Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/fe44398dff314ecdb5a3d78a23f653032edce612.roa
File: fe44398dff314ecdb5a3d78a23f653032edce612.roa (raw, json)
Hash identifier: 9jnMMN2JfyHR7HXG/uqN2t3ftfnnUdzE7Ylz+BWdCNI=
Subject key identifier: 87:BB:E2:81:5F:FB:81:16:26:4E:9B:9A:D8:63:FB:FC:1B:34:9F:05
Certificate issuer: /CN=2a96158adc7e9d3c9c541c010ab3e9435225e88f
Certificate serial: 016EF9
Authority key identifier: C1:8C:F1:B8:10:78:69:1C:C2:02:8C:1F:4A:A4:74:E8:BD:BC:0E:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a96158adc7e9d3c9c541c010ab3e9435225e88f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/fe44398dff314ecdb5a3d78a23f653032edce612.roa
Signing time: Sun 28 Nov 2021 15:04:47 +0000
ROA not before: Mon 04 Oct 2021 03:00:00 +0000
ROA not after: Wed 04 Oct 2023 03:00:00 +0000
asID: 266842
IP address blocks: 45.238.156.0/24 maxlen: 24
45.238.158.0/24 maxlen: 24
2803:9ca0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93945 (0x16ef9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a96158adc7e9d3c9c541c010ab3e9435225e88f
Validity
Not Before: Oct 4 03:00:00 2021 GMT
Not After : Oct 4 03:00:00 2023 GMT
Subject: CN=fe44398dff314ecdb5a3d78a23f653032edce612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:80:be:07:e2:11:df:15:5c:cd:e5:a7:4d:1f:
47:90:8b:55:ca:1b:de:6e:3d:4a:4d:42:f8:69:96:
ad:1b:6e:63:46:f6:3a:fb:42:f1:72:21:e9:d9:b7:
ed:7a:76:49:c7:13:e2:0c:84:2b:d3:56:ff:50:26:
7e:3c:79:11:1b:8e:4c:71:c5:e5:70:ae:53:a8:11:
73:d9:fe:65:9e:d5:a1:8a:19:d4:48:65:cb:43:d7:
b6:6f:3e:ea:e6:05:32:a0:98:56:c3:0c:31:7f:40:
c8:f9:74:1a:87:8b:47:c5:8d:0c:5e:04:ad:f8:04:
76:7e:1b:dc:6d:82:c3:67:18:73:cc:6f:25:fc:ab:
dd:04:df:67:6f:22:4e:73:14:bf:90:c4:9c:80:5b:
75:1c:67:04:9c:05:d5:d8:72:9c:d7:77:22:e9:62:
59:01:26:c5:41:d0:28:21:8a:b7:c3:73:d0:90:76:
a7:b5:2f:79:6a:05:d5:43:b5:d8:10:8a:67:c8:04:
cc:4e:39:76:14:03:31:7a:84:8a:17:5c:8b:56:8a:
f3:a9:fd:38:95:e1:fb:28:2b:fd:17:a5:c1:66:5f:
b0:06:55:7f:bb:91:20:7d:d3:3a:9f:30:14:4f:67:
0c:d7:84:a0:95:81:7a:2d:dc:08:36:d1:30:5c:a8:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BB:E2:81:5F:FB:81:16:26:4E:9B:9A:D8:63:FB:FC:1B:34:9F:05
X509v3 Authority Key Identifier:
keyid:C1:8C:F1:B8:10:78:69:1C:C2:02:8C:1F:4A:A4:74:E8:BD:BC:0E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a96158adc7e9d3c9c541c010ab3e9435225e88f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/fe44398dff314ecdb5a3d78a23f653032edce612.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/2a96158adc7e9d3c9c541c010ab3e9435225e88f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.156.0/24
45.238.158.0/24
IPv6:
2803:9ca0::/32
