Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/295d7a1d0fed65aea5c23eec80b4e7e8d70f891a.roa
File: 295d7a1d0fed65aea5c23eec80b4e7e8d70f891a.roa (raw, json)
Hash identifier: gR3QaBzcXIq8ncYaORs5KvcrcthRidSCHf6Vg6/tgJ0=
Subject key identifier: 41:F8:2A:0E:F5:AB:E4:AF:B2:56:DC:66:B0:A3:89:2C:89:AE:19:79
Certificate issuer: /CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Certificate serial: 0B7C
Authority key identifier: 6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/295d7a1d0fed65aea5c23eec80b4e7e8d70f891a.roa
Signing time: Mon 17 Jan 2022 23:22:51 +0000
ROA not before: Mon 17 Jan 2022 03:00:00 +0000
ROA not after: Wed 17 Jan 2024 03:00:00 +0000
asID: 269735
IP address blocks: 45.181.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 07:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2940 (0xb7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Validity
Not Before: Jan 17 03:00:00 2022 GMT
Not After : Jan 17 03:00:00 2024 GMT
Subject: CN=295d7a1d0fed65aea5c23eec80b4e7e8d70f891a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:7a:41:6b:fb:fe:f8:02:6a:fc:cf:5c:63:
9d:d3:bd:02:ba:60:28:ab:e3:2a:e6:8e:c2:be:a9:
dc:ca:54:5c:1b:c5:49:1e:5e:cc:0d:ec:0c:96:ed:
bc:85:6d:32:9f:66:dd:b7:4e:89:76:16:01:d5:75:
7f:47:66:27:d6:01:9b:d6:5d:05:bc:77:a3:26:6e:
cf:b2:2e:7c:88:f5:20:c1:f3:d3:2d:53:20:8f:71:
2d:43:60:27:d5:d1:96:1d:9b:f3:72:9a:9c:f9:c8:
bf:ed:7d:10:5e:dd:b9:28:3a:23:f7:9b:bb:62:a6:
54:9a:27:69:51:f9:15:e4:8e:8e:24:b7:2f:a0:9d:
3b:2b:87:f7:58:e5:b9:2e:f9:67:a6:7b:01:3b:cf:
45:45:04:6a:c8:ac:33:46:ef:85:57:69:3a:11:bf:
b1:4f:c5:b6:e0:4b:5f:c6:3a:4c:0d:7b:df:0f:c3:
7b:b9:76:0a:58:30:02:d8:f3:e7:61:65:58:5b:e6:
1d:fc:f6:e1:cd:60:ba:56:15:57:0f:01:0e:2d:2a:
c4:3e:2f:b1:d3:ef:c7:0a:7f:a8:d3:8d:b9:5c:fe:
ce:3b:ad:b7:a1:54:d1:d7:5e:88:67:34:48:e1:17:
5d:06:70:23:33:85:a9:03:3a:58:c1:8d:9b:5b:29:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F8:2A:0E:F5:AB:E4:AF:B2:56:DC:66:B0:A3:89:2C:89:AE:19:79
X509v3 Authority Key Identifier:
keyid:6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/295d7a1d0fed65aea5c23eec80b4e7e8d70f891a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/22a259f7457f4c5eaca64b503847e85d96b4f33f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:19:33:82:3f:f2:d9:5e:70:13:e4:1e:64:ae:24:c3:50:e3:
91:1a:bc:39:06:72:ad:d1:09:34:94:3e:06:b5:18:99:83:a7:
c0:5b:36:eb:50:ac:e9:85:55:94:35:54:5a:fa:9d:ab:4c:6c:
35:ab:9c:a5:54:1f:35:ff:75:20:cd:ef:1c:89:e3:e1:a3:d1:
b2:75:6e:7e:25:99:9d:5b:c5:d5:92:95:ed:2b:38:5b:97:16:
10:12:8b:66:8e:ff:74:b4:18:80:e9:66:ca:19:5c:e3:80:f1:
9f:62:9d:05:81:8a:d0:d9:64:c7:f9:34:d3:02:b6:02:b0:78:
80:9e:a8:f4:62:bb:64:2e:4d:77:69:a2:ad:7b:e0:12:bc:49:
69:15:e4:8e:f7:e8:ff:4f:30:f3:e2:d8:6d:20:aa:3c:b6:66:
23:d2:9d:d7:f0:ab:d2:6b:ec:01:ff:2d:81:c5:16:94:c1:7f:
95:77:d5:63:cb:ab:39:35:d7:25:2e:5d:a4:6d:8d:fb:6c:4e:
0e:10:fb:6f:4a:2a:6c:05:da:1a:84:cb:12:94:76:f9:e3:e9:
69:a0:28:49:18:3d:75:5f:e3:cd:5e:04:3b:59:7b:cc:3c:b4:
df:9f:a8:70:3b:11:9b:f6:d6:d3:21:84:c3:9a:f6:d9:16:7a:
99:28:4e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 12:45:08 2024 by rpki-client on console-ams.rpki-client.org