Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/a8f2031bd7eddc5c1bcad5d170061e5c830a5364.roa
File: a8f2031bd7eddc5c1bcad5d170061e5c830a5364.roa (raw, json)
Hash identifier: 1bKoMPCyyvgxx9Tj3dpNgZf964UoL9rDkxXNTpYoQ94=
Subject key identifier: 86:FF:D0:5A:49:30:E6:FE:6C:52:AF:F3:2B:5B:74:C0:96:00:8E:FE
Certificate issuer: /CN=40dd355863a64b49aaea56a333a078f4104009ff
Certificate serial: 0309
Authority key identifier: 30:03:EB:ED:04:79:DB:CE:DD:0A:60:F8:33:AC:52:69:51:5B:A7:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40dd355863a64b49aaea56a333a078f4104009ff.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/a8f2031bd7eddc5c1bcad5d170061e5c830a5364.roa
Signing time: Mon 17 May 2021 20:26:18 +0000
ROA not before: Mon 17 May 2021 03:00:00 +0000
ROA not after: Wed 17 May 2023 03:00:00 +0000
asID: 266754
IP address blocks: 45.232.0.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 777 (0x309)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dd355863a64b49aaea56a333a078f4104009ff
Validity
Not Before: May 17 03:00:00 2021 GMT
Not After : May 17 03:00:00 2023 GMT
Subject: CN=a8f2031bd7eddc5c1bcad5d170061e5c830a5364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cf:ca:10:56:d1:30:47:f1:f5:89:44:2b:0f:
51:28:cc:c0:16:fb:ae:8a:c4:fe:6d:ac:b5:df:70:
3a:1a:bd:14:1f:ec:08:1c:0a:b5:f1:a3:b0:a2:f9:
ad:b1:57:bd:a1:5a:26:d0:c7:63:76:f5:57:83:dd:
a3:5b:31:99:16:1c:c8:bb:b5:46:a5:19:44:56:a3:
4b:fd:ca:3e:d2:ab:19:75:2d:df:36:00:9d:f2:bb:
db:57:fe:e8:71:bf:d4:db:b3:f4:2a:7e:6b:63:97:
d4:7c:bd:0c:c4:c7:f5:36:aa:a8:32:35:85:cd:c7:
8f:aa:32:4a:fe:38:27:13:30:39:19:e0:01:1a:e5:
bc:c6:a2:87:46:77:8d:3b:74:e1:06:2d:5d:e4:02:
dc:22:bf:82:8f:51:63:2d:26:06:47:40:56:12:8b:
25:86:22:48:6f:1e:24:2f:4d:75:9b:c7:b7:45:81:
83:b8:af:98:d5:f4:f5:6f:07:0e:b5:ad:88:d6:51:
40:3f:99:e8:31:2a:d2:6e:b6:01:5d:ee:de:ac:26:
58:b1:fc:46:3d:c6:f8:68:d6:ad:dd:a7:25:44:47:
d3:56:e0:da:38:43:63:85:bc:35:5d:07:e5:b6:71:
21:cf:a2:b2:05:69:90:95:1c:bc:57:d0:9c:60:f8:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FF:D0:5A:49:30:E6:FE:6C:52:AF:F3:2B:5B:74:C0:96:00:8E:FE
X509v3 Authority Key Identifier:
keyid:30:03:EB:ED:04:79:DB:CE:DD:0A:60:F8:33:AC:52:69:51:5B:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40dd355863a64b49aaea56a333a078f4104009ff.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/a8f2031bd7eddc5c1bcad5d170061e5c830a5364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.0.0/22
Signature Algorithm: sha256WithRSAEncryption
