Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/6d92b54c4de627feba16e3459d198df8c8393c17.roa
File: 6d92b54c4de627feba16e3459d198df8c8393c17.roa (raw, json)
Hash identifier: PhX68/sg/jcXhjKqfD3n/HfVZoD7+Dlg27hwxjodWO8=
Subject key identifier: 63:FA:B6:FF:5F:73:B1:C3:E1:FC:43:09:39:70:F6:AA:66:B3:E0:0B
Certificate issuer: /CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Certificate serial: 0BAC67
Authority key identifier: 63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/6d92b54c4de627feba16e3459d198df8c8393c17.roa
Signing time: Wed 24 Mar 2021 22:49:47 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 15107
IP address blocks: 148.244.42.0/24 maxlen: 24
148.244.45.0/24 maxlen: 24
148.244.47.0/24 maxlen: 24
148.244.48.0/22 maxlen: 24
148.244.53.0/24 maxlen: 24
148.244.54.0/23 maxlen: 24
148.244.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 765031 (0xbac67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=6d92b54c4de627feba16e3459d198df8c8393c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5c:a3:c1:d3:c6:b9:0f:6d:a0:21:72:d4:43:
e3:63:ee:8f:5a:85:d2:81:74:b2:36:2b:b5:b3:f2:
1c:3a:ae:a8:48:e8:96:cd:78:ac:00:7d:7b:53:b9:
4c:4c:04:6e:04:14:f9:33:f7:79:99:eb:10:60:44:
36:ac:95:37:78:dd:62:19:1a:af:ba:43:50:d6:a4:
71:b9:0d:47:3b:14:07:a0:7b:95:55:a4:e5:74:64:
7d:ae:35:17:f5:42:37:97:36:10:70:ac:e8:c2:d9:
d7:b9:7e:7b:99:bb:1f:17:f6:5d:e2:48:b3:68:d8:
d8:98:41:ea:58:06:20:26:85:52:6b:4d:88:ab:a1:
bf:8d:40:c0:3d:e0:aa:10:47:83:33:19:a6:ee:50:
d0:35:47:34:82:2a:3b:15:eb:23:d3:c9:89:2f:be:
34:b0:b5:45:b9:fb:bb:78:df:c2:c2:c1:3e:c6:54:
3d:8e:e9:35:95:87:e5:b1:e3:a8:ff:d6:58:6d:6f:
2c:65:a5:2f:8c:89:d6:27:e6:40:51:f0:01:03:b1:
79:73:a3:10:be:d2:9a:f2:0e:39:fd:b9:ce:2d:3e:
33:0e:19:ff:2e:bf:4b:60:18:e4:79:59:bf:83:9f:
e4:a0:bd:64:80:d7:7c:15:13:ea:96:14:8e:ce:0e:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FA:B6:FF:5F:73:B1:C3:E1:FC:43:09:39:70:F6:AA:66:B3:E0:0B
X509v3 Authority Key Identifier:
keyid:63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/6d92b54c4de627feba16e3459d198df8c8393c17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/0932ed7fc7587a11240901c76c1f6f64f3020149.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.244.42.0/24
148.244.45.0/24
148.244.47.0-148.244.51.255
148.244.53.0-148.244.55.255
148.244.57.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:35:0a:fd:44:46:90:8d:17:d4:61:b0:93:1b:fa:31:2d:55:
0e:0c:8f:d5:ec:16:43:11:38:c6:6b:d3:a3:b2:42:c2:94:dd:
e6:aa:e5:15:b8:19:cc:f9:02:c6:ae:c2:3b:61:32:5d:ef:56:
e3:5d:7f:3d:3b:01:72:94:19:88:c4:8a:1a:27:bd:82:67:98:
76:62:3d:f6:a0:89:ae:78:25:41:c4:31:47:cc:5b:dc:3f:b8:
6b:40:f8:32:71:2a:e8:1b:80:9a:b5:91:ef:ea:87:93:2f:8f:
a7:df:5d:5d:af:ca:0f:91:0a:ec:b8:9b:4e:f4:fb:13:d4:11:
99:85:76:91:0c:13:18:2a:0b:45:e8:6d:a3:68:58:d1:38:bb:
1b:5e:06:c5:c7:1a:a3:8b:06:2f:3d:fe:fe:cf:3d:64:85:dd:
ff:1c:19:f3:ed:d1:87:4f:5a:0a:0b:66:1d:3e:fc:ee:ed:ee:
f2:c7:eb:8a:8d:28:8e:c1:4a:5f:08:2e:7a:34:00:06:e6:8f:
1a:c5:12:d0:09:ff:54:e1:14:43:69:6a:91:d9:18:13:64:0d:
24:ba:ff:8b:19:9d:df:b9:d9:94:dc:6c:82:ae:12:e9:f6:c2:
8c:5e:ef:38:07:38:a0:30:e8:90:a1:5c:e6:23:c9:11:6f:c1:
8a:b5:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:58 2023 by rpki-client on console-ams.rpki-client.org