Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/995594e132723bf283b5d7848b9e6f7591013504.roa
File: 995594e132723bf283b5d7848b9e6f7591013504.roa (raw, json)
Hash identifier: 4GlBbNiGbh1J8h+uL3xkLQ0cxsNq/jYvutMHjg/59Vw=
Subject key identifier: BF:29:91:F7:B4:5F:2E:23:55:1C:A5:71:63:6F:12:E5:79:56:3C:63
Certificate issuer: /CN=df98b707ece174bc717e21a1d3ec0ca5a54d4e61
Certificate serial: 0CA84D
Authority key identifier: F4:1A:31:A7:59:0E:06:2B:15:9F:7A:01:02:E5:C8:54:43:02:FF:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/995594e132723bf283b5d7848b9e6f7591013504.roa
Signing time: Wed 24 Mar 2021 14:30:24 +0000
ROA not before: Wed 24 Mar 2021 14:30:23 +0000
ROA not after: Tue 24 Mar 2026 14:30:23 +0000
asID: 266682
IP address blocks: 45.228.76.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 829517 (0xca84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df98b707ece174bc717e21a1d3ec0ca5a54d4e61
Validity
Not Before: Mar 24 14:30:23 2021 GMT
Not After : Mar 24 14:30:23 2026 GMT
Subject: CN=995594e132723bf283b5d7848b9e6f7591013504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:3c:c2:b1:32:b6:fb:31:41:94:51:43:31:
c9:55:aa:2e:f7:ef:78:a2:4e:b7:b1:88:cd:4d:6b:
d0:ee:77:0c:b1:69:0b:88:5f:31:81:c8:76:ed:ba:
ad:60:ea:f6:6e:56:4a:49:a3:0d:58:63:0a:f4:46:
8b:a3:6a:4d:f1:5d:62:e1:b8:a1:c5:6e:bf:55:8d:
d5:51:93:df:a5:34:89:59:4a:01:f7:54:7b:d9:e5:
bb:0b:d8:89:17:65:2c:56:eb:6f:a7:89:7b:4d:01:
5b:8a:b7:b8:96:a6:a4:58:64:ae:38:c2:aa:3f:5a:
d8:5d:d5:c6:38:bc:93:35:50:12:3a:3f:bc:65:d9:
37:08:a8:97:67:95:8e:32:84:6a:72:33:1e:3e:32:
98:75:a6:a1:2e:5a:27:ba:85:2a:83:46:06:95:24:
68:42:71:9e:fe:d7:1e:ba:b0:09:0d:82:8f:f4:94:
1b:4e:26:a3:c4:cc:d1:db:7e:5a:00:8a:24:c9:f4:
3c:65:6b:e2:6b:45:81:99:0c:77:ca:02:c3:02:ca:
0b:01:a9:2b:20:4b:b6:50:8d:ce:12:89:bf:14:0e:
09:a5:4f:cb:fc:e7:bc:8e:b2:48:d5:0a:1f:46:b9:
dd:78:64:98:c2:dc:86:02:90:3d:84:a6:14:6f:f9:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:29:91:F7:B4:5F:2E:23:55:1C:A5:71:63:6F:12:E5:79:56:3C:63
X509v3 Authority Key Identifier:
keyid:F4:1A:31:A7:59:0E:06:2B:15:9F:7A:01:02:E5:C8:54:43:02:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/995594e132723bf283b5d7848b9e6f7591013504.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.76.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:c3:a0:df:a9:d7:d7:4a:fe:fa:42:26:e7:d5:ba:d9:84:1f:
c2:01:2b:3a:35:79:33:22:3d:26:bf:b7:10:6d:7f:34:8f:12:
a3:85:00:6e:c2:7f:c7:04:74:60:4a:50:8d:aa:a1:90:f5:78:
74:4b:cf:25:fa:af:91:56:33:17:d7:70:45:30:55:55:36:94:
71:c4:88:df:ca:94:c4:97:05:74:d5:aa:23:a9:5c:1e:19:83:
61:48:53:56:64:a0:97:23:c5:9d:e5:53:9a:a0:9c:1c:b1:63:
ee:15:9f:32:e4:16:4d:47:d9:27:a2:54:b8:f7:59:d8:7e:b2:
61:bf:e7:84:a9:50:ca:4b:94:8d:bb:70:a8:12:8c:a4:a6:f0:
31:1c:81:d1:a2:91:43:d2:1b:7e:e6:81:79:66:83:d4:bf:4f:
db:89:1c:82:d5:41:8e:58:df:95:26:56:19:36:6d:21:08:82:
f5:31:7d:88:48:e2:62:a3:88:63:33:a8:90:9f:ca:8e:4a:04:
5e:7b:4b:e5:fd:46:d0:4f:4f:bc:2d:43:64:0c:0c:d3:a8:99:
e7:cb:98:97:9b:d8:36:7f:c0:7b:53:b9:d5:6b:83:a7:b9:10:
35:d4:3b:97:87:86:1d:47:14:25:4b:bb:24:d6:fe:dd:3a:da:
7c:36:93:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 23 00:33:50 2023 by rpki-client on console-fra.rpki-client.org