Signature Algorithm: sha256WithRSAEncryption
88:20:c9:02:c8:3b:f4:b9:ff:b0:36:e0:9c:d9:53:2d:2f:b9:
5f:43:64:07:37:ab:7f:53:d5:76:79:23:69:2a:0f:03:ff:57:
da:02:5a:ab:2b:26:ca:f6:b7:c6:2b:32:2e:74:01:a4:25:88:
f0:c9:3d:ea:d5:d0:73:07:1c:ea:9c:c9:aa:ee:a3:3a:33:c6:
51:7c:50:35:d0:9f:87:f8:2d:f0:7e:d4:64:32:8c:16:13:5a:
a9:95:1e:d9:c0:25:62:26:d2:ab:a6:ff:17:47:f8:2d:5c:86:
48:ff:fb:15:2c:eb:1f:85:fe:0d:42:e2:0e:7a:80:cc:3c:bd:
00:1b:56:a3:64:2a:2d:9a:28:eb:06:cc:74:e1:63:a5:a7:b6:
07:3a:0c:d2:2b:46:79:59:bc:eb:28:a8:f7:3b:24:4c:dc:1f:
0f:3b:87:af:c4:eb:af:6e:a3:c1:b5:9e:d1:a6:3a:f3:af:75:
f3:83:49:52:f7:03:25:a3:fb:55:45:78:fe:4a:fa:1e:95:70:
7c:9b:cf:68:62:59:80:c9:b3:3c:a1:54:85:8e:aa:58:4a:54:
79:33:75:39:f4:42:ea:6c:dc:bc:1b:db:84:08:b1:e0:7b:69:
37:81:81:52:ce:c0:0b:28:00:81:7e:b8:ea:0a:3b:9f:57:13:
92:e2:d9:26
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDAW75MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
OTYxNThhZGM3ZTlkM2M5YzU0MWMwMTBhYjNlOTQzNTIyNWU4OGYwHhcNMjExMDA0
MDMwMDAwWhcNMjMxMDA0MDMwMDAwWjAzMTEwLwYDVQQDEyhmZTQ0Mzk4ZGZmMzE0
ZWNkYjVhM2Q3OGEyM2Y2NTMwMzJlZGNlNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhoC+B+IR3xVczeWnTR9HkItVyhvebj1KTUL4aZatG25jRvY6
+0LxciHp2bftenZJxxPiDIQr01b/UCZ+PHkRG45MccXlcK5TqBFz2f5lntWhihnU
SGXLQ9e2bz7q5gUyoJhWwwwxf0DI+XQah4tHxY0MXgSt+AR2fhvcbYLDZxhzzG8l
/KvdBN9nbyJOcxS/kMScgFt1HGcEnAXV2HKc13ci6WJZASbFQdAoIYq3w3PQkHan
tS95agXVQ7XYEIpnyATMTjl2FAMxeoSKF1yLVorzqf04leH7KCv9F6XBZl+wBlV/
u5EgfdM6nzAUT2cM14SglYF6LdwINtEwXKj5hQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFIe74oFf+4EWJk6bmthj+/wbNJ8FMB8GA1UdIwQYMBaAFMGM8bgQeGkcwgKM
H0qkdOi9vA54MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmE5NjE1
OGFkYzdlOWQzYzljNTQxYzAxMGFiM2U5NDM1MjI1ZTg4Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGU0ZTU2MjAtZDkwMC00NjA2LTgwMTYtZjNmZWEy
NWVkMDUxL2ZlNDQzOThkZmYzMTRlY2RiNWEzZDc4YTIzZjY1MzAzMmVkY2U2MTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kZTRlNTYyMC1kOTAwLTQ2MDYtODAxNi1mM2Zl
YTI1ZWQwNTEvMmE5NjE1OGFkYzdlOWQzYzljNTQxYzAxMGFiM2U5NDM1MjI1ZTg4
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAC3unAMEAC3unjANBAIAAjAHAwUAKAOcoDANBgkqhkiG9w0B
AQsFAAOCAQEAiCDJAsg79Ln/sDbgnNlTLS+5X0NkBzerf1PVdnkjaSoPA/9X2gJa
qysmyva3xisyLnQBpCWI8Mk96tXQcwcc6pzJqu6jOjPGUXxQNdCfh/gt8H7UZDKM
FhNaqZUe2cAlYibSq6b/F0f4LVyGSP/7FSzrH4X+DULiDnqAzDy9ABtWo2QqLZoo
6wbMdOFjpae2BzoM0itGeVm86yio9zskTNwfDzuHr8Trr26jwbWe0aY6869184NJ
UvcDJaP7VUV4/kr6HpVwfJvPaGJZgMmzPKFUhY6qWEpUeTN1OfRC6mzcvBvbhAix
4HtpN4GBUs7ACygAgX646go7n1cTkuLZJg==
-----END CERTIFICATE-----
Generated at Tue Oct 3 08:53:25 2023 by rpki-client on console-fra.rpki-client.org