Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/bcf7dd7ca503492b64a684770bdd1e4a217dbc4a.roa
File: bcf7dd7ca503492b64a684770bdd1e4a217dbc4a.roa (raw, json)
Hash identifier: pF1axjFTG6RQJ86AG3YElFX7d+4R0MPLVqrWFYpUNIM=
Subject key identifier: CF:D9:AF:53:9D:39:BA:F2:6A:20:C7:69:48:6E:05:FB:83:26:C9:1C
Certificate issuer: /CN=ba308093e64c97bdb011354807c2065ac693e761
Certificate serial: 1CCA1B
Authority key identifier: 1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/bcf7dd7ca503492b64a684770bdd1e4a217dbc4a.roa
Signing time: Thu 29 Dec 2022 16:45:25 +0000
ROA not before: Tue 23 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 269804
IP address blocks: 45.167.124.0/24 maxlen: 24
45.167.125.0/24 maxlen: 24
45.167.126.0/24 maxlen: 24
2803:b5a0::/32 maxlen: 34
Validation: Failed, certificate revoked on Tue 09 Jan 2024 12:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886747 (0x1cca1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba308093e64c97bdb011354807c2065ac693e761
Validity
Not Before: Mar 23 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=bcf7dd7ca503492b64a684770bdd1e4a217dbc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:db:b5:5f:f7:d2:66:76:03:03:54:a6:85:
cd:f6:90:e6:ca:57:73:f6:3a:3d:d9:0e:4b:5b:15:
b2:13:81:77:27:a6:47:c1:8a:fb:47:5b:4f:66:87:
e3:8e:b6:c3:4d:3f:33:62:d3:a3:99:2a:4d:bf:6e:
a2:9e:09:ee:a4:f6:bc:24:ad:db:66:e8:17:79:4e:
31:5c:9b:f1:7d:ff:3a:85:82:8b:d3:09:0e:d5:91:
75:5d:2a:41:b9:78:d2:c4:c3:4a:8e:36:7f:1d:12:
0f:a5:dd:2c:ff:95:51:9f:ba:88:b9:68:8f:74:98:
91:f5:4d:16:1a:64:ad:8d:ec:85:90:5f:2d:65:2b:
41:54:7d:92:32:de:8b:f5:db:31:66:23:21:99:63:
2a:91:6e:f9:c3:49:c6:7d:32:09:7e:89:12:5b:d9:
f0:2f:24:36:e2:d2:38:e4:03:80:c8:b8:d9:0d:a3:
ca:12:ff:44:db:04:49:3c:6e:81:c9:f0:da:1f:9b:
b0:25:d3:e8:5d:c3:b9:ce:19:2e:76:eb:73:23:0e:
2f:a8:d8:aa:a3:1b:9b:cc:04:e2:72:a4:5a:5d:92:
11:a2:e5:61:33:a0:f3:31:a3:53:2c:a9:d9:5f:4c:
18:60:76:21:50:c2:32:a7:41:47:03:b4:ff:32:cf:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D9:AF:53:9D:39:BA:F2:6A:20:C7:69:48:6E:05:FB:83:26:C9:1C
X509v3 Authority Key Identifier:
keyid:1F:A4:88:C7:E0:14:0D:16:40:3E:4F:18:67:4A:3E:C2:70:F9:F2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba308093e64c97bdb011354807c2065ac693e761.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/bcf7dd7ca503492b64a684770bdd1e4a217dbc4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/04841012-b3cb-457a-9996-a67defb549d5/ba308093e64c97bdb011354807c2065ac693e761.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.124.0-45.167.126.255
IPv6:
2803:b5a0::/32
Signature Algorithm: sha256WithRSAEncryption
38:33:34:88:58:46:84:75:3c:dd:67:fe:97:49:95:88:64:c8:
ce:98:f2:36:9a:94:81:fe:5a:9a:2e:4b:18:66:0c:8c:07:1e:
72:b4:86:83:53:fd:b2:9f:4c:19:d5:fe:9a:b0:0d:65:dd:d9:
1b:d7:b5:31:02:e2:49:08:91:2d:27:f8:6d:b6:3d:53:02:41:
c4:25:a6:08:1e:66:e5:fa:91:ee:9d:55:80:2e:a4:86:4a:e9:
24:b6:97:c4:7f:bb:cf:17:0e:6d:8e:80:e1:1e:c0:24:b5:b9:
1e:f7:1f:d7:1e:99:81:34:1b:7f:80:7b:ef:95:94:39:e4:2c:
35:c7:34:bc:ef:3e:3e:33:7f:d6:e3:ea:7a:54:f5:68:a6:58:
31:7f:61:db:6f:50:8d:4f:c5:e9:0e:1b:3c:66:30:11:3e:d8:
80:69:4e:c0:8e:7b:24:7e:22:5e:79:32:d4:af:6a:77:3e:51:
b8:68:0d:bc:01:e9:be:88:68:2b:62:94:89:b7:17:da:6d:43:
57:de:f1:33:df:73:6c:87:8b:77:33:bd:5f:9b:28:b2:3e:bd:
d8:c2:5a:e7:2d:b1:d6:a3:6f:e3:cd:a3:43:9c:fb:8c:f3:85:
8d:18:57:d3:4a:5b:ce:bc:38:aa:13:0a:18:32:2d:a7:57:d0:
9e:ac:d6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 15:36:37 2024 by rpki-client on console-fra.rpki-client.org