Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/ca5d60f9f575d246c9614ca7c417117f7a351003.roa
File: ca5d60f9f575d246c9614ca7c417117f7a351003.roa (raw, json)
Hash identifier: YBqMyKvOnVSM2WeYyJ8JcjGChAxMSKR8aKhWl1yZFD8=
Subject key identifier: 6F:79:2F:80:41:D4:B7:C6:13:B4:53:51:22:6F:C9:BC:1F:F7:2A:F2
Certificate issuer: /CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
Certificate serial: 0D5089
Authority key identifier: EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/ca5d60f9f575d246c9614ca7c417117f7a351003.roa
Signing time: Wed 24 Mar 2021 22:49:32 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 266784
IP address blocks: 45.235.120.0/24 maxlen: 24
45.235.121.0/24 maxlen: 24
45.235.122.0/24 maxlen: 24
45.235.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 872585 (0xd5089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9e7183ffaa02803fe68e22a1e77851adb2eb28
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=ca5d60f9f575d246c9614ca7c417117f7a351003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:40:d1:6e:3c:58:2a:12:ad:a8:b8:57:a4:
25:f2:ef:92:90:d7:25:8b:55:39:43:26:74:1f:e1:
99:29:71:e0:70:9d:bc:aa:ff:af:03:d7:2c:d2:87:
ae:f5:ee:1c:a0:0e:9b:b8:9f:a0:e5:d4:e3:da:73:
7a:95:5a:62:16:f6:93:39:c9:31:49:d3:37:9e:2f:
ef:47:36:92:65:f3:3a:15:13:4b:cf:f6:c5:8e:b8:
a1:e1:e4:5b:04:cb:2d:6e:3f:13:c7:45:31:6f:55:
67:9f:a0:72:1f:fe:21:0f:88:b7:21:71:dd:91:50:
eb:59:df:e2:c2:d4:49:61:db:af:a1:66:16:85:02:
92:c2:20:0c:d5:23:8a:45:03:41:fc:82:96:a8:6e:
30:c2:cb:6a:6b:4a:10:d2:9e:43:52:5d:84:06:73:
4e:c3:b9:03:ee:63:0d:ae:26:5d:91:81:95:d3:e6:
72:aa:bb:48:58:37:dc:63:25:e6:64:c8:95:7d:dd:
93:44:3c:d5:e8:6b:7c:5a:3a:5b:8d:4b:a6:66:35:
9c:8b:ca:f9:2f:a8:51:62:67:6a:0d:56:fe:dc:31:
99:77:fe:f5:ec:4a:d7:b1:48:84:97:45:ef:0d:09:
7d:08:87:ce:6e:c9:51:b0:81:bf:25:83:94:98:a9:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:79:2F:80:41:D4:B7:C6:13:B4:53:51:22:6F:C9:BC:1F:F7:2A:F2
X509v3 Authority Key Identifier:
keyid:EA:6A:E3:33:73:C2:63:42:3A:F7:72:55:2C:65:79:D6:C9:B2:02:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/ca5d60f9f575d246c9614ca7c417117f7a351003.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/36b9e7d4-1b06-4ff6-a896-8bc95eee852d/bd9e7183ffaa02803fe68e22a1e77851adb2eb28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.120.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:49:7b:b4:b5:7f:74:5c:c5:82:50:f4:f2:e8:22:c8:6d:6c:
