Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/ce1cabb44a21940437d693320b97cee082ed2a46.roa
File: ce1cabb44a21940437d693320b97cee082ed2a46.roa (raw, json)
Hash identifier: r+joT72ArSUw9/7IP/NYBakNTLvK+1H3efBUWJZ+yCs=
Subject key identifier: 33:61:AC:2E:B5:40:EC:D9:7B:B7:F0:1A:83:18:81:41:A5:08:0D:D7
Certificate issuer: /CN=259c4fb25c604824d214cf7cbe588eab433a5691
Certificate serial: 21EB1F
Authority key identifier: 3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/ce1cabb44a21940437d693320b97cee082ed2a46.roa
Signing time: Wed 05 Jul 2023 01:48:58 +0000
ROA not before: Tue 04 Jul 2023 01:48:57 +0000
ROA not after: Sat 05 Jul 2025 01:48:57 +0000
asID: 52468
IP address blocks: 45.225.88.0/23 maxlen: 23
45.225.90.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2222879 (0x21eb1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259c4fb25c604824d214cf7cbe588eab433a5691
Validity
Not Before: Jul 4 01:48:57 2023 GMT
Not After : Jul 5 01:48:57 2025 GMT
Subject: CN=ce1cabb44a21940437d693320b97cee082ed2a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5d:fe:87:b6:08:f0:08:00:2b:88:e1:25:c4:
dc:b4:e1:7b:e4:3b:09:a7:b9:37:fd:5a:99:64:58:
36:c0:0c:4a:d1:27:26:eb:f4:a8:4f:2c:f6:d4:ae:
99:db:4a:16:97:58:3a:4b:db:22:eb:48:82:0e:69:
72:bb:40:b7:51:d2:9d:36:72:28:7c:0e:ba:71:42:
06:b5:f5:44:c2:c3:2d:29:f5:5a:45:b3:f0:f1:6e:
e9:c9:5f:8b:b4:db:04:5c:99:00:8f:1a:8b:f3:eb:
8c:53:02:54:8d:c5:47:1f:a1:34:0e:68:8c:50:cb:
10:29:e6:5e:9d:b6:31:6d:ac:73:30:d1:89:56:6d:
52:49:2b:93:6c:f4:d5:95:30:23:16:93:38:f2:d2:
21:3b:e6:dd:35:6b:ae:2e:68:e4:29:1c:f6:a7:f4:
19:fe:c3:e5:88:fa:a3:ed:9a:f9:68:c0:62:4a:3c:
25:05:01:b4:d4:d8:d5:b2:38:8a:c2:79:f2:52:d1:
63:2e:e9:1d:22:b8:c3:f6:76:b4:e8:e2:1c:22:43:
0b:10:2e:e1:71:14:26:c2:5d:8d:94:46:55:26:be:
f8:83:56:5d:4f:e3:98:99:32:3b:a1:70:ea:ab:6e:
c7:ad:39:b7:49:50:4d:dd:de:5a:f2:1e:90:5a:22:
94:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:61:AC:2E:B5:40:EC:D9:7B:B7:F0:1A:83:18:81:41:A5:08:0D:D7
X509v3 Authority Key Identifier:
keyid:3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/ce1cabb44a21940437d693320b97cee082ed2a46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/259c4fb25c604824d214cf7cbe588eab433a5691.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.88.0/22
Signature Algorithm: sha256WithRSAEncryption
87:a7:6b:3b:16:03:27:0e:9e:8a:0c:99:46:40:be:25:30:99:
27:2d:74:7a:a6:92:dc:de:91:f2:ff:5a:f0:5c:af:54:a2:fa:
e0:1c:a8:ab:53:2e:f4:db:3c:51:de:a1:5d:77:7d:f7:43:34:
ec:af:22:4e:67:17:ae:21:0f:2c:b7:21:41:24:f8:ad:1f:6d:
1e:b6:25:a4:e7:a3:88:ad:c4:b4:a5:18:14:7b:3c:73:63:ad:
43:bf:c1:87:a5:e8:bd:77:5f:d1:38:af:14:0c:ca:fd:88:04:
16:09:16:e4:e8:24:2e:76:76:40:49:c8:62:87:65:97:9a:12:
28:fe:17:4e:03:bc:18:9a:99:6c:23:6d:80:2c:e9:c3:02:1c:
88:4b:36:46:c3:98:2b:a0:42:d2:2e:33:ff:db:ce:66:2a:c3:
fa:93:61:82:a6:d5:b1:2e:a6:f2:9d:80:08:6b:a2:07:a5:0e:
87:64:80:45:b0:c4:81:e2:b5:c8:9b:19:6b:39:13:31:ee:63:
2c:01:3d:bb:3f:28:f5:90:f4:32:ca:e4:58:70:66:34:f1:7f:
d0:4a:ce:09:31:25:b1:29:cd:34:23:9d:6d:01:88:ec:62:a0:
b0:9d:22:36:32:8c:f7:95:ff:86:98:98:50:b4:04:d3:f9:f9:
9e:69:6a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:29:14 2023 by rpki-client on console-fra.rpki-client.org