Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ff6c6bd2-fe78-4c60-85c1-322090cd95bf/50959917106ebcc84aaf48ee381cc911f0c587d1.roa
File: 50959917106ebcc84aaf48ee381cc911f0c587d1.roa (raw, json)
Hash identifier: o4/vFp5D5kUHN1UfSb7Cqr74+gdzSSoGmIrOwFlfvpc=
Subject key identifier: 70:ED:AE:75:0D:BE:61:F5:B3:B0:33:C5:6E:E2:F6:CF:D7:E0:90:2F
Certificate issuer: /CN=ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0
Certificate serial: 04C3A6
Authority key identifier: 02:A5:56:3B:A0:72:3F:25:B5:F3:32:14:81:3D:C5:B9:9E:6D:7A:F2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ff6c6bd2-fe78-4c60-85c1-322090cd95bf/50959917106ebcc84aaf48ee381cc911f0c587d1.roa
Signing time: Fri 28 May 2021 23:44:30 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Fri 24 Mar 2023 03:00:00 +0000
asID: 15236
IP address blocks: 148.213.0.0/18 maxlen: 18
148.213.112.0/20 maxlen: 20
148.213.128.0/19 maxlen: 19
148.213.160.0/19 maxlen: 19
148.213.64.0/20 maxlen: 20
148.213.80.0/20 maxlen: 20
148.213.96.0/20 maxlen: 20
148.213.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312230 (0x4c3a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2023 GMT
Subject: CN=50959917106ebcc84aaf48ee381cc911f0c587d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:55:3c:ec:49:34:5d:df:2d:d5:53:8c:fd:
c2:76:d2:7b:b1:50:7a:5f:61:5c:59:47:fa:88:3d:
4f:8e:e4:b6:b3:4b:7d:1d:22:cf:c0:2c:3d:66:1b:
f2:8c:95:33:46:25:7b:35:2c:25:b7:90:70:5f:5d:
1b:23:b6:18:4d:91:09:37:6b:95:73:45:b5:42:fa:
30:ad:0e:24:3a:75:af:e6:47:14:c9:a5:67:f2:c5:
dd:70:82:88:4e:ea:c1:68:52:b9:a4:7c:66:df:57:
10:06:5f:28:49:0c:4d:29:81:5e:96:49:d9:6e:f9:
bd:dc:19:01:87:81:02:9b:4f:e7:81:fb:34:46:eb:
92:ff:e8:b5:ee:c5:58:49:45:c1:c5:8f:6b:f2:86:
11:9a:98:38:2f:73:3c:07:38:2b:37:d8:aa:9e:ee:
9f:c7:d3:d0:52:4d:db:bc:9b:74:4f:71:22:33:d6:
09:a7:2f:f4:db:29:72:5d:a5:ad:96:19:2c:9a:b2:
ae:7f:9a:45:74:a7:d1:57:99:32:c8:ba:47:70:ce:
9b:41:45:1b:c1:62:59:c9:88:45:60:82:52:16:14:
a4:e5:86:dd:7f:b6:bc:42:af:7f:e3:5b:33:f5:52:
3f:a4:fc:d0:c3:e3:ff:ea:e6:89:db:04:82:dc:f8:
68:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:ED:AE:75:0D:BE:61:F5:B3:B0:33:C5:6E:E2:F6:CF:D7:E0:90:2F
X509v3 Authority Key Identifier:
keyid:02:A5:56:3B:A0:72:3F:25:B5:F3:32:14:81:3D:C5:B9:9E:6D:7A:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ff6c6bd2-fe78-4c60-85c1-322090cd95bf/50959917106ebcc84aaf48ee381cc911f0c587d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ff6c6bd2-fe78-4c60-85c1-322090cd95bf/ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.213.0.0-148.213.191.255
148.213.246.0/24
Signature Algorithm: sha256WithRSAEncryption
