Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/248430460a55c4302a220edebcf65f5dc32d023f.roa
File: 248430460a55c4302a220edebcf65f5dc32d023f.roa (raw, json)
Hash identifier: 8qYSXwvs887wb21jFE4Toj6aDw1+wQfs797TeldMlSA=
Subject key identifier: B9:69:B7:0D:57:2A:B3:D4:BE:39:59:49:3E:80:0A:95:4D:D4:82:78
Certificate issuer: /CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Certificate serial: 229F3A
Authority key identifier: 0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/248430460a55c4302a220edebcf65f5dc32d023f.roa
Signing time: Fri 21 Jul 2023 19:12:27 +0000
ROA not before: Thu 20 Jul 2023 19:12:26 +0000
ROA not after: Mon 21 Jul 2025 19:12:26 +0000
asID: 262589
IP address blocks: 190.211.160.0/21 maxlen: 24
190.211.168.0/23 maxlen: 24
190.211.172.0/24 maxlen: 24
190.211.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 20:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2268986 (0x229f3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Validity
Not Before: Jul 20 19:12:26 2023 GMT
Not After : Jul 21 19:12:26 2025 GMT
Subject: CN=248430460a55c4302a220edebcf65f5dc32d023f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:4d:9b:50:e7:b4:29:13:ef:fc:04:e2:78:
83:68:ce:86:8d:e9:30:78:e4:b4:93:ae:39:d5:19:
7f:3e:54:f6:7f:97:e3:c0:7f:29:bf:6d:58:70:58:
38:84:9b:82:8e:4e:52:78:86:c4:35:66:7b:7e:ed:
ad:7f:5f:d3:32:78:21:29:db:3b:01:93:4b:1a:98:
65:ba:8d:25:ba:62:ba:5b:a9:95:da:0d:a2:90:8d:
d1:ac:78:6a:44:22:3e:c5:2f:23:e0:82:84:3f:47:
7a:d2:32:10:8a:21:ad:a6:d4:cf:36:d1:13:57:5e:
0a:47:54:b8:3a:1d:84:bf:28:6b:e6:bd:38:19:a8:
a5:7a:b0:4a:37:b1:ac:79:a5:84:19:17:f7:03:eb:
8d:45:8d:52:dc:91:c9:66:47:9b:6a:e6:0d:1b:2b:
b6:00:00:2b:58:6b:8c:38:4f:d1:03:c4:a6:d5:13:
2a:cf:a2:18:64:7c:02:32:2a:ce:73:94:33:40:7b:
a1:40:c7:04:3b:87:65:88:29:90:bc:8f:b0:98:fb:
93:8c:0b:86:68:f4:53:3e:41:42:2b:dc:4e:40:a4:
38:6f:79:37:e1:11:9c:09:80:40:85:1e:ba:99:b8:
cc:f9:1b:45:86:9d:f8:bf:e2:6e:c9:e1:68:21:ae:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:69:B7:0D:57:2A:B3:D4:BE:39:59:49:3E:80:0A:95:4D:D4:82:78
X509v3 Authority Key Identifier:
keyid:0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/248430460a55c4302a220edebcf65f5dc32d023f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/44abde35adbcf04fb85f8b032b43e458648b74b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.211.160.0-190.211.169.255
190.211.172.0/24
190.211.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e8:1e:50:9e:31:05:48:43:d8:34:ac:1e:ee:e2:cf:1a:05:
0b:bb:c2:10:6c:15:be:ef:9e:82:a6:4c:aa:06:dc:b1:33:fd:
28:68:a3:e7:1a:7c:b1:11:7b:a7:2e:80:70:c2:eb:cd:1f:75:
1e:a9:c7:f9:4e:a8:19:7f:fd:a3:37:79:3e:da:2f:5a:4a:e3:
27:04:91:27:3d:2c:93:66:f8:2e:5c:ef:5f:bf:09:97:97:c4:
8f:1d:a3:9c:1d:9c:20:ef:36:81:de:d8:6f:43:8b:1a:f4:69:
95:5e:54:f8:f8:3d:95:5a:c8:7d:bd:33:a4:48:21:1e:af:a8:
35:e0:74:cd:54:13:fb:9a:b8:3e:49:92:16:44:f1:3b:d3:5c:
2a:54:62:69:bf:8e:5f:dd:20:80:60:5d:b8:18:b6:45:63:2b:
cd:32:b5:a4:ab:e9:3a:c9:ac:cc:9b:1c:27:22:f7:1d:83:ca:
86:43:56:f4:4b:18:65:27:fb:a0:09:5e:af:52:87:6c:04:ab:
20:54:18:26:ec:3b:88:3c:51:8c:d5:90:47:e0:1d:7c:ea:e7:
08:38:15:0e:8f:f8:eb:05:25:67:9c:cb:af:c0:ab:13:f1:2c:
80:97:8e:cf:b0:a7:2c:2e:c8:81:74:d8:06:4d:cf:89:6e:09:
9e:8a:4d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 23:12:42 2024 by rpki-client on console-ams.rpki-client.org