Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/4da50cd5b1c177b047973b57e7f7cb97f02aca46.roa
File: 4da50cd5b1c177b047973b57e7f7cb97f02aca46.roa (raw, json)
Hash identifier: BBnmcFR0M5MaBv+IyZYX1lHM5ktb39a5207+CIeR5fY=
Subject key identifier: F1:22:3A:20:C5:76:0D:5D:B1:83:E8:2C:B2:4E:53:A7:28:69:EF:28
Certificate issuer: /CN=9288132902323827f44806de3061debd517a8fd9
Certificate serial: 1E2412
Authority key identifier: AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/4da50cd5b1c177b047973b57e7f7cb97f02aca46.roa
Signing time: Tue 07 Mar 2023 21:37:30 +0000
ROA not before: Tue 23 Mar 2021 14:34:04 +0000
ROA not after: Tue 24 Mar 2026 14:34:04 +0000
asID: 265858
IP address blocks: 45.225.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 17:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1975314 (0x1e2412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9288132902323827f44806de3061debd517a8fd9
Validity
Not Before: Mar 23 14:34:04 2021 GMT
Not After : Mar 24 14:34:04 2026 GMT
Subject: CN=4da50cd5b1c177b047973b57e7f7cb97f02aca46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:1e:d6:e8:f4:6d:7c:48:c1:b1:6f:0c:03:
99:20:04:79:2f:eb:3f:6c:99:58:e7:26:b7:1d:9a:
de:40:58:6e:02:1c:86:e9:8c:26:97:f5:b5:3d:20:
54:9a:8d:5c:d1:82:da:4c:59:09:e2:25:a8:c2:4d:
a6:bf:44:46:c7:e4:ad:cf:b0:6d:8c:8c:9f:af:db:
dc:a6:5b:c8:c9:89:2c:36:1d:e7:81:70:5d:cc:13:
3a:53:ff:0f:fa:27:6d:92:d9:fa:69:4b:d0:c0:22:
55:12:2c:9d:12:cb:e2:98:09:81:96:ca:1c:89:96:
50:3b:cc:ef:af:16:c2:f8:f9:80:41:1a:43:a3:8f:
05:ff:5d:b7:63:ae:90:e7:23:c0:e4:b7:56:e7:aa:
00:4f:6e:ed:19:84:3e:0d:f7:15:a0:0f:41:ac:09:
ce:bf:e8:1e:23:0e:c4:ef:9f:0a:6d:57:7e:8e:a1:
e3:47:6f:65:fb:6e:27:e2:45:7e:c6:73:0e:d2:fd:
4f:a5:86:58:34:be:7a:32:05:8d:ea:cc:5d:c8:43:
0c:7e:9e:51:dc:c6:44:d8:f7:6d:e0:fe:ee:c4:ad:
50:8f:2e:19:6c:4a:2e:77:c0:86:3a:3c:07:82:92:
f0:e9:32:60:02:0f:53:1c:bd:f5:e2:92:27:d3:9b:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:22:3A:20:C5:76:0D:5D:B1:83:E8:2C:B2:4E:53:A7:28:69:EF:28
X509v3 Authority Key Identifier:
keyid:AF:2C:AA:16:5B:06:07:4E:57:3C:2C:21:E2:F1:A0:3A:1B:31:5F:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9288132902323827f44806de3061debd517a8fd9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/4da50cd5b1c177b047973b57e7f7cb97f02aca46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/115ecc16-cba7-4200-9f5e-9794c5e5359d/9288132902323827f44806de3061debd517a8fd9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:7b:2a:2c:e9:20:34:ce:cc:1a:fe:2d:31:69:79:6e:e7:bd:
55:c3:2b:94:ab:94:08:24:31:1f:fc:5d:90:85:6c:8f:ce:bf:
cf:42:f9:8a:e0:6c:91:a2:2f:e1:71:81:74:80:2c:d6:63:46:
b4:71:e2:bb:e3:57:3c:1b:10:57:4c:41:49:10:72:cb:dc:b0:
00:aa:36:f3:b4:93:74:13:e9:b3:a8:2b:41:b9:62:7c:39:2f:
09:12:0e:be:33:bf:19:6c:55:48:03:80:80:a3:ee:31:a3:cc:
aa:2d:ff:91:9c:2a:ca:db:c5:6f:f0:f6:14:25:79:b0:08:2b:
0c:9b:d0:b9:88:7f:ff:e6:0a:9a:96:41:51:3b:ed:b4:72:2a:
96:99:e6:d7:28:01:7d:2d:e4:19:63:de:f0:af:66:3d:d7:80:
7e:87:05:0e:7f:99:6f:f6:4e:9b:09:60:02:2a:bf:00:4a:1e:
1b:66:a3:00:fa:1d:35:a2:e4:1e:dc:1a:e6:27:e1:8b:46:fc:
b8:ea:9b:8a:db:20:05:73:94:11:4a:1d:e2:4f:1f:8f:a9:66:
81:ea:91:1d:f2:1c:69:f9:b9:0a:37:ea:93:ee:11:be:5f:ec:
b2:19:1f:cb:66:7f:00:68:47:75:a1:bb:05:df:3f:a0:af:18:
40:de:bd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 22:04:32 2024 by rpki-client on console-fra.rpki-client.org