Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/07740ddb42709f373dc6df9de26a88396096bba4.roa
File: 07740ddb42709f373dc6df9de26a88396096bba4.roa (raw, json)
Hash identifier: s1a7J6lKZQv0rXcPbOJ8+RC7gi4DxxNaH2oblfbSHxA=
Subject key identifier: E3:ED:F4:8C:25:85:5D:C2:F6:C9:EF:1E:D1:2D:30:25:7B:29:22:3A
Certificate issuer: /CN=7855868bb89dd668c1f57896b07b3922fccf8b7a
Certificate serial: 189A25
Authority key identifier: FB:8D:1B:BD:3E:E0:2D:25:EA:1B:D7:EE:C7:4F:4A:7C:48:D4:9C:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855868bb89dd668c1f57896b07b3922fccf8b7a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/07740ddb42709f373dc6df9de26a88396096bba4.roa
Signing time: Mon 11 Jul 2022 15:46:39 +0000
ROA not before: Mon 11 Jul 2022 03:00:00 +0000
ROA not after: Thu 11 Jul 2024 03:00:00 +0000
asID: 61512
IP address blocks: 45.161.236.0/22 maxlen: 24
143.255.140.0/22 maxlen: 24
2803:6940::/32 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1612325 (0x189a25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855868bb89dd668c1f57896b07b3922fccf8b7a
Validity
Not Before: Jul 11 03:00:00 2022 GMT
Not After : Jul 11 03:00:00 2024 GMT
Subject: CN=07740ddb42709f373dc6df9de26a88396096bba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:f1:93:9d:8b:f4:b3:af:b5:d8:e5:06:d0:
29:90:fd:97:7f:6e:3e:f7:52:c8:d1:33:3d:2b:0a:
2d:fd:48:71:f3:4a:89:20:85:82:04:b1:89:de:93:
de:d8:41:af:4f:c9:e4:08:a3:f1:fa:1c:84:fa:05:
0a:3b:34:7a:31:b1:b9:60:1e:22:a5:3b:30:66:17:
94:43:05:19:b1:68:18:df:15:df:32:6c:f7:b0:23:
c7:d4:56:58:4a:2e:c9:fa:45:4c:d5:44:b0:65:34:
b6:b7:f9:1f:03:ff:ab:84:3f:35:fd:7c:f9:a3:f6:
8b:c7:53:5e:61:a2:c5:9c:7c:e8:17:42:2d:4a:3b:
54:1a:c4:6a:11:6f:7e:52:7f:5f:09:c7:c5:d6:3a:
07:a7:30:c1:7b:86:3c:23:f6:e6:7b:e4:47:26:7a:
b2:d2:24:5e:f4:cd:a1:b2:1c:8a:1f:2a:6a:7d:13:
7d:61:34:11:f6:4d:44:f3:a4:6c:5d:df:25:f3:64:
3f:34:b9:8e:8d:d5:5b:74:80:5f:79:3f:9e:29:4f:
96:48:8a:6c:00:59:ea:7e:12:4a:3b:47:06:32:15:
1a:ed:fa:ca:a1:d2:5f:29:c2:4d:5a:32:a0:21:ea:
16:36:9f:85:de:99:a6:a3:7f:df:fb:3f:82:7f:ce:
39:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:ED:F4:8C:25:85:5D:C2:F6:C9:EF:1E:D1:2D:30:25:7B:29:22:3A
X509v3 Authority Key Identifier:
keyid:FB:8D:1B:BD:3E:E0:2D:25:EA:1B:D7:EE:C7:4F:4A:7C:48:D4:9C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855868bb89dd668c1f57896b07b3922fccf8b7a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/07740ddb42709f373dc6df9de26a88396096bba4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/7855868bb89dd668c1f57896b07b3922fccf8b7a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.236.0/22
143.255.140.0/22
IPv6:
2803:6940::/32
Signature Algorithm: sha256WithRSAEncryption
81:44:63:6c:14:b9:d0:b2:74:ad:2f:d0:eb:4b:2f:15:04:d8:
1f:92:f0:6c:a1:e6:f4:25:04:3a:b0:0b:12:0c:a8:7c:93:23:
09:a4:29:12:12:d5:e7:4c:88:86:47:af:0a:f7:3c:b5:4d:6e:
54:ce:c9:52:87:2d:4d:45:37:5e:f6:d7:4c:10:20:b0:e8:7a:
f8:9b:4a:90:20:f6:74:d2:6e:64:4c:8c:26:b0:9e:62:a0:b9:
a4:e0:5c:06:d3:99:c6:bf:df:e0:da:46:38:c2:71:21:b6:eb:
38:5a:b1:a1:5b:5e:94:04:87:5c:94:f4:81:90:db:16:a9:72:
cc:fb:06:45:84:ea:ed:1f:a9:f9:12:a0:cb:f2:a6:8c:77:e6:
4b:1f:e2:75:56:70:0e:3e:aa:a8:4a:bf:0c:9a:4e:0e:87:e7:
b4:49:ff:7b:63:31:a0:83:7f:f0:82:a5:5e:77:2a:68:ca:fc:
8b:6e:c6:93:08:55:c5:77:a7:62:da:e8:bb:c7:65:91:e7:34:
6d:5a:1f:6d:9b:97:25:ed:a1:f5:49:ac:b5:60:d1:cd:23:31:
e5:df:71:ae:f1:29:5f:19:b6:b1:1b:3d:f7:9b:64:00:92:00:
be:15:d2:4c:3a:c8:b0:27:da:a8:5b:df:59:48:b7:2c:12:0c:
29:57:99:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org