Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/34352e36382e35322e302f32342d3234203d3e20323733313635.roa
File: 34352e36382e35322e302f32342d3234203d3e20323733313635.roa (raw, json)
Hash identifier: fYrSQsdEybc8GBy5C/QEHFl7Tdipvf35hhdFrnxOUXA=
Subject key identifier: B9:A6:73:82:93:6D:60:CF:DC:F7:E1:33:1D:34:43:32:43:99:7A:B8
Certificate issuer: /CN=F4F8147BF99626D17AFEE91E12422301459D2C55
Certificate serial: 220E4AF7B190C7B96B9EC5FC87E603E7634A3FA2
Authority key identifier: F4:F8:14:7B:F9:96:26:D1:7A:FE:E9:1E:12:42:23:01:45:9D:2C:55
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/34352e36382e35322e302f32342d3234203d3e20323733313635.roa
Signing time: Wed 10 Apr 2024 20:45:02 +0000
ROA not before: Wed 10 Apr 2024 20:40:02 +0000
ROA not after: Wed 09 Apr 2025 20:45:02 +0000
asID: 273165
IP address blocks: 45.68.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 12:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0e:4a:f7:b1:90:c7:b9:6b:9e:c5:fc:87:e6:03:e7:63:4a:3f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4F8147BF99626D17AFEE91E12422301459D2C55
Validity
Not Before: Apr 10 20:40:02 2024 GMT
Not After : Apr 9 20:45:02 2025 GMT
Subject: CN=B9A67382936D60CFDCF7E1331D34433243997AB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:a6:b7:6b:02:96:83:f0:b1:13:97:56:83:
a7:f5:7e:92:fb:22:b7:31:ea:72:e2:b6:24:f3:58:
7f:b2:63:87:f3:3b:a3:c6:6f:88:ae:45:f0:e5:bf:
57:12:e9:18:48:da:bb:c2:da:33:b5:81:74:6e:d9:
c3:87:f8:d1:20:43:4f:a5:f2:f7:09:4a:9b:78:51:
77:cd:5a:b6:15:e4:10:4a:af:6b:8b:d3:ca:e1:a2:
ac:b0:e6:c5:e9:23:f5:93:a9:b0:7b:cc:05:d7:f8:
e8:f5:1f:2d:9f:ee:72:6a:b5:60:cc:a1:80:4a:0f:
ec:95:4a:94:c7:8e:06:51:06:7e:66:37:42:dd:2e:
4b:15:39:4e:54:11:57:00:c5:d9:af:e2:c9:10:73:
8d:ea:de:72:1f:58:7c:3e:ac:80:01:dd:c7:0a:cf:
1c:7e:d3:96:1a:db:33:61:3a:75:d8:d6:18:3f:fa:
c5:0c:55:08:b3:b2:c8:3a:7e:a1:19:b6:87:2f:0a:
ff:fe:6e:ea:f3:ab:f4:5b:32:70:9c:5e:1d:5f:8c:
93:66:45:d0:a5:c9:89:9b:ff:2d:04:5f:4a:1e:9a:
4d:8e:88:12:f1:3f:b3:8d:74:4c:db:57:60:28:72:
12:bc:24:ba:1a:72:2e:77:2e:71:ff:5e:04:30:df:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A6:73:82:93:6D:60:CF:DC:F7:E1:33:1D:34:43:32:43:99:7A:B8
X509v3 Authority Key Identifier:
keyid:F4:F8:14:7B:F9:96:26:D1:7A:FE:E9:1E:12:42:23:01:45:9D:2C:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/F4F8147BF99626D17AFEE91E12422301459D2C55.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/34352e36382e35322e302f32342d3234203d3e20323733313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:4a:f0:0a:77:63:0c:42:b5:1f:1b:26:d7:c9:73:71:46:58:
9e:ec:7a:e0:30:a2:91:c5:32:c8:f2:bc:72:7d:7f:ab:e5:bb:
5c:4a:ea:c1:0f:43:4c:44:8e:a5:c3:bd:95:45:9b:5e:c5:53:
a8:09:09:e7:f9:b4:f2:03:18:07:ab:c4:96:52:93:52:8d:7e:
72:19:71:e2:ad:5d:dd:83:16:6e:a2:08:5e:8d:51:ac:c4:75:
3d:5d:2c:03:31:c2:26:32:43:d3:d6:cb:6a:46:82:a9:01:a0:
2e:02:f2:47:3a:66:e7:89:50:1c:d0:be:13:0c:52:ac:bd:18:
3d:af:88:a8:85:10:98:8b:8e:35:7f:d7:f7:45:99:0b:78:1a:
7a:51:02:66:72:16:fa:f1:13:53:bd:80:06:32:d1:63:db:2f:
5e:2b:56:54:d4:96:d9:d2:6d:7d:2e:b9:65:d2:3c:9f:8a:27:
74:31:75:3f:30:1e:d5:42:48:1e:de:0a:e4:ee:c5:b4:02:4f:
d3:9c:ea:73:d9:0d:eb:43:0c:fb:9b:2f:4e:92:9f:03:1a:81:
93:e1:75:1c:4d:5d:d2:76:57:94:65:bb:ab:3a:f4:2a:a9:12:
6b:46:5e:76:ae:2e:ca:24:7c:51:45:34:fc:47:ce:f8:5a:c5:
36:3b:8e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:03:47 2024 by rpki-client on console-fra.rpki-client.org