Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/9818f845e5d8abd710bcff69331174aa33309ea9.roa
File: 9818f845e5d8abd710bcff69331174aa33309ea9.roa (raw, json)
Hash identifier: Uj1CUOXi5+s5XHd2kJJUGmU6M9jfADKiwRMVV1pQQ58=
Subject key identifier: C8:A1:0B:15:7C:B1:EE:26:88:DE:6F:55:81:A7:46:EC:0B:3A:88:BB
Certificate issuer: /CN=610a073086b39384e909786d0a194418acd0bd49
Certificate serial: 23C849
Authority key identifier: D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/9818f845e5d8abd710bcff69331174aa33309ea9.roa
Signing time: Fri 25 Aug 2023 08:30:00 +0000
ROA not before: Thu 24 Aug 2023 08:30:00 +0000
ROA not after: Sat 23 Aug 2025 08:30:00 +0000
asID: 271911
IP address blocks: 45.70.56.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345033 (0x23c849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610a073086b39384e909786d0a194418acd0bd49
Validity
Not Before: Aug 24 08:30:00 2023 GMT
Not After : Aug 23 08:30:00 2025 GMT
Subject: CN=9818f845e5d8abd710bcff69331174aa33309ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:6e:15:d3:4e:58:fd:07:7b:b3:a6:16:8c:
76:ea:aa:ef:82:33:15:d6:b0:27:6c:b2:76:39:53:
50:64:29:a1:5e:24:58:8f:63:f9:9c:fe:0f:13:ba:
ad:35:27:77:77:8d:d1:28:d7:0a:fa:79:c7:df:90:
64:95:19:a3:e2:bc:16:a7:c9:ec:82:25:ed:32:41:
34:34:48:d5:55:e2:6e:6f:e4:0a:e5:77:b1:88:39:
1e:4f:b4:bc:24:e0:2f:b7:8b:ab:a3:ec:fc:d4:96:
a1:a2:c6:82:fc:0c:0b:da:05:ae:43:6d:1f:3a:74:
d2:6e:59:e9:b3:c0:4e:e3:68:c1:ee:bd:d5:dd:ea:
22:8f:a3:c7:d6:fa:5c:89:6f:26:82:c7:e9:90:68:
b6:2d:af:a3:90:97:21:17:b1:e7:b0:c8:11:0e:6b:
b0:e2:2b:ac:af:f9:a2:de:b1:ef:1c:2a:d2:45:20:
87:7d:ce:f8:10:8d:26:6d:9a:0b:b9:2e:4d:e3:c6:
ca:57:8f:05:20:0a:c7:f7:c3:e6:d5:4f:31:c9:6a:
cb:f1:b7:9c:78:b7:87:36:d5:ec:16:87:50:f4:c7:
64:76:a9:e4:df:92:86:b0:40:ae:97:52:89:d6:21:
11:2d:4e:32:26:13:eb:60:17:2b:b4:97:4e:75:3e:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A1:0B:15:7C:B1:EE:26:88:DE:6F:55:81:A7:46:EC:0B:3A:88:BB
X509v3 Authority Key Identifier:
keyid:D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/9818f845e5d8abd710bcff69331174aa33309ea9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/610a073086b39384e909786d0a194418acd0bd49.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.56.0/22
Signature Algorithm: sha256WithRSAEncryption
76:49:5a:ff:fc:f1:48:bc:62:7f:d1:6a:de:19:de:4a:1e:50:
b8:ae:05:51:e1:17:dc:06:8d:d1:f0:0f:d2:ce:50:1e:d3:6f:
ea:91:3b:e1:e7:da:bb:90:62:ad:50:ed:aa:14:0f:23:96:23:
19:07:75:17:ef:91:99:73:be:bf:5f:5c:21:40:f9:40:e7:25:
9b:83:dd:a8:df:be:cc:d7:9c:0e:2c:fa:c0:9c:33:6d:ef:85:
fe:2f:b6:43:c0:a7:62:8a:f7:fc:bc:a9:4e:1d:74:23:f1:88:
7b:df:d5:5e:05:0c:5c:88:89:f7:80:ae:a5:19:d4:2f:35:3a:
f4:77:8b:e3:7f:d9:1c:20:90:ec:a5:89:5f:95:0c:48:09:9d:
87:5d:96:35:b0:8f:c6:19:df:21:f2:ae:d4:eb:83:39:33:5a:
94:42:81:74:3f:71:94:99:b8:26:92:a7:d3:63:8d:f3:38:1c:
26:8b:13:13:b8:45:bb:49:56:d5:14:82:0c:e4:f4:8f:56:5d:
21:c9:64:98:69:55:7d:35:2a:09:bb:e2:82:e3:c5:d2:b0:e1:
5d:99:eb:99:4a:82:46:e0:16:8b:eb:bb:cd:8a:ab:c8:8b:69:
e9:09:89:ee:49:2d:f6:cc:ad:d2:cd:44:50:09:83:92:9e:f8:
5d:a5:0d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 22:35:24 2024 by rpki-client on console-ams.rpki-client.org