Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/49d2731c48afae6243ea4e99771f9697d43f909f.roa
File: 49d2731c48afae6243ea4e99771f9697d43f909f.roa (raw, json)
Hash identifier: gy7m43TA0enerV9BEURgOJofqHGU7cdG1gBE+hVVAnI=
Subject key identifier: B3:F1:DE:B4:69:EC:AF:16:BC:2F:F2:80:4C:4F:49:3C:0C:12:ED:10
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 1B6E1C
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/49d2731c48afae6243ea4e99771f9697d43f909f.roa
Signing time: Tue 24 May 2022 20:05:03 +0000
ROA not before: Tue 07 Dec 2021 03:00:00 +0000
ROA not after: Thu 07 Dec 2023 03:00:00 +0000
asID: 10620
IP address blocks: 190.158.204.0/22 maxlen: 24
201.221.172.0/22 maxlen: 24
181.57.248.0/23 maxlen: 23
181.57.250.0/23 maxlen: 23
181.52.218.0/23 maxlen: 23
190.145.240.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797660 (0x1b6e1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Dec 7 03:00:00 2021 GMT
Not After : Dec 7 03:00:00 2023 GMT
Subject: CN=49d2731c48afae6243ea4e99771f9697d43f909f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:74:fa:01:1c:cf:19:40:53:bc:e4:92:0c:7c:
7f:19:57:be:00:79:a2:3d:18:c3:de:5c:e5:28:c0:
55:f8:32:27:b8:bc:06:b8:1f:df:4c:41:88:5d:58:
a2:65:7a:1a:1b:cf:48:1b:c4:e5:e5:98:0e:8c:5a:
d6:fd:4f:75:e9:72:e8:10:84:c2:99:3c:81:32:d9:
16:95:53:65:fe:19:57:e7:f9:74:f6:ec:4e:62:81:
09:e9:ad:47:39:62:f8:9f:ad:5d:32:9e:38:07:1a:
c3:c6:07:19:a1:c7:77:b1:f5:e0:a0:74:6b:56:25:
d4:66:f1:2e:59:19:09:4e:0d:09:79:b4:29:6c:48:
a9:88:11:d3:4b:dd:63:42:f2:ed:7d:51:41:87:64:
f0:96:d5:d0:7f:4c:4e:89:2f:1f:32:f6:24:e1:0f:
6e:ef:68:e2:8e:90:ac:01:9f:83:5a:e4:db:c9:f3:
98:82:3f:18:5e:99:fb:22:1f:d3:b5:9c:46:30:56:
06:30:e1:64:ca:01:4c:8e:5b:ae:0e:c3:c7:f2:51:
7b:03:27:d3:45:d3:b1:0c:47:e8:1b:df:dd:1b:c3:
70:9d:4a:19:9f:b1:af:8a:e9:56:d2:28:8a:4b:97:
e7:43:b0:60:d5:ef:60:0b:ef:13:34:35:60:82:12:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F1:DE:B4:69:EC:AF:16:BC:2F:F2:80:4C:4F:49:3C:0C:12:ED:10
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/49d2731c48afae6243ea4e99771f9697d43f909f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.52.218.0/23
181.57.248.0/22
190.145.240.0/22
190.158.204.0/22
201.221.172.0/22
Signature Algorithm: sha256WithRSAEncryption
60:f1:10:e7:a8:a5:4a:78:a9:cc:df:51:b1:7a:bd:72:4e:40:
9b:df:28:c0:a8:8d:90:5e:08:7d:80:e5:0c:f9:3c:2a:b2:d4:
73:fb:7e:74:fc:f7:a7:34:73:5a:cc:4e:a0:07:9e:38:88:a9:
0b:f9:31:e8:8e:dd:48:20:4c:3a:ff:73:e5:2d:46:fa:a8:be:
5c:49:69:97:f1:62:50:f9:35:36:0b:aa:81:bd:03:56:f2:8d:
9e:5b:ce:12:aa:cd:a1:8a:f7:45:78:c0:ae:c8:45:d7:75:04:
62:48:41:e5:3e:f3:c9:38:33:d9:d6:fb:4d:2e:ff:f9:67:98:
8e:13:bb:41:26:c5:ff:22:48:cd:76:7b:f5:0a:66:cf:e8:d5:
2e:11:7d:c9:12:e4:56:f4:9c:43:59:99:5c:db:d9:5f:a2:b9:
c4:f7:e8:b9:c8:fe:29:2e:9f:7c:e7:75:21:9d:1b:3f:9d:c6:
d0:5a:47:ec:c4:91:9d:6f:6f:d1:da:e8:a6:08:aa:1c:4b:4c:
94:c6:f5:a6:49:f5:30:ab:02:9b:d1:bb:e5:f9:56:cb:6a:12:
5a:62:71:65:b9:c0:fa:94:62:15:34:c4:98:92:bc:ed:de:d5:
45:35:d9:99:ff:12:0f:e3:77:25:68:1e:ed:74:4f:7f:18:b0:
08:a3:f8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 08:18:14 2023 by rpki-client on console-ams.rpki-client.org