57:dd:e3:aa:8d:7d:b9:7a:18:3a:f0:3d:d1:a7:64:10:4a:c9:
2a:74:a0:f1:d3:26:f7:11:db:c1:99:72:9d:29:b4:ec:ae:c1:
17:91:0a:e8:fc:fd:e9:f0:3f:ed:85:80:4c:23:f3:f4:db:55:
3b:73:47:21:9c:76:3e:c4:19:2e:df:f3:81:8d:89:0a:4c:6c:
20:3a:b2:11:b5:2b:d4:ab:8f:64:63:2f:74:4a:6b:37:38:52:
0e:4b:4b:52:b4:f8:cb:d8:d6:6e:25:4c:c0:90:07:15:1d:03:
3d:6c:09:00:de:9e:82:c2:2e:bb:12:33:4b:80:05:dc:65:97:
3a:b5:37:fa:1c:e7:e9:46:52:d6:c4:91:ea:b8:c6:0b:bf:17:
3b:35:e4:76:27:ea:ac:66:67:66:97:9b:93:0f:c8:87:09:f2:
8f:3d:47:ba:2a:33:3d:0c:41:2e:18:86:ba:73:1b:79:1d:2f:
5f:ef:3a:50:f6:2d:5d:48:03:bc:21:bf:80:d4:c1:d6:e1:6a:
7d:73:4d:f4:7f:fa:3d:40:b2:4a:90:c2:23:5c:5a:fe:0d:d6:
73:1a:9a:c3:91:80:6d:a1:48:23:c3:40:c6:df:0e:a1:12:9e:
75:d1:1f:de:59:5e:d7:ac:ff:3d:d8:ed:f1:a6:ec:f1:fb:84:
b2:a6:c1:f4
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIDBMOmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFj
NDdjNmI0YTVjZjVjY2NlNTQ2YmE1YzNiNWQwZWU5NmZlYzdkZDAwHhcNMjEwMzI0
MDMwMDAwWhcNMjMwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg1MDk1OTkxNzEwNmVi
Y2M4NGFhZjQ4ZWUzODFjYzkxMWYwYzU4N2QxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv9NVPOxJNF3fLdVTjP3CdtJ7sVB6X2FcWUf6iD1PjuS2s0t9
HSLPwCw9ZhvyjJUzRiV7NSwlt5BwX10bI7YYTZEJN2uVc0W1QvowrQ4kOnWv5kcU
yaVn8sXdcIKITurBaFK5pHxm31cQBl8oSQxNKYFelknZbvm93BkBh4ECm0/ngfs0
RuuS/+i17sVYSUXBxY9r8oYRmpg4L3M8BzgrN9iqnu6fx9PQUk3bvJt0T3EiM9YJ
py/02ylyXaWtlhksmrKuf5pFdKfRV5kyyLpHcM6bQUUbwWJZyYhFYIJSFhSk5Ybd
f7a8Qq9/41sz9VI/pPzQw+P/6uaJ2wSC3Pho9wIDAQABo4ICaDCCAmQwHQYDVR0O
BBYEFHDtrnUNvmH1s7AzxW7i9s/X4JAvMB8GA1UdIwQYMBaAFAKlVjugcj8ltfMy
FIE9xbmebXryMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWM0N2M2
YjRhNWNmNWNjY2U1NDZiYTVjM2I1ZDBlZTk2ZmVjN2RkMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmY2YzZiZDItZmU3OC00YzYwLTg1YzEtMzIyMDkw
Y2Q5NWJmLzUwOTU5OTE3MTA2ZWJjYzg0YWFmNDhlZTM4MWNjOTExZjBjNTg3ZDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZjZjNmJkMi1mZTc4LTRjNjAtODVjMS0zMjIw
OTBjZDk1YmYvYWM0N2M2YjRhNWNmNWNjY2U1NDZiYTVjM2I1ZDBlZTk2ZmVjN2Rk
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAsBggrBgEFBQcBBwEB/wQd
MBswGQQCAAEwEzALAwMAlNUDBAaU1YADBACU1fYwDQYJKoZIhvcNAQELBQADggEB
AFfd46qNfbl6GDrwPdGnZBBKySp0oPHTJvcR28GZcp0ptOyuwReRCuj8/enwP+2F
gEwj8/TbVTtzRyGcdj7EGS7f84GNiQpMbCA6shG1K9Srj2RjL3RKazc4Ug5LS1K0
+MvY1m4lTMCQBxUdAz1sCQDenoLCLrsSM0uABdxllzq1N/oc5+lGUtbEkeq4xgu/
Fzs15HYn6qxmZ2aXm5MPyIcJ8o89R7oqMz0MQS4YhrpzG3kdL1/vOlD2LV1IA7wh
v4DUwdbhan1zTfR/+j1AskqQwiNcWv4N1nMamsORgG2hSCPDQMbfDqESnnXRH95Z
Xtes/z3Y7fGm7PH7hLKmwfQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-fra.rpki-client.org