Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/3abb753c83159278d1732336ecfa6c0898d7d58c.roa
File: 3abb753c83159278d1732336ecfa6c0898d7d58c.roa (raw, json)
Hash identifier: pUKxsxpZVtzssxO7k9ybRvJQohxeQlk7ikNBozZEn/k=
Subject key identifier: 97:64:50:BB:D3:EE:38:90:9B:69:31:5D:60:38:C2:83:AF:FC:A6:7F
Certificate issuer: /CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
Certificate serial: 1A5888
Authority key identifier: 4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/3abb753c83159278d1732336ecfa6c0898d7d58c.roa
Signing time: Tue 04 Apr 2023 18:49:38 +0000
ROA not before: Mon 03 Apr 2023 18:49:38 +0000
ROA not after: Fri 04 Apr 2025 18:49:38 +0000
asID: 266725
IP address blocks: 45.65.224.0/22 maxlen: 24
2803:e5c0::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1726600 (0x1a5888)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
Validity
Not Before: Apr 3 18:49:38 2023 GMT
Not After : Apr 4 18:49:38 2025 GMT
Subject: CN=3abb753c83159278d1732336ecfa6c0898d7d58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:21:1a:f4:a2:05:f8:6c:0a:08:b9:f6:55:22:
04:80:1f:b5:55:af:e1:2f:20:f1:df:11:bd:7d:05:
ca:30:f4:14:93:3a:a7:42:55:32:f0:fe:cc:5d:50:
56:5a:8d:18:c1:fb:44:16:bf:11:5d:05:0e:6c:95:
34:fd:83:67:b0:8b:41:e8:29:58:ba:d9:bd:44:3a:
5c:3c:b5:b3:5a:d8:d2:79:31:10:50:6c:55:ce:42:
9f:bf:ed:39:cf:2b:23:78:2b:04:a1:23:42:60:0c:
42:64:90:a6:2b:0c:e4:3b:e9:09:ac:02:b6:9f:46:
56:c3:cc:3e:5e:4c:55:8e:d7:20:6a:cf:d6:be:41:
a1:d2:aa:b1:ab:36:3b:c9:a5:8a:84:1e:8a:9d:79:
80:20:13:92:8e:46:c2:6d:df:c7:c8:91:1f:95:82:
be:73:70:be:eb:1f:cf:07:b2:45:91:61:29:7e:3c:
57:96:10:56:70:8a:8b:47:be:d0:ee:20:75:36:bb:
c3:6d:da:ef:1b:97:f8:c9:fc:58:31:88:b9:57:7d:
61:38:3d:15:0a:4a:9f:b1:28:37:70:97:0d:ea:b8:
dc:2f:22:3b:d1:50:d2:31:91:b8:f6:10:45:d1:04:
88:e3:d2:f1:aa:a2:30:56:d8:6e:db:64:2b:6b:7c:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:64:50:BB:D3:EE:38:90:9B:69:31:5D:60:38:C2:83:AF:FC:A6:7F
X509v3 Authority Key Identifier:
keyid:4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/3abb753c83159278d1732336ecfa6c0898d7d58c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.224.0/22
IPv6:
2803:e5c0::/32
Signature Algorithm: sha256WithRSAEncryption
b3:c6:9a:c9:39:93:3a:52:88:7f:2f:d7:38:71:31:c4:be:fb:
21:52:f4:09:d3:f1:fb:0f:59:1b:33:4e:d2:7d:31:42:a0:81:
a1:62:8f:83:86:61:fd:0f:df:b6:79:c7:c7:e7:12:62:34:6e:
4e:6f:7a:99:f8:cb:c6:31:61:73:00:de:4c:04:6c:14:2a:5b:
94:f5:0d:0e:8b:bd:75:00:c4:4d:a1:49:af:1d:2a:22:fb:47:
10:5e:cc:62:99:d4:c3:d1:67:44:e3:10:e8:ca:fc:e1:d1:cd:
cf:11:14:3a:7c:db:db:3d:1d:e5:20:2c:8d:b5:00:e3:4f:12:
eb:22:89:7a:4e:c5:2c:7a:53:48:0d:bf:bd:74:84:c5:32:2d:
00:cc:a0:4e:2d:df:df:59:a8:15:80:41:b7:3d:f5:74:00:8a:
01:95:64:75:f0:01:09:0d:43:a8:95:ac:a6:3a:36:f2:9e:f8:
3b:cb:81:64:f8:fa:c5:b2:f7:3c:78:e6:86:f2:1d:22:19:01:
ac:8d:7b:e8:a1:e2:b7:4d:ae:e6:f7:57:7e:a9:3f:bb:2b:a2:
5a:77:f8:13:89:74:bf:6e:f2:b4:9b:9e:fe:c7:ea:d2:7a:99:
57:36:f9:da:5f:5f:e2:e8:1d:86:f7:54:32:94:cc:04:30:f7:
70:84:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org