Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/6e213e85533b8b25c29c10f1c18efaff6771cd4a.roa
File: 6e213e85533b8b25c29c10f1c18efaff6771cd4a.roa (raw, json)
Hash identifier: K7UOr3aSA9PKM3lK0E3/PHh87KfJwzWAjJrwxfeEoqU=
Subject key identifier: D8:F8:B0:B1:9B:3F:2D:D8:98:72:12:51:B1:12:18:33:F8:D5:78:06
Certificate issuer: /CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Certificate serial: 024C
Authority key identifier: 6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/6e213e85533b8b25c29c10f1c18efaff6771cd4a.roa
Signing time: Mon 17 Jan 2022 23:20:10 +0000
ROA not before: Mon 17 Jan 2022 03:00:00 +0000
ROA not after: Wed 17 Jan 2024 03:00:00 +0000
asID: 269735
IP address blocks: 45.181.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 07:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Validity
Not Before: Jan 17 03:00:00 2022 GMT
Not After : Jan 17 03:00:00 2024 GMT
Subject: CN=6e213e85533b8b25c29c10f1c18efaff6771cd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e7:8d:25:42:92:a8:b6:fc:57:a5:7a:cf:13:
fd:02:65:9f:f3:d9:e8:32:04:d4:11:43:07:a3:a8:
74:6c:dd:a9:ef:6b:76:e5:c3:3c:c4:0d:76:f8:ac:
c4:9e:3d:d7:ca:5f:9a:ae:08:9b:7f:fe:5c:ed:8d:
5c:e5:c6:b4:ac:d5:53:c0:54:16:57:ac:a6:04:4b:
24:69:d9:e0:5a:c0:1d:b4:65:6e:aa:61:b3:26:66:
11:c5:f5:32:35:b0:48:90:d7:a3:cb:e5:be:aa:76:
85:fd:f2:79:a9:71:4c:c0:8b:09:3f:11:f4:b2:7d:
a4:39:7c:2a:f4:82:d7:3d:7d:b6:81:6b:84:9b:a6:
e6:fd:cf:e9:24:23:44:93:18:b4:bf:75:28:f5:c1:
16:e3:23:cd:74:a2:a2:a7:c9:57:08:10:07:d4:84:
ef:49:b2:6c:ce:86:8a:c0:63:6b:cb:1d:f0:ac:fc:
79:e7:ae:bf:27:ce:46:0b:b9:82:4b:8e:24:38:b1:
c1:7e:82:1c:0e:8f:b2:79:1d:6b:7a:22:6b:49:ff:
08:8f:0a:9f:63:70:b5:6e:9a:d5:c2:84:d6:20:41:
73:e5:16:11:6b:c0:58:48:71:df:eb:7b:54:9d:d0:
c9:5d:d5:01:6e:53:fa:fe:0f:a1:9b:b7:d6:73:00:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:B0:B1:9B:3F:2D:D8:98:72:12:51:B1:12:18:33:F8:D5:78:06
X509v3 Authority Key Identifier:
keyid:6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/6e213e85533b8b25c29c10f1c18efaff6771cd4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/22a259f7457f4c5eaca64b503847e85d96b4f33f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.188.0/22
Signature Algorithm: sha256WithRSAEncryption
59:e5:d4:24:5c:be:af:d1:44:a3:1a:51:6c:de:0b:24:57:1e:
21:a0:4b:fe:96:0f:f9:f7:8f:3f:2d:47:22:e1:53:35:f2:b8:
82:48:d8:08:f6:cc:a0:b2:d3:97:bc:aa:35:bd:93:aa:42:37:
46:c1:e2:e7:a3:d6:b3:b5:89:95:ac:c5:ef:11:50:e4:12:dc:
68:9f:ae:ba:83:22:fe:b7:3a:30:5b:c2:f8:7c:b1:c9:11:55:
68:3b:80:74:b0:f0:70:c4:27:2b:4a:57:0c:9e:1e:09:da:d7:
60:80:a2:7a:b7:22:a4:8d:c3:fb:9b:73:b4:b5:dc:8d:40:85:
d2:88:ab:53:7b:e6:6d:b0:a2:2c:46:60:c6:e7:00:5c:b3:41:
92:ce:d3:d0:18:a1:45:a4:9d:a1:66:2b:f6:c8:0d:da:73:89:
17:18:03:e8:2e:78:5e:96:e1:ac:a1:88:68:bb:05:4e:80:fa:
c8:85:df:f7:63:85:b8:09:fc:c6:f3:69:a5:fa:4d:df:0c:5d:
81:33:cf:b8:fe:81:79:a3:84:e5:17:b9:fa:0b:5f:7f:83:ed:
0b:5e:32:81:46:00:33:74:53:0e:bc:09:30:7d:a6:fa:08:f4:
94:35:b0:d5:74:c6:1c:67:41:50:b5:d9:d7:5d:40:57:69:3c:
55:f6:7f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 12:45:08 2024 by rpki-client on console-ams.rpki-client.org