Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/a9695a50e21498d630480c94d9b829c941db5c3e.roa
File: a9695a50e21498d630480c94d9b829c941db5c3e.roa (raw, json)
Hash identifier: 2mJltsFBmr3wiSSFhHnps2CFY5+4cWkYUpiF0g72lB4=
Subject key identifier: 58:A6:E8:84:9C:B4:95:EC:99:F6:3F:0B:95:C5:0D:17:EB:3B:D8:12
Certificate issuer: /CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Certificate serial: 1D5818
Authority key identifier: 63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/a9695a50e21498d630480c94d9b829c941db5c3e.roa
Signing time: Fri 24 Mar 2023 08:30:23 +0000
ROA not before: Thu 23 Mar 2023 08:30:23 +0000
ROA not after: Sat 22 Mar 2025 08:30:23 +0000
asID: 15107
IP address blocks: 148.244.42.0/24 maxlen: 24
148.244.45.0/24 maxlen: 24
148.244.47.0/24 maxlen: 24
148.244.48.0/22 maxlen: 24
148.244.53.0/24 maxlen: 24
148.244.54.0/23 maxlen: 24
148.244.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1923096 (0x1d5818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Validity
Not Before: Mar 23 08:30:23 2023 GMT
Not After : Mar 22 08:30:23 2025 GMT
Subject: CN=a9695a50e21498d630480c94d9b829c941db5c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:ab:8e:d6:f2:bb:94:c2:e2:29:cc:30:5c:
0b:db:84:af:c6:8d:c8:0e:bd:19:82:e1:3d:8b:16:
f6:d4:c8:a8:a2:07:9f:32:86:0c:96:82:a2:3b:b1:
bb:aa:76:ae:56:75:98:8e:43:97:cf:05:17:bb:d9:
00:63:7b:f6:67:f9:ab:2d:a6:66:9e:dd:8c:3c:03:
ce:0e:bb:5b:87:0a:1d:4c:f3:5d:63:e3:28:13:62:
86:07:70:56:a0:90:81:da:13:93:92:ce:3a:4c:f4:
23:54:59:ac:c7:50:03:0e:9d:dd:33:3e:c2:1e:83:
cd:b7:ee:19:08:d7:aa:e2:4f:35:3c:87:2a:3f:9c:
3b:0b:ff:c2:8f:ba:a2:b6:df:62:2b:df:62:a4:ca:
33:f1:1f:a2:96:e0:43:3c:e5:50:a4:96:91:4b:1a:
99:13:47:0c:d6:2d:92:07:84:8c:e8:51:95:ee:9f:
c8:a8:51:ac:85:97:87:5e:e3:2b:af:8b:ac:61:e1:
a6:bc:7a:ec:54:c4:a0:e3:94:39:fe:dc:93:c6:b4:
9e:16:a4:63:b4:a5:a2:ba:c7:77:c3:85:a9:af:1c:
6b:82:15:21:11:89:7c:42:0e:2d:2b:fe:5d:36:f5:
1f:a9:69:0e:a2:aa:77:6c:d0:bd:14:63:bb:42:de:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A6:E8:84:9C:B4:95:EC:99:F6:3F:0B:95:C5:0D:17:EB:3B:D8:12
X509v3 Authority Key Identifier:
keyid:63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/a9695a50e21498d630480c94d9b829c941db5c3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/0932ed7fc7587a11240901c76c1f6f64f3020149.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.244.42.0/24
148.244.45.0/24
148.244.47.0-148.244.51.255
148.244.53.0-148.244.55.255
148.244.57.0/24
Signature Algorithm: sha256WithRSAEncryption
61:0e:e6:7d:c6:9b:dc:11:e8:e0:d0:d8:5d:2f:1d:be:cc:9c:
37:a9:e1:dc:0e:e9:2f:7b:95:fb:83:48:e7:82:a6:01:72:15:
88:b0:69:09:60:bb:6c:53:c4:02:fd:0d:b3:11:47:94:6d:d0:
bc:f6:d0:55:0b:0f:05:cc:ec:4f:b5:61:d5:bd:ae:0f:82:18:
dd:3f:a6:c7:64:d1:cb:c5:77:c5:a2:35:3b:f7:18:46:2e:1e:
fb:be:65:a0:9d:cf:bf:4e:0d:61:11:6d:2c:c3:79:14:c8:13:
1e:eb:d8:05:08:3e:00:82:52:f0:14:7a:4e:f8:59:f7:01:61:
a3:9e:1c:20:c6:5d:bb:f3:f4:35:1b:01:26:6a:67:67:b3:24:
38:58:10:da:1b:a1:ec:d2:ab:da:4c:fc:94:3d:c0:b5:18:c0:
ea:e6:26:09:46:65:b0:7a:57:9a:df:9b:23:da:f3:a9:88:3b:
79:5f:b6:78:95:a0:0b:00:c0:9e:47:94:e3:ee:38:a6:03:fb:
c2:3d:e5:b9:0e:93:9e:87:65:72:97:21:3d:7e:d2:ec:6c:a1:
93:c3:72:63:d2:50:31:5f:44:af:f6:07:85:64:85:0c:48:f8:
eb:0d:33:cc:84:03:84:db:57:10:66:45:0d:23:b1:67:47:1b:
24:b4:95:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org