e9:c0:92:fe:c6:b4:8a:36:35:00:45:18:f4:48:c6:54:64:df:
c6:a0:54:3f:76:d3:84:8e:fa:6e:69:5e:eb:48:2e:76:d1:28:
fe:f6:43:01:c5:3c:31:d1:d3:8e:32:0c:37:66:ae:db:1b:58:
d5:bc:65:cc:f6:09:f2:ec:be:cf:3b:b2:99:a6:40:bc:e2:87:
cf:2e:87:52:bb:9d:66:3c:8b:4c:24:a7:b2:d8:ca:7d:2b:5e:
02:ea:70:c2:e7:30:cb:f8:31:c9:36:38:97:ba:aa:99:3f:7c:
32:ae:bf:2c:2a:3f:40:f6:7f:85:94:97:3d:c9:d1:17:a5:9f:
8f:2d:e0:3c:33:f0:3f:c2:c4:e4:d4:17:80:b6:b9:09:5b:6e:
ce:b8:2d:04:a3:3a:d1:c7:97:0a:6b:c4:22:61:d9:b6:3b:fa:
33:38:1c:c6:53:c6:f5:1b:f3:97:81:a1:43:24:ec:8c:88:93:
79:18:8a:6d:31:53:a8:1c:b5:91:48:99:94:b4:23:89:8d:51:
c1:36:bf:4f:89:af:6d:8e:b7:6e:68:b6:7e:5b:f0:ac:33:47:
d0:4e:6f:14:66:f0:db:14:d5:fd:fe:b0:c3:2a:11:8f:ea:5a:
2e:07:97:1c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDVCJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJk
OWU3MTgzZmZhYTAyODAzZmU2OGUyMmExZTc3ODUxYWRiMmViMjgwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyhjYTVkNjBmOWY1NzVk
MjQ2Yzk2MTRjYTdjNDE3MTE3ZjdhMzUxMDAzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAra9A0W48WCoSrai4V6Ql8u+SkNcli1U5QyZ0H+GZKXHgcJ28
qv+vA9cs0oeu9e4coA6buJ+g5dTj2nN6lVpiFvaTOckxSdM3ni/vRzaSZfM6FRNL
z/bFjrih4eRbBMstbj8Tx0Uxb1Vnn6ByH/4hD4i3IXHdkVDrWd/iwtRJYduvoWYW
hQKSwiAM1SOKRQNB/IKWqG4wwstqa0oQ0p5DUl2EBnNOw7kD7mMNriZdkYGV0+Zy
qrtIWDfcYyXmZMiVfd2TRDzV6Gt8WjpbjUumZjWci8r5L6hRYmdqDVb+3DGZd/71
7ErXsUiEl0XvDQl9CIfObslRsIG/JYOUmKktwQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG95L4BB1LfGE7RTUSJvybwf9yryMB8GA1UdIwQYMBaAFOpq4zNzwmNCOvdy
VSxledbJsgKxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmQ5ZTcx
ODNmZmFhMDI4MDNmZTY4ZTIyYTFlNzc4NTFhZGIyZWIyOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzZiOWU3ZDQtMWIwNi00ZmY2LWE4OTYtOGJjOTVl
ZWU4NTJkL2NhNWQ2MGY5ZjU3NWQyNDZjOTYxNGNhN2M0MTcxMTdmN2EzNTEwMDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNmI5ZTdkNC0xYjA2LTRmZjYtYTg5Ni04YmM5
NWVlZTg1MmQvYmQ5ZTcxODNmZmFhMDI4MDNmZTY4ZTIyYTFlNzc4NTFhZGIyZWIy
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3reDANBgkqhkiG9w0BAQsFAAOCAQEALUl7tLV/dFzFglD0
8ugiyG1s6cCS/sa0ijY1AEUY9EjGVGTfxqBUP3bThI76bmle60gudtEo/vZDAcU8
MdHTjjIMN2au2xtY1bxlzPYJ8uy+zzuymaZAvOKHzy6HUrudZjyLTCSnstjKfSte
Aupwwucwy/gxyTY4l7qqmT98Mq6/LCo/QPZ/hZSXPcnRF6Wfjy3gPDPwP8LE5NQX
gLa5CVtuzrgtBKM60ceXCmvEImHZtjv6MzgcxlPG9Rvzl4GhQyTsjIiTeRiKbTFT
qBy1kUiZlLQjiY1RwTa/T4mvbY63bmi2flvwrDNH0E5vFGbw2xTV/f6wwyoRj+pa
LgeXHA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-ams.rpki-client.org