Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/b303470d278576f476ddf8e64d4df3f5af1d256f.roa
File: b303470d278576f476ddf8e64d4df3f5af1d256f.roa (raw, json)
Hash identifier: GE20W90GJjnHQmu8YA7ggnz+UdyHfXNZ8PDO0EndiEA=
Subject key identifier: BD:77:46:7E:6C:CA:6E:B1:55:FE:9D:4F:3B:79:83:B3:EA:09:7A:4B
Certificate issuer: /CN=610a073086b39384e909786d0a194418acd0bd49
Certificate serial: 225945
Authority key identifier: D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/b303470d278576f476ddf8e64d4df3f5af1d256f.roa
Signing time: Wed 05 Jul 2023 01:47:28 +0000
ROA not before: Tue 04 Jul 2023 01:47:28 +0000
ROA not after: Sat 05 Jul 2025 01:47:28 +0000
asID: 52468
IP address blocks: 45.70.56.0/23 maxlen: 23
45.70.58.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251077 (0x225945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=610a073086b39384e909786d0a194418acd0bd49
Validity
Not Before: Jul 4 01:47:28 2023 GMT
Not After : Jul 5 01:47:28 2025 GMT
Subject: CN=b303470d278576f476ddf8e64d4df3f5af1d256f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:29:8c:66:55:90:30:ab:34:58:ae:0f:a9:9e:
1a:c0:90:12:67:27:83:2a:96:f7:a7:b4:93:46:38:
9d:db:86:61:11:6f:69:30:7c:71:1c:77:0c:cd:b6:
c1:43:f8:ab:e0:dc:ad:fb:c8:c6:77:58:07:bf:22:
61:14:26:51:ba:eb:55:c4:3f:53:0c:4d:84:6d:a8:
c7:ac:63:84:d3:21:2e:7b:e3:a4:21:d7:3d:98:cc:
9b:6f:35:8d:1b:3b:c7:9d:d7:8b:c6:b4:f8:10:62:
8f:79:9d:65:47:34:7e:bf:4d:57:ff:ea:42:b3:f4:
7f:9e:a6:1b:87:93:8d:81:fb:be:34:a7:97:6c:6a:
ee:d5:12:1c:1e:63:6d:b9:70:6e:22:6b:f6:7d:98:
9b:e5:09:9e:a0:bb:6f:dd:aa:29:20:fa:8e:a0:bd:
2c:d8:da:95:94:e6:50:49:d2:a4:a2:39:89:e6:75:
d0:65:ad:95:ea:c2:79:d9:20:db:3f:43:b0:0f:ce:
23:b4:23:21:b8:44:aa:62:f5:57:3a:9d:9c:6f:34:
39:21:03:96:52:98:90:62:77:0e:98:ca:a2:28:8f:
e8:c8:ba:fd:2c:08:b4:34:d0:f2:b3:af:76:a9:e9:
f1:3d:8c:0a:c7:c3:c5:bc:33:d0:b4:6e:71:26:7e:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:77:46:7E:6C:CA:6E:B1:55:FE:9D:4F:3B:79:83:B3:EA:09:7A:4B
X509v3 Authority Key Identifier:
keyid:D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/b303470d278576f476ddf8e64d4df3f5af1d256f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/610a073086b39384e909786d0a194418acd0bd49.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.56.0/22
Signature Algorithm: sha256WithRSAEncryption
55:66:41:b2:c7:d8:1d:81:18:81:bc:fb:c8:31:9e:0d:d6:9c:
fa:d8:cf:64:7c:d6:0e:5c:f5:c9:49:a1:0f:f7:9b:38:70:e4:
13:4a:1b:20:d1:b4:37:c0:1d:9c:4b:de:2b:fc:ce:5c:b0:58:
b8:f1:64:bf:b3:48:71:ac:4c:0f:f8:ae:ea:46:d6:3c:5b:a7:
4a:2d:d9:6c:3d:7f:a5:40:4f:a0:39:32:b3:1c:33:26:b2:ee:
42:2a:71:14:30:07:d7:a7:b9:2b:58:a4:e0:fe:d4:e3:87:b0:
d7:71:ac:0f:3c:b3:ee:8b:90:7d:b7:b1:5d:81:4f:ef:56:8a:
7e:3b:2c:60:c6:5e:c7:db:b5:86:1d:1b:23:3a:84:7f:bc:92:
bd:4b:34:4b:ec:be:a8:8f:43:07:e8:ad:cb:90:27:2b:cd:e7:
f1:98:35:78:e5:2b:bb:04:f9:f4:df:87:4f:e9:e7:62:03:b9:
d5:cc:b5:2b:ec:17:59:8f:f3:e5:4d:03:65:eb:3c:a9:be:b0:
89:40:1e:65:b1:4d:2a:4f:61:0c:01:57:5f:0f:94:2c:ad:42:
a1:16:0b:a5:a0:e9:bc:4a:8c:0e:fb:ed:21:3c:81:3c:5e:9d:
2d:92:da:73:a6:dd:09:0a:09:8e:d5:56:40:a3:97:be:49:6e:
62:74:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:26:36 2023 by rpki-client on console-ams.rpki-client.org