Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/5cc557d94588ff9baecf53a9f4fed90e6bcd9de7.roa
File: 5cc557d94588ff9baecf53a9f4fed90e6bcd9de7.roa (raw, json)
Hash identifier: XgFHCJs0u3eB/7XedaMMs+iqpIIqh5ICL1/fdVqn5X4=
Subject key identifier: A9:CF:20:88:5A:36:8F:2A:D0:89:55:53:8F:CD:F1:29:E7:39:E5:B3
Certificate issuer: /CN=32a8b2a97729bd1e6de885b58fd0c34c4a661ae5
Certificate serial: 05180E
Authority key identifier: 69:32:6B:4B:40:01:AB:00:98:D8:72:37:63:4F:AD:39:87:A9:06:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32a8b2a97729bd1e6de885b58fd0c34c4a661ae5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/5cc557d94588ff9baecf53a9f4fed90e6bcd9de7.roa
Signing time: Wed 24 Mar 2021 14:46:09 +0000
ROA not before: Wed 24 Mar 2021 14:46:09 +0000
ROA not after: Tue 24 Mar 2026 14:46:09 +0000
asID: 27843
IP address blocks: 45.236.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 21:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333838 (0x5180e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a8b2a97729bd1e6de885b58fd0c34c4a661ae5
Validity
Not Before: Mar 24 14:46:09 2021 GMT
Not After : Mar 24 14:46:09 2026 GMT
Subject: CN=5cc557d94588ff9baecf53a9f4fed90e6bcd9de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:74:21:74:4f:54:81:bf:5e:7d:3f:73:0b:e1:
53:80:16:87:bf:0b:68:d1:b7:fe:3c:79:18:b8:70:
ba:80:10:6c:98:a5:bd:53:97:4d:af:e0:9a:24:07:
0d:6d:0c:50:67:b8:d0:82:30:14:42:cc:69:2a:39:
7b:89:d3:9f:3b:a9:ac:bf:da:d6:d3:79:95:f9:63:
8c:ed:e1:08:69:0c:27:7b:6a:ac:0f:0f:e8:7f:cc:
0a:e3:40:1a:ca:13:01:5c:c2:fc:c2:ef:cc:d4:e0:
3b:7d:ac:ad:f6:0e:ca:51:dc:d5:c9:06:5e:9a:3e:
a8:0c:ef:d8:c5:ba:3f:fa:66:3b:e5:06:44:be:37:
f2:db:a3:46:c4:3d:c8:98:11:e3:09:db:5e:af:36:
15:0f:e5:47:a4:3a:84:06:db:32:d8:23:2e:d9:9e:
9c:07:93:11:0c:3d:f9:f1:a9:eb:6d:ee:c2:24:10:
87:d2:83:19:be:ee:31:c5:fb:6e:6e:c9:f8:65:8f:
0d:13:de:6e:6c:a2:c7:06:72:77:e8:c3:d0:a1:4f:
96:33:f8:04:ac:42:9d:20:9e:d8:99:9a:71:12:1a:
bd:45:18:d7:69:7b:9a:54:d5:32:29:03:b7:e6:5b:
93:49:75:4c:b1:f6:6b:e9:5d:d4:66:6e:3c:4c:49:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CF:20:88:5A:36:8F:2A:D0:89:55:53:8F:CD:F1:29:E7:39:E5:B3
X509v3 Authority Key Identifier:
keyid:69:32:6B:4B:40:01:AB:00:98:D8:72:37:63:4F:AD:39:87:A9:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32a8b2a97729bd1e6de885b58fd0c34c4a661ae5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/5cc557d94588ff9baecf53a9f4fed90e6bcd9de7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0b40dda0-2687-46ac-818c-e565fd66a56c/32a8b2a97729bd1e6de885b58fd0c34c4a661ae5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.44.0/22
Signature Algorithm: sha256WithRSAEncryption
39:e2:47:7d:e6:6d:5a:c2:64:73:33:82:b2:e9:cf:97:c7:9f:
89:cd:cc:10:91:d5:47:89:50:94:f7:59:47:9c:31:f7:b7:a0:
62:f4:ca:61:40:81:12:dc:e9:33:58:eb:03:0b:04:39:e6:f8:
be:4e:42:dd:e1:56:9e:2f:04:89:a1:20:ee:0a:a4:85:43:5b:
5a:21:66:d0:48:40:16:f3:21:b4:20:51:ef:39:15:d8:dc:2e:
22:d3:32:d0:6f:fa:70:5d:78:77:c8:2a:79:5f:84:eb:5a:36:
72:cd:3d:c0:35:4c:d2:34:6b:56:87:96:3e:35:0c:dc:b8:06:
2a:c7:55:56:70:bd:a0:63:9f:cc:61:f3:5c:3f:17:15:9a:fe:
5c:07:e6:40:3d:35:4e:b4:b9:66:b9:ce:3a:2a:4c:22:fa:52:
11:01:56:75:a6:75:99:8a:da:a0:7d:12:fc:62:81:65:cc:5d:
24:b0:fd:8b:35:19:76:89:c9:1c:c7:59:91:7c:73:df:d0:54:
62:d8:e2:97:40:a3:ff:24:72:f0:2e:66:a8:20:65:4e:bf:30:
a5:39:d3:b6:cb:29:ee:8a:dd:49:4f:f5:02:d4:f9:96:cf:85:
0c:92:f4:d4:d3:10:7b:ca:c9:14:96:b4:df:67:0a:a4:79:40:
33:e9:c0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 23:09:47 2024 by rpki-client on console-ams.rpki-client.org