Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/b2ddd3b8cfaf0caeb21bd4da0dd2fa3368404a71.roa
File: b2ddd3b8cfaf0caeb21bd4da0dd2fa3368404a71.roa (raw, json)
Hash identifier: T0OdYoqm5G6q1p60PK+jVN5VkYm5qlD+y1/KMFHPaDI=
Subject key identifier: 3B:F9:04:6F:9A:0D:F2:6E:B9:12:EE:BC:E2:37:B5:92:47:12:96:AC
Certificate issuer: /CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
Certificate serial: 1C036D
Authority key identifier: 4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/b2ddd3b8cfaf0caeb21bd4da0dd2fa3368404a71.roa
Signing time: Mon 12 Jun 2023 21:47:22 +0000
ROA not before: Sun 11 Jun 2023 21:47:21 +0000
ROA not after: Thu 12 Jun 2025 21:47:21 +0000
asID: 266725
IP address blocks: 45.65.224.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1835885 (0x1c036d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
Validity
Not Before: Jun 11 21:47:21 2023 GMT
Not After : Jun 12 21:47:21 2025 GMT
Subject: CN=b2ddd3b8cfaf0caeb21bd4da0dd2fa3368404a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:b1:0d:63:32:e9:04:51:ef:78:46:59:12:
dd:4e:21:9f:75:84:a1:2c:f7:69:86:52:bc:02:e4:
d3:dd:79:9f:d9:6e:26:0a:b7:96:65:43:7a:3a:27:
c6:da:7e:7b:72:c3:16:76:07:21:9a:37:c1:bd:88:
e3:e5:e3:83:d6:b4:ed:51:02:24:3a:b3:9b:68:04:
2f:ca:1c:cc:d8:3d:58:ee:15:3c:a0:1f:88:38:0c:
5a:ee:0c:79:24:6d:f4:6d:42:44:8f:cf:3f:2e:bd:
b9:f3:cc:74:ab:98:0b:e1:63:57:21:f0:67:dd:c8:
2d:56:ec:7a:65:04:90:38:75:72:e9:e9:8a:67:23:
a5:06:8d:6f:9b:bb:13:41:70:1c:fa:24:fe:69:4c:
9a:88:74:60:bc:45:64:91:8e:19:f1:5c:ba:39:96:
e0:0e:c0:57:de:a0:67:44:bf:51:79:bb:d3:d8:2a:
a5:67:f6:57:9c:4b:7d:6c:21:20:8d:cf:32:b5:ea:
8f:18:6c:c7:59:d7:08:0a:e8:0a:a2:ec:6d:0a:47:
39:f4:7f:6d:06:20:47:d5:cb:b1:90:7f:70:c5:de:
68:a0:89:04:c5:bd:9e:ec:0f:cf:05:f7:36:9d:af:
cf:07:b6:96:d3:0c:87:e7:17:89:b8:48:58:19:7f:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F9:04:6F:9A:0D:F2:6E:B9:12:EE:BC:E2:37:B5:92:47:12:96:AC
X509v3 Authority Key Identifier:
keyid:4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/b2ddd3b8cfaf0caeb21bd4da0dd2fa3368404a71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.224.0/22
Signature Algorithm: sha256WithRSAEncryption
35:38:d9:90:ed:05:46:2a:71:ba:64:6f:6c:91:32:39:56:6f:
b8:9c:b9:68:d5:65:20:b3:d8:3c:93:99:73:2e:b5:72:4d:19:
6b:02:96:83:f2:4e:6f:ce:ed:b2:8b:e2:f3:9a:ba:11:25:8a:
87:d0:f1:c6:9b:3a:64:30:27:5c:e5:ba:39:6b:f2:a0:e8:1a:
84:b2:ea:ed:d4:3e:53:4a:ea:d6:cf:2b:a0:2d:c5:49:98:b6:
9e:ee:20:1e:50:1b:16:bc:5d:66:81:6c:86:54:38:1f:c4:a4:
17:b5:70:b7:40:1e:0d:8f:01:c1:ce:74:f1:8a:b3:5f:ac:17:
ea:e7:a0:84:fe:92:d5:db:00:df:27:10:e3:f9:ff:31:f8:37:
b6:60:04:49:70:b8:81:54:ba:4f:4a:f3:d1:86:b1:11:ac:37:
f2:6d:a6:7c:73:13:5b:da:94:e0:b7:a2:4f:cc:6c:9e:99:16:
3f:f7:98:4a:b5:3d:bd:a8:1f:72:05:39:7f:c6:1a:58:c4:fe:
32:bf:ab:b7:38:d6:fb:9e:d9:4a:a4:2e:20:1f:c8:d0:63:16:
f9:8b:2b:9b:82:26:46:77:65:25:ad:80:49:b7:e7:26:50:d2:
b7:2a:9a:11:12:91:fc:e9:29:33:ed:4b:43:36:93:ff:cd:f1:
52:72:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 06:36:07 2023 by rpki-client on console-fra.rpki-client.org