Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/340a280b16115bc3bdc1c682fa3012ac3bf22ed9.roa
File: 340a280b16115bc3bdc1c682fa3012ac3bf22ed9.roa (raw, json)
Hash identifier: DAsni0WKRt1mAxwxW0/WA/3ctIctA/Y8l8dZSYx9gdk=
Subject key identifier: 0E:9F:7C:80:E3:00:23:62:3B:D7:70:24:60:AC:42:EA:D0:E2:C7:84
Certificate issuer: /CN=45578380b9b89070a52d9eb52d3ea3222cd94a51
Certificate serial: 0CEE73
Authority key identifier: F0:AC:99:E3:BD:66:B7:43:F7:00:BE:6C:DD:68:A1:37:19:39:F1:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45578380b9b89070a52d9eb52d3ea3222cd94a51.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/340a280b16115bc3bdc1c682fa3012ac3bf22ed9.roa
Signing time: Wed 24 Mar 2021 14:42:25 +0000
ROA not before: Wed 24 Mar 2021 14:42:24 +0000
ROA not after: Tue 24 Mar 2026 14:42:24 +0000
asID: 7727
IP address blocks: 181.210.0.0/18 maxlen: 19
181.210.128.0/17 maxlen: 18
181.210.64.0/18 maxlen: 18
190.130.0.0/18 maxlen: 19
2803:100::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 31 Jan 2024 14:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847475 (0xcee73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45578380b9b89070a52d9eb52d3ea3222cd94a51
Validity
Not Before: Mar 24 14:42:24 2021 GMT
Not After : Mar 24 14:42:24 2026 GMT
Subject: CN=340a280b16115bc3bdc1c682fa3012ac3bf22ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:16:b1:7f:29:b8:e3:ee:40:34:9a:fe:9c:63:
32:62:7e:c6:83:80:63:58:b7:1c:16:e0:1d:3d:17:
d4:85:fa:31:44:87:d0:f9:dd:6b:37:e8:55:58:36:
0f:c7:72:55:c0:ea:37:87:51:95:a4:ce:dc:e9:61:
1a:ee:a0:d4:1e:f7:69:54:d1:5b:be:b2:b1:bf:fb:
c0:b9:c3:6b:be:3e:f8:6c:f2:28:1f:a6:99:a3:c1:
9b:aa:ca:eb:07:9b:c3:fd:6e:06:e0:01:60:c8:89:
b6:0b:2a:11:39:00:bd:80:14:b6:17:9b:be:57:d0:
7f:99:6e:7c:97:0f:49:b6:83:fb:5e:24:b8:41:8f:
bd:34:fd:be:b1:8b:01:fc:a2:90:24:4b:b0:08:c7:
3c:90:62:38:34:83:a7:03:b6:ac:e0:90:d0:08:d8:
7c:c7:d8:8a:d4:80:21:b4:88:41:22:9b:89:6a:bf:
c9:a3:60:d3:92:4b:6c:04:ea:b3:09:1d:21:f2:b7:
49:9a:40:d8:e5:7a:d1:a5:85:86:3a:1a:e4:b6:32:
e4:6d:56:9a:d1:8e:90:07:a5:4b:b5:1d:bc:4f:13:
51:c8:f4:83:5c:74:dc:0b:c5:35:2d:35:77:94:eb:
4f:1c:54:20:3f:61:48:fc:61:26:37:1c:92:32:62:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9F:7C:80:E3:00:23:62:3B:D7:70:24:60:AC:42:EA:D0:E2:C7:84
X509v3 Authority Key Identifier:
keyid:F0:AC:99:E3:BD:66:B7:43:F7:00:BE:6C:DD:68:A1:37:19:39:F1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45578380b9b89070a52d9eb52d3ea3222cd94a51.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/340a280b16115bc3bdc1c682fa3012ac3bf22ed9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/45578380b9b89070a52d9eb52d3ea3222cd94a51.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.210.0.0/16
