Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/b05c32f63bbf323bbcbf9031993485b4e7951046.roa
File: b05c32f63bbf323bbcbf9031993485b4e7951046.roa (raw, json)
Hash identifier: wFmbEBpRroQ3nVIo2Nkp1Po4Mtl9zEWia8jiZZhcpwA=
Subject key identifier: A5:BE:2C:48:67:16:85:D0:D7:47:5F:9A:DD:33:D9:61:A7:AB:40:69
Certificate issuer: /CN=df98b707ece174bc717e21a1d3ec0ca5a54d4e61
Certificate serial: 0CA5AC
Authority key identifier: F4:1A:31:A7:59:0E:06:2B:15:9F:7A:01:02:E5:C8:54:43:02:FF:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/b05c32f63bbf323bbcbf9031993485b4e7951046.roa
Signing time: Wed 24 Mar 2021 14:30:24 +0000
ROA not before: Wed 24 Mar 2021 14:30:23 +0000
ROA not after: Tue 24 Mar 2026 14:30:23 +0000
asID: 266682
IP address blocks: 45.228.76.0/24 maxlen: 24
45.228.77.0/24 maxlen: 24
45.228.78.0/24 maxlen: 24
45.228.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 828844 (0xca5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df98b707ece174bc717e21a1d3ec0ca5a54d4e61
Validity
Not Before: Mar 24 14:30:23 2021 GMT
Not After : Mar 24 14:30:23 2026 GMT
Subject: CN=b05c32f63bbf323bbcbf9031993485b4e7951046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:23:35:32:5a:57:5c:f0:0a:96:d8:1f:2a:
58:9c:2b:bc:57:8b:42:19:09:cc:6a:8a:b5:7c:54:
bf:01:3f:17:ea:81:cb:1d:30:e6:7c:83:55:e3:f9:
e5:da:ab:e0:e6:8b:41:cb:53:d5:9b:a9:56:31:48:
bb:af:2c:39:2f:58:2d:c1:f8:0a:02:9a:26:c8:41:
b3:fe:d3:01:9a:31:ba:aa:5b:7f:cb:f8:9f:b4:c0:
a5:4f:04:b3:bc:df:6c:49:dd:9c:cf:b4:c7:00:78:
34:75:a5:fd:fc:4e:83:2f:11:d3:d3:b4:b9:f6:12:
1d:e2:36:6d:52:4c:78:b3:f8:2b:06:ee:5d:82:0d:
2b:e6:d4:11:d8:ba:11:7d:ea:e4:ab:99:7c:a3:71:
72:c1:19:48:21:01:c3:56:25:c2:1b:e3:88:39:9e:
5c:94:c5:da:e5:b7:49:40:d3:ec:0c:6e:1b:4d:97:
50:dc:a9:3a:cb:29:8a:ea:e8:4b:0d:b1:7c:d3:99:
8b:a0:f2:2d:d3:39:53:fe:29:c0:4b:4a:78:f4:4c:
c8:2a:c8:37:7e:db:88:60:48:7d:d2:59:a8:c2:a7:
fe:dc:06:81:f8:e4:77:2f:99:3e:79:70:2c:c4:17:
ec:bc:5b:9e:97:82:d0:38:fa:49:28:3d:86:32:19:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BE:2C:48:67:16:85:D0:D7:47:5F:9A:DD:33:D9:61:A7:AB:40:69
X509v3 Authority Key Identifier:
keyid:F4:1A:31:A7:59:0E:06:2B:15:9F:7A:01:02:E5:C8:54:43:02:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/b05c32f63bbf323bbcbf9031993485b4e7951046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/07bd1013-73fe-496a-8cf7-ce317fe12099/df98b707ece174bc717e21a1d3ec0ca5a54d4e61.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.76.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:a5:d7:95:39:c5:2e:bf:16:5e:02:c2:68:73:9f:c8:8f:1d:
6b:20:fc:b5:a8:63:4f:b7:c5:71:0c:c8:f1:6a:42:d1:f0:1e:
d6:da:8c:73:6f:94:9b:2a:5d:9e:26:52:ae:21:8c:bf:5d:6d:
78:09:74:cc:cb:c6:2f:77:6f:ab:2b:68:2b:7d:65:14:e2:7e:
79:f3:e9:2e:74:da:1d:14:81:d8:66:0d:fa:ae:6b:ab:64:c0:
ef:6a:cc:23:d1:fc:0d:31:1b:22:b3:74:b3:82:bc:69:fa:44:
15:fc:81:b6:30:b3:cd:75:40:bf:17:59:d2:fd:c6:72:85:06:
08:f7:73:fe:d0:73:1a:c9:5b:fb:95:1b:cf:69:bf:da:9c:91:
53:c6:e5:b9:22:0d:af:53:5a:23:5e:e1:e0:f4:53:05:c1:7f:
22:a3:7a:b3:6c:fb:f6:fb:2f:1d:29:59:09:05:db:43:01:6d:
b2:96:f2:6a:f9:83:44:b5:b2:3e:01:54:c7:be:49:f4:d7:90:
ce:2b:bd:4b:1e:49:79:b8:34:24:cd:b7:49:2c:ff:2b:01:0c:
2b:7f:bc:71:53:2a:6b:ce:e4:11:db:9c:a3:ce:40:d0:41:84:
56:eb:83:ec:bb:a1:7b:30:94:84:db:22:74:8d:41:f5:bc:a5:
4b:45:1b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 23 00:33:50 2023 by rpki-client on console-fra.rpki-client.org