Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/4d550f635dd4d831cf8c7469b6ad97e931969301.roa
File: 4d550f635dd4d831cf8c7469b6ad97e931969301.roa (raw, json)
Hash identifier: VGDGZcF1hDHO7DcC6vebCTp/yDuWcJ+MBuk/Icwult4=
Subject key identifier: F7:46:30:FC:E8:E3:98:C0:5C:89:4D:5B:7B:AF:7A:10:D0:93:9F:92
Certificate issuer: /CN=88d44f0918975636ffb95bc864d2ead8021849e5
Certificate serial: 135C24
Authority key identifier: 60:5D:91:FC:06:B0:3E:4C:60:D5:39:0D:5E:08:E0:2A:64:C2:A8:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d44f0918975636ffb95bc864d2ead8021849e5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/4d550f635dd4d831cf8c7469b6ad97e931969301.roa
Signing time: Wed 01 Dec 2021 07:42:27 +0000
ROA not before: Wed 01 Dec 2021 03:00:00 +0000
ROA not after: Fri 01 Dec 2023 03:00:00 +0000
asID: 262202
IP address blocks: 170.246.148.0/22 maxlen: 24
170.246.148.0/24 maxlen: 24
170.246.149.0/24 maxlen: 24
170.246.150.0/24 maxlen: 24
170.246.151.0/24 maxlen: 24
190.57.48.0/21 maxlen: 24
190.57.48.0/24 maxlen: 24
190.57.49.0/24 maxlen: 24
190.57.50.0/24 maxlen: 24
190.57.51.0/24 maxlen: 24
190.57.52.0/24 maxlen: 24
190.57.53.0/24 maxlen: 24
190.57.54.0/24 maxlen: 24
190.57.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1268772 (0x135c24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d44f0918975636ffb95bc864d2ead8021849e5
Validity
Not Before: Dec 1 03:00:00 2021 GMT
Not After : Dec 1 03:00:00 2023 GMT
Subject: CN=4d550f635dd4d831cf8c7469b6ad97e931969301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:a6:34:b5:41:04:61:d9:af:cb:29:17:78:
ff:07:a7:a5:c8:91:cc:b9:c0:0c:ed:ce:9f:7c:a5:
cd:9a:fe:78:65:13:94:06:44:f8:cb:1d:b2:1b:7d:
16:56:c5:cd:d1:2e:9f:99:6b:92:3b:c3:0a:f4:83:
1e:ea:d9:7d:a3:d7:62:95:49:e0:f0:71:5a:da:24:
0a:f0:65:ed:d9:12:5e:00:af:bf:70:c0:9d:df:5f:
5e:fa:b5:41:63:d3:f7:bb:d2:79:ec:50:87:6e:69:
dd:ad:a5:b8:67:fc:f2:9d:b9:9e:24:d8:94:16:22:
06:fa:00:10:b2:ad:12:b2:d5:14:74:c8:2b:f8:29:
ad:31:12:1a:81:16:4b:62:41:50:c1:0e:14:93:fa:
d4:a4:97:34:20:ac:cc:a0:b4:63:9e:91:8d:5a:33:
b9:cd:74:ee:bd:bf:d2:dc:3f:35:b6:1a:80:37:e8:
78:55:d2:29:12:af:3a:97:cc:df:b9:cd:59:4a:ee:
f3:a8:77:14:57:1f:8a:10:bc:dc:df:8e:d1:71:83:
c8:1b:28:d1:ca:50:c1:5f:40:f5:a3:f1:c8:9d:90:
83:d4:96:57:a5:eb:59:2d:1e:ca:be:16:70:4b:fc:
33:78:ef:b5:8b:95:0d:10:d9:bf:d9:76:34:24:59:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:46:30:FC:E8:E3:98:C0:5C:89:4D:5B:7B:AF:7A:10:D0:93:9F:92
X509v3 Authority Key Identifier:
keyid:60:5D:91:FC:06:B0:3E:4C:60:D5:39:0D:5E:08:E0:2A:64:C2:A8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d44f0918975636ffb95bc864d2ead8021849e5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/4d550f635dd4d831cf8c7469b6ad97e931969301.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/88d44f0918975636ffb95bc864d2ead8021849e5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.148.0/22
190.57.48.0/21
Signature Algorithm: sha256WithRSAEncryption
38:c5:be:97:f4:25:ca:9e:9f:6d:77:a7:cd:8c:14:24:ba:ba:
88:f9:19:fe:47:87:ec:8e:76:f6:81:53:fb:6d:d5:30:fb:87:
c9:ba:b2:9c:96:2d:bf:4d:93:93:ec:40:1f:3e:68:84:85:65:
18:11:61:76:68:26:39:df:75:b2:78:9f:e0:1f:39:31:6e:a2:
69:64:40:53:76:7d:31:d6:fb:c9:90:7b:cd:7a:37:3c:ea:60:
bb:3c:fd:5c:b2:a0:c6:39:06:b1:ea:09:1c:6e:84:97:ac:c3:
d7:66:24:a6:2c:ed:05:47:4b:df:b3:7b:8a:9d:e6:05:1d:88:
26:28:b8:94:da:f8:3e:68:d3:bf:cd:72:c3:9c:05:9d:14:92:
67:14:e9:77:3d:dc:01:c2:db:c7:d3:94:0c:78:91:12:ec:26:
84:1c:20:a0:90:e7:89:26:ec:d0:53:86:bd:9d:db:1c:5c:ab:
d0:4f:a7:3b:fe:e0:7d:b4:2c:be:66:14:29:c0:f2:5c:8b:23:
22:1c:1d:6b:09:42:1d:09:d2:8b:36:08:d4:08:58:f3:2a:12:
fd:d2:7a:78:5c:92:e3:a1:e4:4c:2d:5b:da:cd:83:71:8e:ca:
f1:c3:d7:03:6d:ed:39:c7:89:f2:b8:dc:84:ab:20:fb:87:49:
b5:74:16:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 16:54:08 2023 by rpki-client on console-ams.rpki-client.org