190.130.0.0/18
IPv6:
2803:100::/32
Signature Algorithm: sha256WithRSAEncryption
3d:8d:c0:f7:46:10:db:9a:e3:ed:9d:33:79:8a:53:18:88:63:
8b:46:86:39:58:92:78:b1:73:42:67:42:86:59:40:ba:f2:32:
e3:03:06:57:da:e4:bf:d1:a9:1d:36:46:a7:f0:92:c9:6f:0b:
c9:6d:24:90:f5:80:97:5a:fc:ba:f7:32:00:eb:7c:5a:e0:00:
7d:9b:ee:2e:b7:c1:a5:0a:87:c0:e3:5c:16:76:54:8a:e3:7d:
79:9f:d2:e8:ab:d4:1e:2c:ff:c6:e7:af:05:25:c5:ea:b7:dc:
ae:f1:0a:81:16:82:94:13:b5:0e:7e:e1:98:01:c2:05:bc:ca:
ee:3a:d4:4e:fd:1e:10:ba:cb:fb:be:c5:8c:07:63:32:cc:c0:
7a:53:c4:9e:9c:5c:64:06:39:5c:fa:37:87:90:0e:2a:09:f4:
e0:27:20:a4:30:84:ae:d4:d3:98:c1:70:85:46:bc:ca:5c:9c:
8a:b9:24:73:3e:af:30:5c:94:cb:12:a6:2e:64:2d:0f:3d:c6:
1f:06:ca:db:d0:e8:27:cd:b9:97:7b:a8:37:fa:df:7d:ea:26:
fa:53:0e:b0:0e:75:25:5c:bd:28:53:de:42:27:2d:a6:d1:5e:
de:da:a5:69:1f:64:50:51:43:92:df:8a:71:0a:99:b6:3e:ef:
18:f1:55:07
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIDDO5zMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ1
NTc4MzgwYjliODkwNzBhNTJkOWViNTJkM2VhMzIyMmNkOTRhNTEwHhcNMjEwMzI0
MTQ0MjI0WhcNMjYwMzI0MTQ0MjI0WjAzMTEwLwYDVQQDEygzNDBhMjgwYjE2MTE1
YmMzYmRjMWM2ODJmYTMwMTJhYzNiZjIyZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmxaxfym44+5ANJr+nGMyYn7Gg4BjWLccFuAdPRfUhfoxRIfQ
+d1rN+hVWDYPx3JVwOo3h1GVpM7c6WEa7qDUHvdpVNFbvrKxv/vAucNrvj74bPIo
H6aZo8GbqsrrB5vD/W4G4AFgyIm2CyoROQC9gBS2F5u+V9B/mW58lw9JtoP7XiS4
QY+9NP2+sYsB/KKQJEuwCMc8kGI4NIOnA7as4JDQCNh8x9iK1IAhtIhBIpuJar/J
o2DTkktsBOqzCR0h8rdJmkDY5XrRpYWGOhrktjLkbVaa0Y6QB6VLtR28TxNRyPSD
XHTcC8U1LTV3lOtPHFQgP2FI/GEmNxySMmJMcQIDAQABo4ICbzCCAmswHQYDVR0O
BBYEFA6ffIDjACNiO9dwJGCsQurQ4seEMB8GA1UdIwQYMBaAFPCsmeO9ZrdD9wC+
bN1ooTcZOfGqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDU1Nzgz
ODBiOWI4OTA3MGE1MmQ5ZWI1MmQzZWEzMjIyY2Q5NGE1MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmRhMTA5MTgtZTNjOC00ZTVlLTliMGItZTU4MDQ5
YmY3NjhmLzM0MGEyODBiMTYxMTViYzNiZGMxYzY4MmZhMzAxMmFjM2JmMjJlZDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZGExMDkxOC1lM2M4LTRlNWUtOWIwYi1lNTgw
NDliZjc2OGYvNDU1NzgzODBiOWI4OTA3MGE1MmQ5ZWI1MmQzZWEzMjIyY2Q5NGE1
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQk
MCIwEQQCAAEwCwMDALXSAwQGvoIAMA0EAgACMAcDBQAoAwEAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9jcD3RhDbmuPtnTN5ilMYiGOLRoY5WJJ4sXNCZ0KGWUC68jLjAwZX
2uS/0akdNkan8JLJbwvJbSSQ9YCXWvy69zIA63xa4AB9m+4ut8GlCofA41wWdlSK
4315n9Loq9QeLP/G568FJcXqt9yu8QqBFoKUE7UOfuGYAcIFvMruOtRO/R4Qusv7
vsWMB2MyzMB6U8SenFxkBjlc+jeHkA4qCfTgJyCkMISu1NOYwXCFRrzKXJyKuSRz
Pq8wXJTLEqYuZC0PPcYfBsrb0OgnzbmXe6g3+t996ib6Uw6wDnUlXL0oU95CJy2m
0V7e2qVpH2RQUUOS34pxCpm2Pu8Y8VUH
-----END CERTIFICATE-----
Generated at Wed Jan 31 17:42:51 2024 by rpki-client on console-fra.rpki-client.org