Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/bbee66740b00d64affce49b7dcd547671c2cb7c2.roa
File: bbee66740b00d64affce49b7dcd547671c2cb7c2.roa (raw, json)
Hash identifier: hnWl9syNmiUJ1wmsscF5niC6E5bhxr2vvWr8Dy75Z2s=
Subject key identifier: F7:9D:EE:36:FE:A9:5C:A1:A4:D9:7F:9C:79:5D:1A:6A:1E:A3:3F:BA
Certificate issuer: /CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Certificate serial: 0C2D
Authority key identifier: 6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/bbee66740b00d64affce49b7dcd547671c2cb7c2.roa
Signing time: Mon 17 Jan 2022 23:23:23 +0000
ROA not before: Mon 17 Jan 2022 03:00:00 +0000
ROA not after: Wed 17 Jan 2024 03:00:00 +0000
asID: 269735
IP address blocks: 45.181.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 07:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3117 (0xc2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Validity
Not Before: Jan 17 03:00:00 2022 GMT
Not After : Jan 17 03:00:00 2024 GMT
Subject: CN=bbee66740b00d64affce49b7dcd547671c2cb7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:34:0b:a5:4c:39:64:5f:12:c6:37:81:00:8a:
7b:b4:4b:58:ca:ab:40:ca:1b:fe:78:75:51:d4:a0:
30:e7:b1:f2:41:7f:53:0a:f9:84:6e:34:1e:80:13:
39:a9:57:4b:7c:33:f3:24:1a:f2:c5:72:03:ed:22:
2a:9a:9d:cf:4b:66:1d:9d:a2:62:66:cf:60:c6:f7:
7b:31:02:d9:f8:d1:d5:f9:79:03:34:1f:fb:f4:b7:
14:84:b7:08:51:ce:58:14:fd:a8:cc:43:1d:c5:44:
53:4e:f1:cc:58:21:e1:f9:82:56:4a:27:ab:5e:b6:
5d:c1:e8:5e:f0:bc:9e:95:9f:47:73:52:9b:cd:38:
da:4f:91:de:7c:da:48:66:61:bb:30:bb:b6:c3:95:
ce:89:d0:3d:57:fc:0f:fe:bf:38:cb:a7:e1:7c:11:
55:a0:a0:11:50:07:93:2e:29:58:76:b1:b1:7c:59:
c8:c6:6e:39:d2:22:fc:3f:4d:81:7b:49:d9:b4:f8:
7f:fd:42:c5:23:93:8e:67:58:4d:d4:a8:5b:be:46:
60:84:7f:d3:c2:13:ed:58:03:82:36:21:fb:df:f4:
43:c6:6a:d1:c0:b8:43:39:43:73:fd:f0:28:3f:f7:
20:bd:9c:b4:99:43:b9:4d:2f:3f:ed:2a:55:8a:64:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9D:EE:36:FE:A9:5C:A1:A4:D9:7F:9C:79:5D:1A:6A:1E:A3:3F:BA
X509v3 Authority Key Identifier:
keyid:6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/bbee66740b00d64affce49b7dcd547671c2cb7c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/22a259f7457f4c5eaca64b503847e85d96b4f33f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.191.0/24
Signature Algorithm: sha256WithRSAEncryption
08:98:0a:42:d3:bc:91:30:4b:e8:dc:cd:8d:14:4f:45:f8:2d:
4b:32:41:84:5f:a8:67:68:8a:69:14:8a:d8:24:dc:a3:77:11:
96:6e:91:48:c1:0c:38:09:7c:8c:80:fc:37:cf:93:97:6e:44:
77:3a:41:78:9b:13:32:aa:35:34:8a:81:9c:6f:d0:56:34:97:
22:90:87:b0:75:56:f8:90:6f:cb:7c:f4:d0:94:fc:d1:a2:f4:
2a:37:02:4d:30:e9:e4:a5:95:04:5a:82:ef:81:f0:e0:9d:8c:
f5:17:7b:21:87:7f:76:47:5d:5f:10:80:a5:3c:05:1f:a3:98:
79:b7:d6:f0:0b:89:85:95:9c:04:dd:38:ff:2b:4e:49:0e:9e:
b7:2e:ec:5c:ed:75:ef:20:e5:86:0f:b1:ff:08:a4:0d:2a:f3:
3a:e1:be:f1:17:85:96:c3:31:6d:f5:57:80:38:f6:9a:33:5e:
e3:67:52:47:00:8e:ca:47:b3:a5:5a:7a:5b:54:10:26:56:11:
a0:9f:35:15:3e:a0:f2:21:94:49:75:43:ed:4f:4a:42:c2:72:
d0:63:bc:29:93:be:69:63:f3:7d:f4:52:d6:38:1c:48:70:65:
c1:21:7e:f1:ef:56:2b:07:9a:60:5b:40:03:7b:80:b3:6b:fc:
fb:19:78:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 12:45:10 2024 by rpki-client on console-ams.rpki-client.org