Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/c03d6a708757bd409178dc3bef878756f70ed13b.roa
File: c03d6a708757bd409178dc3bef878756f70ed13b.roa (raw, json)
Hash identifier: QqEcTPudhHLmu2yz2bCshqy4LAv7Mtusd7ZtkCJ0qTw=
Subject key identifier: 6B:63:58:84:FB:97:39:CC:B3:59:EA:D2:2D:82:01:86:4E:DB:C4:B3
Certificate issuer: /CN=9e7a5fab05d84621ad4b78ccf141868a98875d29
Certificate serial: 134146
Authority key identifier: 6E:4A:37:C8:01:68:41:93:FF:F7:E0:63:E3:9D:2C:C9:C5:B5:79:11
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7a5fab05d84621ad4b78ccf141868a98875d29.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/c03d6a708757bd409178dc3bef878756f70ed13b.roa
Signing time: Thu 11 Nov 2021 04:57:14 +0000
ROA not before: Thu 11 Nov 2021 02:00:00 +0000
ROA not after: Thu 26 Nov 2026 02:00:00 +0000
asID: 265524
IP address blocks: 45.231.40.0/22 maxlen: 24
160.20.172.0/22 maxlen: 24
170.254.88.0/22 maxlen: 24
177.152.48.0/22 maxlen: 24
179.0.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 06:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1261894 (0x134146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7a5fab05d84621ad4b78ccf141868a98875d29
Validity
Not Before: Nov 11 02:00:00 2021 GMT
Not After : Nov 26 02:00:00 2026 GMT
Subject: CN=c03d6a708757bd409178dc3bef878756f70ed13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:87:3a:0a:95:81:0e:2c:68:2a:a7:8e:28:
39:94:66:8b:18:f3:2e:76:c7:a0:c7:ce:5a:5a:db:
f7:b1:50:77:c9:f0:ec:09:cb:2f:c4:8a:85:30:eb:
d0:8b:57:ed:3c:36:35:72:23:b4:76:6b:a0:ff:5c:
c5:b6:51:80:ab:0f:bb:35:e1:87:8e:46:91:2c:a7:
d8:85:3c:67:a7:ac:d9:de:9b:d8:06:f6:fe:56:2d:
2e:1f:47:2b:ea:06:47:c9:57:c8:2a:db:88:ea:2a:
44:6c:1d:f0:31:d8:e2:4c:21:de:56:90:44:7f:21:
5e:6b:22:2c:53:81:d1:fe:38:07:b3:19:0a:95:9f:
68:15:65:7e:f1:87:29:08:26:9e:c4:bc:68:80:2a:
65:98:22:f4:c9:b7:c7:77:fa:f2:fc:a3:6b:d3:64:
27:3c:36:a4:4a:3d:2a:f5:03:eb:de:ef:13:93:18:
70:64:11:98:37:d7:c5:9c:d2:4d:1f:80:51:b2:ce:
a8:e0:2d:75:f0:ed:68:4d:12:5c:6d:e4:da:ce:5d:
c4:3f:24:a7:41:ef:4a:a3:ce:31:3e:88:1f:7d:88:
2d:f8:b9:35:f7:d6:9d:11:e9:f1:7a:cb:7a:fd:fc:
f2:f2:25:ff:92:74:b9:99:74:68:09:13:81:47:47:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:63:58:84:FB:97:39:CC:B3:59:EA:D2:2D:82:01:86:4E:DB:C4:B3
X509v3 Authority Key Identifier:
keyid:6E:4A:37:C8:01:68:41:93:FF:F7:E0:63:E3:9D:2C:C9:C5:B5:79:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7a5fab05d84621ad4b78ccf141868a98875d29.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/c03d6a708757bd409178dc3bef878756f70ed13b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/9e7a5fab05d84621ad4b78ccf141868a98875d29.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.40.0/22
160.20.172.0/22
170.254.88.0/22
177.152.48.0/22
179.0.196.0/22
Signature Algorithm: sha256WithRSAEncryption
32:ba:36:d6:77:7b:a8:d9:73:4b:07:ea:78:cb:38:3a:f4:aa:
35:34:eb:d5:5e:fb:85:43:93:6c:fa:13:e3:10:28:26:93:c7:
db:3a:60:0a:b9:be:c1:11:95:2c:0c:e2:08:10:5e:09:27:d1:
89:80:d4:52:f7:c2:a5:78:e5:f7:b8:86:05:e9:b2:4f:e5:07:
df:39:f4:85:4f:fa:bb:04:26:fd:99:cc:96:11:62:ee:e7:7f:
19:b2:1b:88:ff:40:37:63:21:74:dd:ea:db:82:f6:b1:64:f2:
82:98:e6:0d:eb:93:df:6d:fe:67:8c:c6:f8:6b:4c:a3:a5:d9:
53:98:13:93:58:4c:c5:c0:d7:21:db:51:7c:05:9b:cd:16:de:
26:95:2a:ac:25:3f:35:21:df:ab:01:d9:39:55:f1:86:75:24:
95:49:bf:dd:3f:1e:fd:80:ec:48:32:73:fd:6e:26:c6:91:c2:
d2:20:66:a2:79:30:da:e0:04:8b:1d:6b:06:51:f9:04:61:95:
16:e8:8d:c4:91:19:75:79:65:f4:b6:34:0f:39:aa:77:84:f2:
fc:40:2e:50:ff:fa:e7:31:c5:e0:0a:fd:80:50:81:78:a7:3e:
46:a0:d8:59:51:54:45:34:d7:72:26:9b:30:af:8a:5f:2f:c4:
81:ab:99:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 09:22:03 2024 by rpki-client on console-fra.rpki-client.org