Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/ffbb5e73f96ffaa0063c89cd3e5324b2bb0750d2.roa
File: ffbb5e73f96ffaa0063c89cd3e5324b2bb0750d2.roa (raw, json)
Hash identifier: /OS3FoIBLWaJSj3IuV2bcXElgwVjlbcDfwoxxao8nhM=
Subject key identifier: EF:46:D4:D7:3E:A1:6F:C6:E4:5C:21:4F:4E:29:25:70:90:B5:6E:BA
Certificate issuer: /CN=68daa985947750b9a7aa4090e0e120abbd088f1b
Certificate serial: 0360
Authority key identifier: 79:1A:27:D4:2D:46:1A:F9:3B:0A:F0:14:15:3A:9D:E4:D2:08:32:1F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68daa985947750b9a7aa4090e0e120abbd088f1b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/ffbb5e73f96ffaa0063c89cd3e5324b2bb0750d2.roa
Signing time: Thu 30 Sep 2021 17:39:49 +0000
ROA not before: Thu 30 Sep 2021 03:00:00 +0000
ROA not after: Sat 30 Sep 2023 03:00:00 +0000
asID: 265849
IP address blocks: 45.224.228.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 864 (0x360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68daa985947750b9a7aa4090e0e120abbd088f1b
Validity
Not Before: Sep 30 03:00:00 2021 GMT
Not After : Sep 30 03:00:00 2023 GMT
Subject: CN=ffbb5e73f96ffaa0063c89cd3e5324b2bb0750d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:1c:08:36:b0:66:d3:a7:1f:11:cb:5a:da:
b5:fd:b4:de:eb:29:ee:f1:ab:6b:3a:35:a6:0c:5e:
f7:bd:ea:63:e4:3f:a8:27:eb:4e:04:c8:bb:f1:16:
3a:48:e3:88:35:8e:25:78:e2:c9:71:41:62:05:63:
47:63:7c:a1:51:c9:66:f9:87:c2:7c:eb:c0:cd:8c:
5b:e3:06:da:77:97:72:ed:90:80:74:af:71:3f:b2:
df:c8:08:88:ce:e8:ed:4e:59:1e:fd:cf:a4:61:12:
1c:58:8a:66:fc:12:ab:e8:b7:73:3f:f7:75:69:db:
d1:0a:a4:a9:1b:8c:e2:df:73:46:aa:48:7f:08:d7:
24:73:97:73:9f:f2:3f:76:d5:2c:92:11:fb:77:63:
7d:0d:39:3c:31:97:0d:9b:d9:78:80:9c:78:89:ac:
b6:e3:23:6d:ea:e9:a5:fb:1c:72:69:77:20:5d:98:
db:3b:5c:eb:f8:e5:32:cd:1b:52:18:84:ed:e3:16:
20:d0:6d:4e:c9:f9:be:d5:8b:63:a8:05:16:54:92:
c7:26:21:2d:4d:71:79:e7:94:fc:50:96:f4:28:68:
f7:8a:ee:ac:40:b8:8e:fc:3c:60:b3:a9:a2:2b:ee:
5e:4b:3c:cc:d6:09:e4:31:4a:9d:99:80:72:a6:27:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:46:D4:D7:3E:A1:6F:C6:E4:5C:21:4F:4E:29:25:70:90:B5:6E:BA
X509v3 Authority Key Identifier:
keyid:79:1A:27:D4:2D:46:1A:F9:3B:0A:F0:14:15:3A:9D:E4:D2:08:32:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68daa985947750b9a7aa4090e0e120abbd088f1b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/ffbb5e73f96ffaa0063c89cd3e5324b2bb0750d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0094cdeb-451f-4fc5-9439-c1121ff37bae/68daa985947750b9a7aa4090e0e120abbd088f1b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.228.0/22
Signature Algorithm: sha256WithRSAEncryption
12:e0:f4:f5:7c:59:79:76:93:c6:a0:41:88:33:d0:8c:58:65:
14:71:53:83:75:dc:d3:d4:e0:a6:d5:51:e9:24:84:b0:92:0c:
10:c2:3c:d3:d6:c2:e1:7a:c6:0d:c5:c7:b9:0d:13:62:16:9c:
33:98:c0:40:b0:68:55:a5:9a:b2:d0:d7:a7:46:99:38:b6:74:
59:51:1d:e8:7b:fc:b0:9c:ba:5d:9c:26:9b:3d:a5:14:d2:ff:
c2:49:f8:f8:63:e4:ea:ec:a0:12:a2:24:37:8e:2a:43:b2:3f:
99:e9:86:cb:56:1e:1e:39:73:54:ef:3c:66:12:43:a8:c9:f7:
1f:75:0b:d6:88:1c:b2:a8:02:00:f7:a0:51:a9:85:e0:ed:60:
d4:d9:7c:b4:5a:43:e3:08:f0:8c:f3:0f:0c:54:ce:71:71:7d:
c5:2a:d4:ef:c2:a3:d8:97:93:63:2a:76:c0:ad:9d:2a:c7:a7:
2c:44:04:f5:11:32:12:e7:69:78:ac:64:86:7c:80:e3:47:3a:
0b:6e:84:eb:b3:f3:58:58:e9:06:2c:8b:0a:9c:ec:4b:30:51:
c0:c5:ed:98:63:75:f3:ce:29:bd:61:28:fd:3f:86:93:f5:95:
c3:3b:fd:c3:43:24:59:4d:49:0f:5c:cf:41:70:83:77:d9:70:
a3:8b:8f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 09:07:27 2023 by rpki-client on console-fra.rpki-client.org