Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/338ab011479cdbb3b221c6d643ea308f9fa2833b.roa
File: 338ab011479cdbb3b221c6d643ea308f9fa2833b.roa (raw, json)
Hash identifier: h7piq2RrEf+OWxl6xkXN1/FkIjpA9F7FKM2xmyk4fCo=
Subject key identifier: E0:B8:47:39:C5:EC:C1:1C:84:F7:F7:EE:FA:62:81:B2:5D:57:16:91
Certificate issuer: /CN=392ca19b432c483d5aa2dbbefd00061b3e86b29c
Certificate serial: 0F3C50
Authority key identifier: 9B:CF:86:21:80:B5:A6:DC:7F:0E:B3:96:24:73:A8:E5:5D:49:83:55
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/392ca19b432c483d5aa2dbbefd00061b3e86b29c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/338ab011479cdbb3b221c6d643ea308f9fa2833b.roa
Signing time: Fri 10 Jun 2022 15:33:51 +0000
ROA not before: Tue 07 Jun 2022 03:00:00 +0000
ROA not after: Fri 07 Jun 2024 03:00:00 +0000
asID: 266760
IP address blocks: 45.232.204.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 998480 (0xf3c50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392ca19b432c483d5aa2dbbefd00061b3e86b29c
Validity
Not Before: Jun 7 03:00:00 2022 GMT
Not After : Jun 7 03:00:00 2024 GMT
Subject: CN=338ab011479cdbb3b221c6d643ea308f9fa2833b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:c4:45:18:ec:d7:fa:89:67:b2:b8:05:7e:
68:cc:84:fb:08:f9:f1:cb:19:c6:c3:8f:91:79:bb:
dc:2c:7a:03:a4:bd:1e:e6:f9:98:64:4f:0d:44:52:
ff:bf:b5:9a:99:fe:e1:05:b6:75:af:a7:2e:33:d3:
7a:df:de:3d:a6:c9:4c:63:a7:7c:df:83:35:1e:0b:
7f:41:0a:f9:e8:c9:a1:68:76:e2:fb:b9:c0:19:d3:
0c:e0:68:26:9e:e6:d8:c5:6d:f6:ba:9e:e4:11:1e:
a0:79:ce:f2:ce:88:c7:a9:0e:eb:67:d3:6a:2c:9b:
81:a6:ae:53:5b:57:bc:4f:ef:e0:00:79:40:7d:6b:
b8:e0:7b:64:14:ed:43:90:23:d3:dd:d8:fc:9e:c2:
d9:b9:33:72:41:e3:36:81:ed:82:a3:4f:cc:d8:5e:
fd:98:52:6d:90:e3:ab:7c:fe:3c:4c:7e:0e:a3:b2:
18:01:ca:61:bb:b9:5b:95:d7:2e:06:6a:05:bf:b6:
0c:69:cc:78:65:4b:df:2a:75:3f:7c:b0:d8:be:67:
89:7e:c0:45:fa:91:ee:83:53:b1:f9:89:0a:c6:4b:
19:1d:a6:8e:19:d0:ad:59:58:93:96:29:24:ab:85:
34:b5:99:4d:85:e9:6d:11:56:e8:2d:a7:39:5c:7c:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B8:47:39:C5:EC:C1:1C:84:F7:F7:EE:FA:62:81:B2:5D:57:16:91
X509v3 Authority Key Identifier:
keyid:9B:CF:86:21:80:B5:A6:DC:7F:0E:B3:96:24:73:A8:E5:5D:49:83:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/392ca19b432c483d5aa2dbbefd00061b3e86b29c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/338ab011479cdbb3b221c6d643ea308f9fa2833b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/392ca19b432c483d5aa2dbbefd00061b3e86b29c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:d0:a9:54:b2:4e:71:1b:2d:77:ae:35:df:31:4c:c0:cb:bc:
52:93:65:13:af:b7:16:22:d9:09:83:b3:57:0e:29:c8:40:64:
6b:02:be:9b:54:42:b2:aa:24:f6:08:85:fd:d5:ab:fd:3b:82:
d1:50:0f:60:57:44:48:ca:20:ff:09:e1:8b:96:39:28:a8:e2:
c9:07:2e:3a:04:3c:24:0f:0b:f7:be:37:89:d8:fd:c2:a2:d4:
f0:e3:24:c5:8d:ea:23:05:e2:0d:93:c7:32:97:84:c5:8b:48:
c7:ee:68:a7:9f:33:42:ea:31:85:c8:3e:f3:f7:20:2a:13:d1:
1b:6c:f9:37:dc:9d:a4:f6:98:3a:6f:31:f2:ed:34:d8:46:33:
b6:cc:18:f6:c5:b6:a9:f5:60:04:85:9f:a1:44:fc:4c:88:4a:
d4:68:64:6a:40:2d:31:e0:17:be:0c:e9:cd:bf:49:be:b7:9a:
49:e4:48:d4:6f:39:93:27:1a:25:f2:09:16:a4:30:0f:92:09:
6f:54:5f:b3:3a:bc:0c:8d:d0:fa:d4:16:92:04:f8:9b:e3:41:
75:db:ea:d4:8b:9a:1a:f5:36:11:1d:86:47:a1:e2:a0:29:ed:
5d:3f:b9:d3:4d:57:b9:79:ea:71:6a:7c:cc:95:23:c8:9c:6b:
7e:68:38:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 12:05:12 2023 by rpki-client on console-fra.rpki-client.org