0e:7d:
22:ec:82:8a:0d:1c:04:52:ce:b6:f4:0b:d1:92:a7:
dd:dc:bd:a0:15:82:ea:38:96:20:53:2f:0c:44:ab:
85:a7:8b:f3:98:de:dd:01:80:69:83:f8:5d:9d:99:
1e:75:7d:af:59:a8:b8:50:e2:23:fa:2d:e3:6a:16:
39:16:63:fa:aa:8d:2b:7d:e2:41:08:b8:a8:18:8c:
c6:34:6c:fd:9a:ed:12:23:6e:1a:16:da:7c:8d:3b:
4a:c6:61:32:33:dd:8e:05:eb:81:df:c8:de:09:9c:
84:0b:66:72:07:8d:5d:d2:19:f5:58:7e:14:29:9e:
42:5b:83:ee:a3:f3:e3:b6:c8:03:01:fc:97:fe:5e:
a1:6d:08:92:20:8f:a7:7e:d1:17:d9:99:97:6e:04:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5C:FE:36:CA:54:59:C7:FB:BA:23:0C:31:6D:99:A0:5F:88:F1:6C
X509v3 Authority Key Identifier:
keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/518b05e3f20f3d35d659c18cff9a26174815dba8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.234.0.0/16
161.255.0.0/16
179.20.128.0/17
179.21.128.0/17
179.44.128.0/17
179.45.128.0/17
181.182.128.0/17
181.183.128.0/17
181.184.128.0/17
181.185.128.0/17
186.24.0.0/15
186.166.0.0/16
186.184.128.0-186.185.255.255
186.186.64.0/18
200.35.64.0/18
IPv6:
2800:6b0::/32
Signature Algorithm: sha256WithRSAEncryption
05:da:14:25:5f:7d:0e:c0:6c:22:7c:7e:aa:b5:88:14:31:97:
01:38:83:cd:55:e4:94:ae:26:1e:02:9d:35:7d:25:97:41:b2:
b6:ce:ec:c7:f6:c3:49:d1:97:c4:4b:21:a3:44:7a:3a:be:a5:
ab:34:01:83:e8:ee:fa:f2:4d:4e:83:16:6f:0f:b7:bd:71:91:
8d:30:5d:80:c3:95:97:14:c4:14:94:5e:27:25:16:ae:1b:56:
b4:ac:76:88:a2:ad:69:cb:67:21:63:8c:6c:d9:65:91:62:eb:
58:a7:d9:a5:be:5e:fe:f6:d6:aa:c5:42:39:2a:38:c2:d6:4f:
b2:e9:8e:07:86:e9:0e:d5:d0:d9:a0:53:04:7a:f2:6b:01:d4:
63:23:a3:ce:e0:8d:fb:a4:f2:d3:a7:0a:6f:75:cf:f6:25:45:
d6:23:79:69:4e:e0:51:72:28:d2:1c:8f:2d:58:e2:87:95:8c:
e6:da:43:42:59:49:d6:b6:3a:bc:17:af:52:9a:d3:09:6e:25:
b8:ad:8b:fc:c4:89:53:89:b9:52:d6:89:4c:49:57:9f:bc:e9:
c8:aa:d6:b9:d0:9e:46:fd:f9:57:64:54:28:70:34:ec:8c:a8:
d8:65:83:a5:b5:55:7e:47:12:1e:e8:49:df:0d:7f:a2:fb:12:
fc:39:d7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 17:08:51 2023 by rpki-client on console-ams.rpki-client.org