Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/3ed77110343d9bda764f5335cb6d99c6524beaa2.roa
File: 3ed77110343d9bda764f5335cb6d99c6524beaa2.roa (raw, json)
Hash identifier: nLcvO5VpeHctUqQYigjSMf5xkxhQ2de83b/EgSXsBRY=
Subject key identifier: F6:10:44:C9:07:1D:43:2C:2F:D0:8C:DE:BD:23:FC:8F:E1:1C:D3:98
Certificate issuer: /CN=ba308093e64c97bdb011354807c2065ac693e761
Certificate serial: 11B6C8
Authority key identifier: 1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/3ed77110343d9bda764f5335cb6d99c6524beaa2.roa
Signing time: Tue 05 Oct 2021 20:14:20 +0000
ROA not before: Tue 05 Oct 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 262589
IP address blocks: 45.167.124.0/24 maxlen: 24
45.167.125.0/24 maxlen: 24
45.167.126.0/24 maxlen: 24
2803:b5a0::/32 maxlen: 34
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1160904 (0x11b6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba308093e64c97bdb011354807c2065ac693e761
Validity
Not Before: Oct 5 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=3ed77110343d9bda764f5335cb6d99c6524beaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:85:82:a6:13:06:16:bc:e0:3f:3f:6c:65:
06:c8:1a:38:14:c0:14:a8:05:4b:ba:83:66:fb:81:
fd:11:e6:84:7a:a3:08:9e:c4:ee:30:42:5c:49:ee:
80:59:ae:fa:0f:de:f8:98:a1:30:c3:30:b6:5c:79:
0e:b7:54:8c:c4:50:22:19:42:eb:a5:c6:54:6e:21:
c2:58:53:0f:d0:e3:b7:f9:bf:0c:82:56:ab:77:45:
1c:00:10:32:dc:e7:13:52:1f:18:d2:42:fd:7a:ee:
c6:aa:93:2b:0f:ae:ab:00:8d:d4:bb:56:bd:23:e0:
e8:21:d6:40:38:0b:29:aa:ac:8f:83:3b:c3:20:66:
4c:5d:54:66:84:67:b0:b6:16:e4:7b:0c:21:cb:27:
53:94:be:53:26:07:78:3d:df:d7:70:b1:cb:91:68:
5d:bb:13:82:bb:84:74:f0:e2:f8:37:9e:3f:11:83:
07:25:1f:41:ca:44:01:dc:da:eb:38:e0:8c:f5:29:
67:c2:17:ce:97:ce:bd:9c:ff:d1:44:f3:95:94:74:
42:ad:07:09:d0:ff:8f:af:07:1c:a5:df:f5:f1:4a:
69:b0:44:32:1e:10:18:b1:eb:4b:73:33:23:b2:c4:
c0:0b:0a:da:c3:c3:0e:ed:41:f1:03:7f:bf:81:04:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:10:44:C9:07:1D:43:2C:2F:D0:8C:DE:BD:23:FC:8F:E1:1C:D3:98
X509v3 Authority Key Identifier:
keyid:1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/3ed77110343d9bda764f5335cb6d99c6524beaa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/ba308093e64c97bdb011354807c2065ac693e761.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.124.0-45.167.126.255
IPv6:
2803:b5a0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:c2:57:7d:c9:30:ca:3d:83:60:c8:f9:dc:e2:c7:bc:b5:be:
90:33:67:be:74:a0:7b:64:a3:e7:a2:db:be:f3:44:e5:af:2e:
ba:9b:31:55:88:92:4f:c8:0c:96:28:55:81:05:12:5a:a2:2a:
ad:65:79:3a:77:de:4f:3f:78:04:30:8a:c4:8e:eb:38:1e:d8:
b5:34:78:73:c7:6c:7d:4f:22:74:02:a9:9a:d7:55:f4:c9:3e:
ba:05:fd:5d:ca:96:11:8d:a8:b3:d5:cb:f2:23:87:e1:81:73:
00:22:6e:26:e0:73:f4:c2:45:06:bd:90:6c:b2:ab:47:fa:3f:
7b:41:df:55:3d:93:13:47:7f:9d:5d:54:d1:79:cc:30:9f:02:
4a:e3:1c:bf:5d:f5:16:a4:bb:75:c0:7e:86:48:01:ca:f6:3f:
06:59:ac:40:ca:52:5c:cb:d2:09:42:53:a8:00:13:e8:74:c3:
cb:50:84:ee:6c:f8:af:83:61:16:b8:fb:c2:23:ea:4e:c6:79:
33:3d:4e:ef:f2:31:9b:cf:94:16:28:d5:7b:6a:da:29:3e:65:
04:9e:01:c0:02:7f:96:50:77:89:fa:67:a3:ec:13:57:cb:17:
0a:4d:2b:37:34:4b:f4:1a:3d:23:88:4d:c4:d3:c2:eb:22:9d:
6d:2a:72:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:08 2023 by rpki-client on console-fra.rpki-client.org