Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/94be20b957eaea68f8febf1ef7815aa06167d818.roa
File: 94be20b957eaea68f8febf1ef7815aa06167d818.roa (raw, json)
Hash identifier: HMfBr2/YxTgftm5Ep9v/cz6JJ+yvH6NlJBn0L0anXJ4=
Subject key identifier: C4:36:8E:13:26:88:55:84:27:B7:F6:6E:B2:97:38:E8:D1:FA:10:A6
Certificate issuer: /CN=0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77
Certificate serial: 0B8938
Authority key identifier: 0C:A3:D2:7F:8A:59:8A:CA:5E:62:C3:1A:19:DE:F8:74:F6:1E:27:BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/94be20b957eaea68f8febf1ef7815aa06167d818.roa
Signing time: Thu 21 Mar 2024 15:10:07 +0000
ROA not before: Thu 21 Mar 2024 15:10:07 +0000
ROA not after: Sat 21 Mar 2026 15:10:07 +0000
asID: 267912
IP address blocks: 45.179.72.0/24 maxlen: 24
45.179.73.0/24 maxlen: 24
45.179.74.0/24 maxlen: 24
45.179.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 16:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756024 (0xb8938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77
Validity
Not Before: Mar 21 15:10:07 2024 GMT
Not After : Mar 21 15:10:07 2026 GMT
Subject: CN=94be20b957eaea68f8febf1ef7815aa06167d818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:1e:76:a0:73:65:6b:af:64:65:2a:2f:82:
fa:93:95:3b:7c:70:44:41:47:de:65:7f:1b:e4:c5:
f2:75:15:8a:4a:85:80:a7:86:5e:9f:d4:13:28:e3:
4a:69:db:4f:c4:c4:b0:92:26:d6:91:da:d5:52:f4:
e9:94:9b:bb:9b:0f:4d:a0:61:e6:bb:e4:e4:92:78:
65:27:52:2c:36:94:78:74:cc:ff:cf:0a:ef:f8:57:
8d:68:dc:dc:df:66:c5:7a:d8:d4:ef:8c:22:08:01:
c2:c4:fc:63:cb:ba:c7:b8:cb:84:fb:51:09:2b:46:
75:ca:f7:ac:fb:fd:ac:0c:94:ab:2c:20:4c:0f:86:
91:72:02:b9:cb:15:af:76:ea:e6:56:ea:0a:95:bc:
ed:e6:d8:4f:c9:94:75:e3:9e:98:3c:3d:2b:0e:be:
72:6c:84:21:b1:14:fe:1d:01:c8:1e:f4:fb:98:12:
74:d4:14:a4:ee:02:da:a2:c8:9a:60:e7:b7:a8:b1:
35:fa:5a:98:c4:0d:0b:ad:53:d9:33:2f:d5:ff:dd:
f2:d7:be:ac:8b:c8:da:83:04:30:e1:2c:90:43:07:
5f:f7:6f:dc:d2:84:aa:ca:8a:d5:90:27:e9:ee:2e:
45:c2:df:07:e4:8a:31:0a:9e:cf:ce:f7:36:c4:db:
74:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:36:8E:13:26:88:55:84:27:B7:F6:6E:B2:97:38:E8:D1:FA:10:A6
X509v3 Authority Key Identifier:
keyid:0C:A3:D2:7F:8A:59:8A:CA:5E:62:C3:1A:19:DE:F8:74:F6:1E:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/94be20b957eaea68f8febf1ef7815aa06167d818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6799e58-0b65-4fe8-944e-7bfda43d640f/0c9aa7a970ea97e3a28f8eb4a97c8ad60b629a77.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.72.0/22
Signature Algorithm: sha256WithRSAEncryption
69:fd:a6:ba:db:7d:92:85:eb:1d:39:d8:51:35:dd:b9:d1:49:
c0:01:5a:a4:c6:29:c6:c0:73:31:d8:ca:e6:c9:8e:25:8e:7d:
1f:71:23:ff:09:3a:47:5f:6f:89:ec:4b:d5:37:89:9c:9d:ef:
09:59:84:9d:41:37:38:73:52:a5:05:de:fb:64:1f:95:02:ab:
10:24:be:97:6e:d5:07:ad:ef:b4:d7:92:e0:7e:1a:e1:8d:72:
ef:e2:c6:a6:54:e1:45:ac:6a:c6:3b:54:17:db:af:a8:4b:e7:
d4:20:67:3d:dc:6b:15:0b:3e:5b:d0:28:5e:e9:24:6d:d7:6e:
21:b5:ff:5a:00:3b:f1:fb:22:11:b5:c7:31:2d:ce:30:e1:21:
c4:39:83:07:39:69:9e:3a:01:75:c7:81:63:a0:6a:3e:06:e0:
e8:a0:9d:23:86:31:c4:4e:38:08:a4:fb:04:1f:e2:3c:db:5e:
b5:40:3e:a9:c6:8a:69:6e:a1:6b:ce:69:20:64:e5:0d:73:06:
ac:37:53:0c:59:95:23:35:c7:66:d0:53:92:ef:70:5e:73:3c:
0b:ce:00:e1:af:3d:38:f9:67:6a:28:2b:09:c4:29:b2:9b:ee:
4f:b5:fb:d8:33:fb:d8:91:41:47:89:7a:75:98:d6:14:e7:c3:
fb:03:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 21:03:28 2024 by rpki-client on console-ams.rpki-client.org