Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/fb79e54cf9f243b9a17f8d1d1095240e93ec30e7.roa
File: fb79e54cf9f243b9a17f8d1d1095240e93ec30e7.roa (raw, json)
Hash identifier: 7nsARvS06wV8SnPXu7uUFo3X/aOqiwsLfXLTRk7VoSk=
Subject key identifier: D2:1F:9C:29:70:24:30:A8:BF:F6:08:F0:E1:0E:C5:61:96:28:21:D2
Certificate issuer: /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial: 1E4656
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/fb79e54cf9f243b9a17f8d1d1095240e93ec30e7.roa
Signing time: Mon 08 May 2023 23:44:26 +0000
ROA not before: Sun 07 May 2023 23:44:26 +0000
ROA not after: Thu 08 May 2025 23:44:26 +0000
asID: 18734
IP address blocks: 201.148.16.0/24 maxlen: 24
189.202.211.0/24 maxlen: 24
189.202.229.0/24 maxlen: 24
189.202.128.0/17 maxlen: 24
189.202.144.0/24 maxlen: 24
189.202.248.0/24 maxlen: 24
189.202.251.0/24 maxlen: 24
189.202.252.0/24 maxlen: 24
200.57.8.0/24 maxlen: 24
200.57.10.0/24 maxlen: 24
189.204.235.0/24 maxlen: 24
189.204.236.0/24 maxlen: 24
189.204.250.0/24 maxlen: 24
189.202.248.0/23 maxlen: 24
189.204.200.0/24 maxlen: 24
200.57.16.0/20 maxlen: 24
201.148.0.0/18 maxlen: 24
201.148.64.0/19 maxlen: 24
189.204.128.0/17 maxlen: 24
168.197.120.0/22 maxlen: 24
200.33.74.0/24 maxlen: 24
200.33.84.0/24 maxlen: 24
201.140.80.0/20 maxlen: 24
201.140.96.0/19 maxlen: 24
200.57.0.0/20 maxlen: 24
189.202.181.0/24 maxlen: 24
189.202.182.0/24 maxlen: 24
138.122.144.0/22 maxlen: 24
2001:1278:e::/47 maxlen: 48
2001:1278:5::/48 maxlen: 48
2001:1278:6::/47 maxlen: 48
2001:1278:8::/45 maxlen: 48
2001:1278::/32 maxlen: 48
2001:1278:6::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1984086 (0x1e4656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Validity
Not Before: May 7 23:44:26 2023 GMT
Not After : May 8 23:44:26 2025 GMT
Subject: CN=fb79e54cf9f243b9a17f8d1d1095240e93ec30e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:6f:c2:65:6c:fa:27:60:df:16:c3:4d:fe:
d1:0f:74:8f:76:1d:ac:81:9e:87:19:27:a6:be:d3:
ed:45:18:52:32:95:27:4f:2a:5f:3f:89:4e:b3:c0:
92:bc:53:b8:6b:02:88:c4:0c:51:f6:38:fe:31:99:
85:7b:47:de:13:cb:41:db:21:80:b3:5d:a9:12:c1:
c1:77:5b:b4:ef:17:a7:93:31:7e:c1:dc:6f:f1:f8:
8e:18:b2:f2:e8:5e:74:a2:5b:76:d4:0d:be:70:7e:
6b:ed:f0:38:90:fd:9c:61:53:61:40:9a:26:d2:af:
91:73:63:44:f7:94:2e:75:a3:3d:b8:2b:62:ce:89:
22:26:90:15:71:b5:f3:dd:27:6b:44:2f:65:fd:a2:
a9:5f:5a:18:f2:9b:91:6e:70:5d:80:27:3c:e4:f0:
6d:ed:7e:c1:be:27:ec:9d:44:a0:c4:20:86:cd:9c:
57:7d:6e:5c:9d:06:2a:9b:b0:56:c1:02:97:bd:84:
89:17:24:ed:f1:04:f6:f8:d3:03:dc:15:05:64:4e:
ff:f1:ae:ca:2a:be:4f:1c:f4:12:1e:65:f1:fe:1c:
b1:a9:d1:dd:d2:76:84:51:16:38:12:d2:41:74:ce:
76:4f:99:26:d4:3f:9f:9a:68:5a:a8:58:f1:ef:b4:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1F:9C:29:70:24:30:A8:BF:F6:08:F0:E1:0E:C5:61:96:28:21:D2
X509v3 Authority Key Identifier:
keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/fb79e54cf9f243b9a17f8d1d1095240e93ec30e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.144.0/22
168.197.120.0/22
189.202.128.0/17
189.204.128.0/17
200.33.74.0/24
200.33.84.0/24
200.57.0.0/19
201.140.80.0-201.140.127.255
201.148.0.0-201.148.95.255
IPv6:
2001:1278::/32
Signature Algorithm: sha256WithRSAEncryption
10:36:40:3e:9b:4e:3f:8f:43:31:7e:36:a9:9e:69:70:b1:6a:
79:8d:4e:d7:6b:7d:36:b8:7e:66:9f:10:10:f4:86:83:cc:4b:
cb:fd:eb:8c:db:3f:ac:6a:7e:50:2c:31:54:66:32:e1:e9:39:
24:88:af:b2:5b:3d:28:ab:e4:7f:d7:11:d0:28:e9:88:1a:ec:
1d:8b:f9:ee:a3:56:80:4c:3c:77:3c:bb:65:5c:86:61:88:42:
4d:07:12:88:cd:3c:21:d4:f6:dd:1b:46:12:95:19:bb:1f:f7:
4c:95:74:69:b9:20:f9:45:12:aa:35:a7:c4:1b:03:b3:ea:e0:
63:95:96:05:75:61:53:94:4f:8e:07:16:88:f6:2a:e1:f4:e6:
45:8c:97:a2:78:7f:f7:85:97:17:e5:c4:b4:03:21:6b:88:f3:
d7:35:fe:7d:1d:51:85:d1:9f:68:bb:58:9d:24:3a:05:c2:2a:
f1:92:c6:12:54:25:74:45:86:52:65:a4:d2:71:9f:3a:3f:c4:
ed:3f:8b:89:f0:9d:5f:0c:38:f6:cd:c4:81:67:30:03:a9:31:
04:45:6e:ad:07:f9:f2:38:46:9d:2d:be:13:b6:7e:e6:f2:45:
21:fb:9e:4f:15:92:eb:b7:08:f7:a1:6b:72:7f:ac:b7:b4:e1:
40:2c:49:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net