83:e6:3d:54:a6:c5:0e:9d:02:ae:f7:0f:75:0a:7f:07:23:b1:
9b:6a:5b:b7:f5:29:7f:66:a3:31:ad:44:20:bf:a8:35:d2:96:
c7:de:4d:4f:77:4c:d1:13:87:4a:12:77:a8:70:aa:a4:b2:3c:
8e:70:e6:09:58:a7:d8:5e:d1:d7:82:85:60:b9:8d:28:7b:08:
47:56:ca:54:e5:e1:4c:03:6f:59:f2:47:43:b2:23:37:24:b4:
f1:dc:f8:2c:7a:4a:1e:e9:f6:ce:44:8f:19:cf:73:14:18:5b:
89:f1:b2:2e:51:ab:8e:87:c3:e7:a5:b2:2c:67:5e:f1:88:ef:
f3:ca:2b:8b:de:63:a9:7e:35:cc:4c:f1:84:b4:e5:c4:d0:82:
01:b1:71:db:8f:43:4a:9c:0a:ab:c4:77:c6:35:f0:61:02:2f:
6e:ec:4b:54:e0:34:97:fb:1c:0d:4b:16:69:8a:d9:6f:fc:03:
70:4d:f3:8b:c6:81:ae:33:9c:b8:7c:ec:f0:44:15:3d:20:28:
8c:f4:28:d3:42:74:39:fb:78:d3:31:3c:b3:d9:81:2f:33:3c:
2e:38:fc:4e:26:34:78:23:d2:27:f2:8a:4d:3b:c4:82:48:3b:
f5:dc:47:0c:39:64:c1:ca:ce:13:4d:fa:4e:70:95:0c:ee:dc:
43:a8:5a:3f
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDBk
ZDM1NTg2M2E2NGI0OWFhZWE1NmEzMzNhMDc4ZjQxMDQwMDlmZjAeFw0yMTA1MTcw
MzAwMDBaFw0yMzA1MTcwMzAwMDBaMDMxMTAvBgNVBAMTKGE4ZjIwMzFiZDdlZGRj
NWMxYmNhZDVkMTcwMDYxZTVjODMwYTUzNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnz8oQVtEwR/H1iUQrD1EozMAW+66KxP5trLXfcDoavRQf7Agc
CrXxo7Ci+a2xV72hWibQx2N29VeD3aNbMZkWHMi7tUalGURWo0v9yj7Sqxl1Ld82
AJ3yu9tX/uhxv9Tbs/Qqfmtjl9R8vQzEx/U2qqgyNYXNx4+qMkr+OCcTMDkZ4AEa
5bzGoodGd407dOEGLV3kAtwiv4KPUWMtJgZHQFYSiyWGIkhvHiQvTXWbx7dFgYO4
r5jV9PVvBw61rYjWUUA/megxKtJutgFd7t6sJlix/EY9xvho1q3dpyVER9NW4No4
Q2OFvDVdB+W2cSHPorIFaZCVHLxX0Jxg+HS7AgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUhv/QWkkw5v5sUq/zK1t0wJYAjv4wHwYDVR0jBBgwFoAUMAPr7QR5287dCmD4
M6xSaVFbp3gwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS80MGRkMzU1
ODYzYTY0YjQ5YWFlYTU2YTMzM2EwNzhmNDEwNDAwOWZmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wMmVmZDMyYS02NjRiLTQ3NzAtYTUwMC04ZmM3NGE1
OTkyYWQvYThmMjAzMWJkN2VkZGM1YzFiY2FkNWQxNzAwNjFlNWM4MzBhNTM2NC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzAyZWZkMzJhLTY2NGItNDc3MC1hNTAwLThmYzc0
YTU5OTJhZC80MGRkMzU1ODYzYTY0YjQ5YWFlYTU2YTMzM2EwNzhmNDEwNDAwOWZm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLegAMA0GCSqGSIb3DQEBCwUAA4IBAQCD5j1UpsUOnQKu9w91
Cn8HI7Gbalu39Sl/ZqMxrUQgv6g10pbH3k1Pd0zRE4dKEneocKqksjyOcOYJWKfY
XtHXgoVguY0oewhHVspU5eFMA29Z8kdDsiM3JLTx3Pgsekoe6fbORI8Zz3MUGFuJ
8bIuUauOh8PnpbIsZ17xiO/zyiuL3mOpfjXMTPGEtOXE0IIBsXHbj0NKnAqrxHfG
NfBhAi9u7EtU4DSX+xwNSxZpitlv/ANwTfOLxoGuM5y4fOzwRBU9ICiM9CjTQnQ5
+3jTMTyz2YEvMzwuOPxOJjR4I9In8opNO8SCSDv13EcMOWTBys4TTfpOcJUM7txD
qFo/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:07 2023 by rpki-client on console-fra.rpki-client.org