Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/b391634c58b6abbaf171905a1afb0f07711d8c61.roa
File: b391634c58b6abbaf171905a1afb0f07711d8c61.roa (raw, json)
Hash identifier: r6M8P2Spe5wex8I86LA0hTLjQJnzYdnmkf9D+cy0DbA=
Subject key identifier: D8:10:B9:12:F2:4A:27:8A:BE:9B:22:22:AE:D8:CF:71:1D:0A:4A:E0
Certificate issuer: /CN=259c4fb25c604824d214cf7cbe588eab433a5691
Certificate serial: 21FD45
Authority key identifier: 3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/b391634c58b6abbaf171905a1afb0f07711d8c61.roa
Signing time: Wed 05 Jul 2023 13:48:18 +0000
ROA not before: Tue 04 Jul 2023 13:48:18 +0000
ROA not after: Sat 05 Jul 2025 13:48:18 +0000
asID: 52468
IP address blocks: 45.225.88.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227525 (0x21fd45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259c4fb25c604824d214cf7cbe588eab433a5691
Validity
Not Before: Jul 4 13:48:18 2023 GMT
Not After : Jul 5 13:48:18 2025 GMT
Subject: CN=b391634c58b6abbaf171905a1afb0f07711d8c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:94:8d:56:05:f6:07:70:09:0c:b4:82:5d:
81:71:5e:e4:68:88:72:49:60:f8:16:40:a9:0f:75:
af:a2:38:d5:ea:c4:ba:1f:7d:96:50:c0:4f:e6:37:
5a:4e:0f:7a:1f:96:98:b0:c2:de:cd:e3:1b:6b:b6:
67:83:cf:22:12:46:86:eb:1c:c7:78:26:9c:bd:cd:
86:ec:7c:4f:76:f1:c7:d5:35:53:07:0e:82:a1:e2:
37:7d:62:e5:4c:59:45:67:32:1e:37:29:7d:65:bb:
1b:a7:8f:29:55:35:80:af:5f:32:47:96:df:cf:ef:
37:9d:9c:85:0c:11:f0:59:c5:16:61:4c:0d:2c:c0:
89:8f:06:0d:3f:8c:0f:b7:79:44:87:dc:cb:bd:65:
be:93:93:df:72:29:d1:89:90:d0:de:9e:61:01:16:
13:fb:da:c0:e2:e0:f5:23:32:3c:7d:b1:f3:f0:2a:
24:e5:86:ec:e7:58:fc:98:6c:b6:96:4b:c8:b8:38:
73:d1:c7:15:57:a2:5b:ca:fb:b9:2e:bb:5a:2c:81:
8a:c7:49:32:e0:ee:b2:6e:99:e6:a5:e6:f8:36:52:
26:c6:be:77:98:56:fe:a9:a7:20:0e:52:06:bf:c4:
33:65:29:11:5b:02:28:ec:d0:83:97:59:de:2c:c1:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:10:B9:12:F2:4A:27:8A:BE:9B:22:22:AE:D8:CF:71:1D:0A:4A:E0
X509v3 Authority Key Identifier:
keyid:3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/b391634c58b6abbaf171905a1afb0f07711d8c61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/259c4fb25c604824d214cf7cbe588eab433a5691.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.88.0/23
Signature Algorithm: sha256WithRSAEncryption
34:d3:95:61:65:af:6d:ac:e6:b9:a5:d3:b5:d7:ea:88:61:87:
00:e3:ef:56:62:9b:ec:f3:c8:82:c0:61:5f:6d:94:b1:61:ef:
97:65:c2:35:43:d4:8a:9c:06:63:e8:22:2c:29:1f:d7:27:35:
1f:26:ec:b7:e9:60:f5:85:07:ed:f1:72:cf:97:a0:02:84:9d:
b2:30:f4:09:32:65:60:76:36:ee:9e:19:6e:ef:d3:b9:c9:a9:
58:90:f9:46:ee:b1:0b:c2:45:28:7c:22:d9:14:09:ef:cf:c0:
73:0a:c4:5f:2d:17:e0:8c:00:3b:b8:17:27:7f:30:cc:e1:04:
d7:bc:90:f8:7d:8d:2e:3f:82:03:b5:3c:23:b8:3d:67:f2:85:
5f:85:cb:3e:3b:34:f9:e9:c4:d5:f2:94:f8:92:53:cc:a6:b9:
49:4d:d3:66:c9:2c:d7:8d:b2:7c:b1:8e:7f:b3:25:99:47:6b:
65:28:46:fa:20:3e:0b:7b:0e:96:67:31:37:a7:2a:33:7f:85:
9a:64:ef:39:18:cf:1d:97:f8:d5:90:49:3c:d5:84:3e:c5:2a:
6e:cc:f3:f5:56:28:fe:d1:a2:ba:e9:5b:43:ad:5d:15:a5:01:
0f:f7:67:f6:2b:73:a0:be:21:29:fd:1f:4c:72:c7:83:66:ec:
e6:19:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:29:14 2023 by rpki-client on console-fra.rpki-client.org