Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/1aa5a0986482f150c07866466add39ca1c6dfaa4.roa
File: 1aa5a0986482f150c07866466add39ca1c6dfaa4.roa (raw, json)
Hash identifier: CmIdo8T76Q7BYEho0qnopkoCcI+2P+bkJnOtOyxWCnM=
Subject key identifier: 17:C6:47:2F:C7:32:F5:D4:6E:5C:39:21:DE:BE:AE:AC:13:BA:64:70
Certificate issuer: /CN=c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e
Certificate serial: F2
Authority key identifier: E3:49:2A:2D:6B:F1:52:BF:19:D7:33:77:42:D3:EA:7A:F4:3F:29:10
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/1aa5a0986482f150c07866466add39ca1c6dfaa4.roa
Signing time: Mon 13 Jun 2022 19:29:51 +0000
ROA not before: Mon 13 Jun 2022 03:00:00 +0000
ROA not after: Thu 13 Jun 2024 03:00:00 +0000
asID: 265842
IP address blocks: 45.224.203.0/24 maxlen: 24
45.225.40.0/23 maxlen: 24
2803:9220::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e
Validity
Not Before: Jun 13 03:00:00 2022 GMT
Not After : Jun 13 03:00:00 2024 GMT
Subject: CN=1aa5a0986482f150c07866466add39ca1c6dfaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:a7:d6:a3:e3:1e:a9:2d:f3:41:04:0b:c7:
a3:e1:a7:88:08:db:6a:bd:7a:b0:7e:7c:f3:c7:be:
dd:62:55:48:7f:bc:3a:55:12:5a:77:f3:03:f9:64:
db:b7:25:1f:72:43:21:82:bb:d6:af:a1:d4:b9:fe:
36:c9:92:ba:47:ba:4b:1b:c6:db:38:43:30:49:7a:
4c:aa:3c:aa:9d:15:1a:5e:17:20:e7:b7:5d:22:4f:
aa:f9:38:99:de:ab:f3:5d:d6:20:53:39:f5:e7:31:
0c:b6:ae:d2:b0:12:1a:2b:5e:15:6e:77:84:a5:f5:
d4:a2:f2:62:71:2e:19:82:d6:d4:e4:d6:a1:36:9d:
8b:e8:0a:35:d2:c5:9f:d1:1f:10:51:b2:b9:b4:61:
bf:e6:89:af:d0:fd:92:1b:7a:26:ff:d9:57:07:4d:
cf:fd:8f:04:bd:24:2c:96:3a:b0:63:a0:a9:34:7a:
e6:4b:9b:b1:a8:6b:0e:c3:35:66:74:33:b3:21:da:
95:9b:93:48:2c:65:c4:73:79:10:5d:a7:94:e7:aa:
dd:32:8c:28:9e:cc:28:dd:56:e8:54:fd:5f:5f:b3:
bb:c1:bc:29:2d:86:e9:41:25:6d:84:d4:8f:cf:20:
ac:9f:fe:9f:5f:90:6b:e2:83:06:63:22:4c:08:99:
19:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C6:47:2F:C7:32:F5:D4:6E:5C:39:21:DE:BE:AE:AC:13:BA:64:70
X509v3 Authority Key Identifier:
keyid:E3:49:2A:2D:6B:F1:52:BF:19:D7:33:77:42:D3:EA:7A:F4:3F:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/1aa5a0986482f150c07866466add39ca1c6dfaa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/28fa21b8-6119-4cec-bdf9-0391ac5d3862/c5f9bb8cad69086a8942864ba26c3a5ee43bcf9e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.203.0/24
45.225.40.0/23
IPv6:
2803:9220::/32
Signature Algorithm: sha256WithRSAEncryption
28:7d:22:e6:6d:83:bb:f6:62:ff:ba:b7:84:56:a3:f1:ec:bd:
e4:71:c3:4e:3f:5f:9b:ad:b7:5f:31:2a:bc:d5:1a:23:0a:21:
59:f9:12:df:74:aa:c0:fd:a5:28:44:f1:d8:8f:af:95:70:e8:
98:5d:b5:ab:78:71:c3:a8:f7:e5:6e:72:84:c1:a8:0a:63:06:
2c:57:b5:13:f6:2f:05:63:ec:7c:9b:06:86:b5:16:26:47:ca:
a7:c4:cc:86:dd:5f:42:5c:af:40:18:dc:b9:28:62:6a:b8:83:
7e:49:e3:f2:02:0a:9e:32:1e:f8:1d:9a:91:e2:13:9b:1d:fc:
33:a2:1a:4e:c5:9c:54:ba:a5:3b:3b:bd:1c:d1:03:6c:0e:f7:
23:86:c5:a8:0c:79:05:3f:d0:df:3f:8e:e6:13:df:c0:91:02:
c8:0b:c6:71:09:32:a8:83:fb:76:cb:9f:32:51:34:2f:40:7d:
86:54:48:96:1b:1e:13:e0:95:15:fe:1c:e8:a5:0c:88:63:e7:
7d:5e:98:11:c0:9f:1f:01:42:2a:7e:c2:5a:d6:7f:ad:dd:73:
bb:3a:31:ec:cf:85:b5:0e:2e:1e:d2:92:98:a1:13:db:c9:6d:
3f:32:8f:64:a1:18:7c:21:07:80:48:fd:3c:09:e0:b4:64:0a:
53:fe:43:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 16:03:50 2023 by rpki-client on console-fra.rpki-client.org