Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/dd0bffe501e59dc74fc3a7f94ca658a39caf5953.roa
File: dd0bffe501e59dc74fc3a7f94ca658a39caf5953.roa (raw, json)
Hash identifier: KYJA1ibOxi92kovAkuWNKHACzU9I74yxjCxeuuFClpA=
Subject key identifier: B8:4A:BC:CD:76:35:96:2B:9C:EF:B4:4F:3B:A1:2F:F7:06:A9:BB:BD
Certificate issuer: /CN=155b538c76786066deee9490cef7008c3829598e
Certificate serial: 03094E
Authority key identifier: 16:CA:3F:12:15:05:8A:99:58:0B:3F:E2:E8:1D:86:05:A4:33:B2:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/155b538c76786066deee9490cef7008c3829598e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/dd0bffe501e59dc74fc3a7f94ca658a39caf5953.roa
Signing time: Thu 04 Jan 2024 01:38:41 +0000
ROA not before: Thu 04 Jan 2024 01:38:40 +0000
ROA not after: Sun 04 Jan 2026 01:38:40 +0000
asID: 273074
IP address blocks: 45.239.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198990 (0x3094e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=155b538c76786066deee9490cef7008c3829598e
Validity
Not Before: Jan 4 01:38:40 2024 GMT
Not After : Jan 4 01:38:40 2026 GMT
Subject: CN=dd0bffe501e59dc74fc3a7f94ca658a39caf5953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:d5:8d:d3:31:9a:af:8b:22:dd:08:4a:43:
9a:b8:23:45:88:62:5e:88:77:5d:6b:37:48:60:e8:
85:27:c9:3b:2b:7e:26:97:93:c5:8c:91:06:fc:78:
3b:b0:e5:13:64:f9:fe:c9:8f:ff:c3:0c:5e:73:0a:
4f:ec:c2:c7:10:80:78:fb:69:3f:a5:db:aa:15:22:
a3:9f:16:a4:c1:e7:64:00:0f:7e:bc:a4:0f:09:1b:
72:64:af:83:76:01:b7:f0:03:f0:b9:27:96:74:ca:
4a:b0:6f:7c:d4:e8:eb:29:0b:51:6e:7d:14:92:c2:
6a:4d:32:ee:ee:35:d9:83:42:e9:19:e9:38:d6:31:
de:d9:93:6d:1d:ea:4e:49:83:3c:f5:f4:d4:f9:ff:
18:51:35:65:ee:33:93:82:51:f3:93:83:8f:1d:5e:
87:cb:9e:4e:66:48:3b:d9:a2:9a:d4:8d:ca:7d:2c:
b4:3e:54:f6:10:09:e3:dd:88:45:97:3f:d6:2f:68:
42:11:9b:df:aa:a7:3f:08:25:46:91:72:63:89:98:
03:d2:ba:75:fb:f2:08:95:5e:41:d4:17:ea:de:97:
86:d0:d8:af:e4:63:94:eb:39:4e:05:5c:f7:8d:97:
db:6b:b1:b5:e6:04:f5:14:9f:85:fe:73:22:27:88:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4A:BC:CD:76:35:96:2B:9C:EF:B4:4F:3B:A1:2F:F7:06:A9:BB:BD
X509v3 Authority Key Identifier:
keyid:16:CA:3F:12:15:05:8A:99:58:0B:3F:E2:E8:1D:86:05:A4:33:B2:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/155b538c76786066deee9490cef7008c3829598e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/dd0bffe501e59dc74fc3a7f94ca658a39caf5953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/155b538c76786066deee9490cef7008c3829598e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.107.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:30:83:ce:4f:7f:67:b8:ab:4a:4f:f7:c1:07:d1:c0:ca:0c:
e8:e9:bd:dc:4b:db:bb:a6:29:dc:50:2a:eb:83:89:01:96:8f:
37:90:53:93:00:cf:9c:ce:14:f4:54:38:5e:5e:7b:c8:cb:b3:
d1:79:8b:48:f4:32:af:f0:8c:32:8b:4f:57:30:5d:fb:46:4a:
c6:8f:b4:7e:bf:28:a7:24:c9:ce:b2:31:ef:a3:e8:d9:64:81:
c1:aa:d0:aa:ce:ca:5b:7d:3f:a5:56:36:83:06:96:f1:f0:e8:
52:e0:9c:53:41:dc:18:d0:50:ae:7a:ca:57:1b:74:4b:a7:9a:
f0:d2:f8:3d:4b:26:84:fb:d6:2c:41:78:20:62:f0:11:6e:6d:
4b:a1:69:86:af:ee:58:cb:33:d3:e1:3a:f7:e4:8d:65:a2:6b:
ce:38:92:71:63:09:30:1e:91:c9:d8:e9:71:a0:76:cf:81:29:
75:c2:2f:b4:32:7c:ca:fa:da:d0:f1:50:0a:be:61:37:3a:28:
71:5b:21:a8:47:d0:0c:53:05:e3:3c:ac:de:8c:ee:24:42:5e:
d7:73:eb:ed:d9:10:0a:61:89:e9:eb:17:14:ec:2c:a0:75:02:
f6:8e:24:59:18:3b:7b:d3:53:2b:54:f9:92:f5:c7:8d:86:32:
d2:67:6f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 21:27:46 2024 by rpki-client on console-fra.rpki-client.org