Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/fff549eaf9288d9c5a4fa067a82b4eebf45f1d80.roa
File: fff549eaf9288d9c5a4fa067a82b4eebf45f1d80.roa (raw, json)
Hash identifier: BhHM3Lojx7OAukP7rre/b3jb2PjW5A/QunAEP3wG/u8=
Subject key identifier: CA:64:EB:F7:E3:E0:C4:9F:61:BA:6A:99:74:0F:A0:AB:FA:6D:00:87
Certificate issuer: /CN=7855868bb89dd668c1f57896b07b3922fccf8b7a
Certificate serial: 1FC762
Authority key identifier: FB:8D:1B:BD:3E:E0:2D:25:EA:1B:D7:EE:C7:4F:4A:7C:48:D4:9C:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855868bb89dd668c1f57896b07b3922fccf8b7a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/fff549eaf9288d9c5a4fa067a82b4eebf45f1d80.roa
Signing time: Tue 02 May 2023 15:59:05 +0000
ROA not before: Mon 01 May 2023 15:59:04 +0000
ROA not after: Fri 02 May 2025 15:59:04 +0000
asID: 61512
IP address blocks: 45.161.236.0/22 maxlen: 24
143.255.140.0/22 maxlen: 24
2803:6940::/32 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2082658 (0x1fc762)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855868bb89dd668c1f57896b07b3922fccf8b7a
Validity
Not Before: May 1 15:59:04 2023 GMT
Not After : May 2 15:59:04 2025 GMT
Subject: CN=fff549eaf9288d9c5a4fa067a82b4eebf45f1d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:4c:be:af:05:97:67:15:3e:a4:f0:d3:c1:
f4:ac:d6:6d:73:df:8f:c6:7d:72:27:0f:5d:57:dc:
75:7e:16:98:e3:fe:92:4d:8d:8b:18:be:e2:31:1a:
6b:3c:db:60:60:5e:94:4d:82:77:f0:53:da:1c:9a:
38:46:90:7b:c0:f7:e2:29:29:e0:10:4e:c5:f6:30:
96:82:9a:8b:62:a6:9e:38:00:7f:ba:ff:f9:86:d9:
91:28:d4:7c:5e:84:c9:3f:25:f3:65:9c:ba:a7:fb:
85:38:93:94:5f:60:b5:9b:66:34:bb:fd:33:4c:83:
16:48:16:ef:9e:18:61:79:0d:33:9b:07:bb:0f:0e:
d8:89:7b:e2:18:ac:f3:4d:be:cd:72:cc:be:f2:71:
de:06:71:6b:45:ed:87:0d:a9:90:22:4c:52:18:07:
02:f2:be:4f:35:29:dd:1b:de:73:f5:ca:57:03:06:
7b:dc:0d:d9:76:58:cf:78:9e:43:8d:ed:ff:31:b5:
0b:7e:0a:48:27:83:fc:da:54:f5:9d:e9:ee:af:df:
ee:3f:1e:8d:f5:d5:09:95:f6:76:46:4e:05:8b:52:
34:3b:0f:11:f3:5c:fc:ec:73:eb:5b:5f:2e:4a:25:
9f:a6:54:83:fd:61:7b:87:1e:2d:dc:bc:e5:84:3d:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:64:EB:F7:E3:E0:C4:9F:61:BA:6A:99:74:0F:A0:AB:FA:6D:00:87
X509v3 Authority Key Identifier:
keyid:FB:8D:1B:BD:3E:E0:2D:25:EA:1B:D7:EE:C7:4F:4A:7C:48:D4:9C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855868bb89dd668c1f57896b07b3922fccf8b7a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/fff549eaf9288d9c5a4fa067a82b4eebf45f1d80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/19e3978e-3a2f-4e31-9e8d-326e3bb01547/7855868bb89dd668c1f57896b07b3922fccf8b7a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.236.0/22
143.255.140.0/22
IPv6:
2803:6940::/32
Signature Algorithm: sha256WithRSAEncryption
0b:7d:58:bc:72:df:d7:e6:10:0c:c2:84:68:c7:aa:53:81:a1:
2e:b9:52:e1:f0:7b:54:5f:0f:71:a9:a6:7b:e3:df:b1:1e:ab:
25:b8:07:2d:15:dc:07:d6:4b:5e:94:94:07:46:82:70:97:ed:
20:4a:04:f2:14:25:9f:4d:64:a9:b8:22:a7:10:18:05:ed:26:
f2:ce:67:e7:a5:2d:d6:f1:f0:bd:65:30:78:94:0b:43:4e:08:
69:57:e0:da:ad:a3:64:62:b2:bd:f5:99:97:d6:eb:d0:00:a2:
5f:5b:10:2c:04:5a:89:85:ff:52:92:5c:46:12:6d:f6:36:f5:
68:f1:91:c0:32:20:df:72:2d:22:d1:13:18:a8:24:e3:40:d5:
8e:78:05:cb:1d:6f:84:30:d4:8a:7d:1e:ed:fa:b6:9d:f6:21:
36:69:04:17:26:66:98:bc:ee:13:ed:fa:74:07:f3:db:67:45:
42:f3:c3:88:ca:e7:ac:7d:fc:97:7a:e0:5e:77:e0:52:1c:3d:
1a:9a:76:41:4e:18:e8:9a:32:f6:bf:c5:24:5c:33:fc:24:dc:
15:f2:76:b0:cd:0c:82:c6:f9:ba:7b:59:81:05:83:b9:ca:c6:
2b:bb:4f:90:3d:0a:60:47:65:84:d9:64:9f:8b:94:68:63:4e:
fe:78:09:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org