Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/9161fb13d159a5910fa88d69ad37600557aa9849.roa
File: 9161fb13d159a5910fa88d69ad37600557aa9849.roa (raw, json)
Hash identifier: Qh1iQxEr2LbnxkuZS9bqXq3YasrLXsJea95KVyhVmoc=
Subject key identifier: C4:D4:74:38:E1:1A:BB:08:9A:64:F3:4B:1C:AE:4E:09:93:C5:3D:99
Certificate issuer: /CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Certificate serial: 1960BF
Authority key identifier: FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/9161fb13d159a5910fa88d69ad37600557aa9849.roa
Signing time: Fri 18 Nov 2022 02:03:56 +0000
ROA not before: Mon 09 May 2022 03:00:00 +0000
ROA not after: Sun 10 May 2026 03:00:00 +0000
asID: 28116
IP address blocks: 146.83.232.0/24 maxlen: 24
146.83.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1663167 (0x1960bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48947433eb003e1a071f4fff5deb96c87a6919a3
Validity
Not Before: May 9 03:00:00 2022 GMT
Not After : May 10 03:00:00 2026 GMT
Subject: CN=9161fb13d159a5910fa88d69ad37600557aa9849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ad:b1:f8:3e:39:32:7c:6e:c4:d9:9a:7b:06:
a6:ca:bb:2b:82:2c:ca:8e:23:5d:df:b8:cb:7d:53:
36:48:e9:fa:77:0a:8d:ac:3a:46:ab:e5:c5:82:ef:
a8:fd:4f:c5:2b:29:2c:7a:32:ad:08:53:5c:c8:a1:
c7:ca:a7:f4:4e:41:41:93:19:73:bc:02:02:2a:d0:
3a:7b:e6:77:30:5f:8e:3a:1c:42:d4:d8:4a:3e:e6:
dc:48:ad:8d:df:e3:4f:e2:87:c8:4e:b5:83:4c:e9:
1a:9d:3d:8f:fe:ef:cb:9c:2f:3a:9f:e9:35:96:14:
4d:f2:22:98:e1:0d:a3:b2:17:53:45:d7:57:bd:4e:
21:eb:9f:95:4d:68:32:cc:71:43:6a:d7:f4:63:1c:
0d:f4:0e:91:2c:35:41:31:40:1c:ab:96:e3:23:57:
1f:9a:f1:f6:8e:6f:62:c6:8a:a6:bb:a8:62:93:49:
15:23:ad:d8:61:a2:c2:69:24:37:76:d3:e6:bf:11:
ff:28:63:01:28:17:22:ac:4a:56:8a:29:cc:03:8e:
44:9b:a2:ac:b3:2e:1d:3c:be:c4:16:aa:8a:b9:e8:
29:25:ab:20:76:a8:ae:ed:19:1f:ba:06:00:c1:de:
d2:58:91:d3:09:70:b2:b6:c9:01:0d:27:cd:66:d2:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D4:74:38:E1:1A:BB:08:9A:64:F3:4B:1C:AE:4E:09:93:C5:3D:99
X509v3 Authority Key Identifier:
keyid:FF:C6:7A:F9:6D:51:27:E4:85:88:39:82:E5:B5:0A:0C:08:63:B6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48947433eb003e1a071f4fff5deb96c87a6919a3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/9161fb13d159a5910fa88d69ad37600557aa9849.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a493b408-5ac1-43a8-9ebe-996d29938ef2/48947433eb003e1a071f4fff5deb96c87a6919a3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.83.232.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:f5:48:12:41:ad:b4:fc:f1:23:f0:7b:e2:1b:59:e5:4b:b6:
0b:d6:fe:55:19:32:d5:10:ec:00:7c:26:6e:4d:b4:57:0c:85:
6e:56:a7:69:29:ef:ea:07:53:87:25:98:57:fa:ba:44:bb:c1:
a4:36:69:a4:94:23:35:58:d3:15:f5:20:7a:6e:88:fa:47:2b:
9b:52:ec:a9:a3:e6:37:d2:2d:c3:e5:d8:f5:fb:de:22:5f:45:
3e:ba:7b:71:10:81:f1:51:57:05:cc:21:03:ab:b5:86:fd:29:
f2:9b:5c:c2:20:d5:11:74:05:e9:1c:8c:07:69:e1:9d:8e:19:
97:76:8c:d3:a0:df:c6:db:51:d1:f5:61:27:0f:87:f7:c5:60:
4f:43:d6:c4:1a:99:82:5f:70:3f:49:0f:9c:52:98:8f:df:f4:
df:85:cd:f8:91:c9:14:4a:cf:5f:28:d9:15:8c:d5:77:88:3a:
b0:ac:b2:1a:37:7b:e0:8b:fe:49:e9:64:74:dc:eb:27:2e:e1:
a4:40:a5:06:68:3e:08:c7:5b:59:de:9a:98:07:65:25:9b:d3:
3d:21:a8:e1:32:e3:0a:5e:94:86:5c:35:e5:19:fe:c5:68:d8:
da:73:00:b3:d6:90:cd:14:1f:3d:26:2b:c5:50:69:2d:1e:fd:
e8:90:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:49 2023 by rpki-client on console-ams.rpki-client.org