Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/23edb2bc1d138fed45377af4a45a483fc3ca863f.roa
File: 23edb2bc1d138fed45377af4a45a483fc3ca863f.roa (raw, json)
Hash identifier: IXYZ32j58M0ZReqz/AYIQnHwKwHIpRLqAdlARW++tfg=
Subject key identifier: 0A:42:7C:A5:91:99:D1:23:4D:05:60:11:EE:71:1E:B2:45:73:DF:10
Certificate issuer: /CN=7855868bb89dd668c1f57896b07b3922fccf8b7a
Certificate serial: 1FCD13
Authority key identifier: FB:8D:1B:BD:3E:E0:2D:25:EA:1B:D7:EE:C7:4F:4A:7C:48:D4:9C:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855868bb89dd668c1f57896b07b3922fccf8b7a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/23edb2bc1d138fed45377af4a45a483fc3ca863f.roa
Signing time: Wed 03 May 2023 12:41:10 +0000
ROA not before: Tue 02 May 2023 12:41:10 +0000
ROA not after: Sat 03 May 2025 12:41:10 +0000
asID: 61512
IP address blocks: 45.161.236.0/22 maxlen: 24
143.255.140.0/22 maxlen: 24
2803:6940::/32 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2084115 (0x1fcd13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855868bb89dd668c1f57896b07b3922fccf8b7a
Validity
Not Before: May 2 12:41:10 2023 GMT
Not After : May 3 12:41:10 2025 GMT
Subject: CN=23edb2bc1d138fed45377af4a45a483fc3ca863f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c9:87:4f:77:d8:6e:7d:6a:d7:db:08:68:91:
88:5b:ab:c8:28:ff:28:81:d8:e2:cb:f1:37:c2:47:
83:0d:d5:c0:88:08:f3:12:dd:b3:d7:9e:5d:b6:75:
01:89:20:c3:f6:06:3d:ca:66:ec:84:8c:49:cc:76:
d3:44:0f:4a:2c:3d:51:3b:f8:e8:e9:4f:de:39:1d:
74:4e:53:5c:08:05:4d:d3:42:71:b3:b3:6d:05:41:
30:5e:88:a8:05:95:9f:b6:ab:d9:79:62:0f:b4:68:
5f:33:ec:bc:f3:5d:fd:b1:5e:7f:46:f7:ed:12:32:
e6:19:b4:74:d6:97:a5:dc:bb:db:af:cb:d3:f8:b9:
0b:93:92:24:bc:ef:25:63:c8:8b:4f:db:d2:d5:62:
8b:1d:9a:d5:19:03:96:aa:3f:a7:50:ee:d0:83:65:
37:da:12:29:56:d5:83:b4:de:51:cc:a6:75:80:48:
44:86:5e:0a:a8:70:ca:c1:de:72:a8:f9:bb:53:e6:
c2:d3:12:5d:f4:86:be:e0:c7:1e:b6:74:f8:82:a3:
58:80:e0:8d:41:9c:76:d6:70:ee:15:05:24:10:5a:
88:7c:bf:75:e2:a5:53:ba:fa:78:e7:f6:6b:23:95:
5d:7e:9b:c9:d9:b5:53:17:36:76:45:cb:86:33:18:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:42:7C:A5:91:99:D1:23:4D:05:60:11:EE:71:1E:B2:45:73:DF:10
X509v3 Authority Key Identifier:
keyid:FB:8D:1B:BD:3E:E0:2D:25:EA:1B:D7:EE:C7:4F:4A:7C:48:D4:9C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855868bb89dd668c1f57896b07b3922fccf8b7a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/23edb2bc1d138fed45377af4a45a483fc3ca863f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/7855868bb89dd668c1f57896b07b3922fccf8b7a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.236.0/22
143.255.140.0/22
IPv6:
2803:6940::/32
Signature Algorithm: sha256WithRSAEncryption
73:22:b2:79:51:b6:15:16:f3:16:14:49:92:c6:2a:23:5c:ce:
1e:be:54:f8:4e:69:bf:a1:7e:61:58:1f:c7:94:ea:d0:62:a9:
a8:6b:bb:ed:d4:33:44:60:9e:34:0d:40:b3:04:e6:49:d5:b6:
43:1e:e2:91:1e:a9:09:ec:11:ce:03:9c:50:58:a1:f2:ba:c8:
d8:f0:85:4a:75:87:72:46:6b:f0:52:a4:cc:68:c1:f7:1b:dc:
ae:9a:09:fb:ad:1b:2d:30:b1:38:57:a2:94:27:80:d5:b8:99:
cc:96:32:70:d7:e0:0d:93:27:eb:5d:b6:af:51:5c:b9:ce:c4:
fa:d9:97:eb:40:14:77:73:43:d4:c2:e6:23:97:ac:f4:17:17:
e8:da:1a:4b:a5:10:13:31:0b:4d:9f:10:50:e4:2e:90:a5:20:
46:23:aa:49:97:8e:de:c8:8e:61:e6:b0:83:b6:9c:90:1f:a9:
e3:12:af:ee:fa:6c:50:f4:2e:a3:ef:ec:a2:7d:1c:78:32:e1:
ed:43:2c:68:2b:9a:79:c9:14:0e:37:e2:51:53:1a:06:f5:65:
7b:fb:41:31:a3:d8:72:7b:b7:91:63:48:be:d4:91:56:f8:2a:
15:67:fa:e4:0b:e9:81:54:b4:c3:29:63:72:30:7a:7d:58:5a:
e1:e8:b8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org