Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3791117c-4cb4-4228-a81e-9052636292c3/0b060dd1fd9c961b0f96ce998bf2f577daaea2a9.roa
File: 0b060dd1fd9c961b0f96ce998bf2f577daaea2a9.roa (raw, json)
Hash identifier: dZwQMD5TSC2i0RYAqu0pRzMcOqNkMloZ5MeNx2rUmdE=
Subject key identifier: 9C:30:50:A9:F3:AA:5C:43:20:AE:57:76:6B:15:C6:16:C5:A4:C8:6C
Certificate issuer: /CN=687a3e9f15d3c290c441b7a80b9b1761c83b0283
Certificate serial: 0E0318
Authority key identifier: A0:84:26:4A:90:E0:2A:5C:EF:69:2C:57:1A:46:F9:B5:F0:70:A5:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/687a3e9f15d3c290c441b7a80b9b1761c83b0283.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3791117c-4cb4-4228-a81e-9052636292c3/0b060dd1fd9c961b0f96ce998bf2f577daaea2a9.roa
Signing time: Wed 24 Mar 2021 22:50:12 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 265729
IP address blocks: 45.7.208.0/24 maxlen: 24
45.7.209.0/24 maxlen: 24
45.7.210.0/24 maxlen: 24
45.7.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918296 (0xe0318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687a3e9f15d3c290c441b7a80b9b1761c83b0283
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=0b060dd1fd9c961b0f96ce998bf2f577daaea2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:c1:d9:6e:10:6a:16:e0:16:31:e6:ed:3e:
98:55:d0:1e:56:0b:80:25:ad:74:39:e6:9b:c3:33:
ff:f9:2c:27:36:51:4c:3b:92:07:a6:d8:47:a9:f4:
2a:03:33:08:01:f4:73:33:9f:9e:7e:23:69:81:da:
b2:b1:02:fe:50:ab:de:fb:0c:65:91:98:30:f0:f0:
d4:19:ed:b8:36:be:b1:22:4b:e7:9f:98:e7:93:7c:
39:14:49:3e:46:9e:57:84:ac:ff:a3:84:7a:1d:1d:
61:a4:f0:e7:6f:3e:86:f7:36:b3:22:0a:9a:ba:b6:
0d:f4:9b:ce:af:9d:92:3e:a8:37:b3:98:92:c4:69:
2e:08:2a:2e:87:14:f3:95:52:84:55:99:c5:87:31:
61:d6:4e:ea:02:5b:4e:77:88:9c:f2:23:4a:4e:7e:
cb:09:5c:c8:48:2f:48:b6:74:f2:aa:43:ac:cc:5f:
77:44:7b:fa:09:f8:d3:d8:06:5b:bb:32:df:e1:12:
f7:55:d4:70:c3:82:aa:cb:77:af:dc:1e:a3:65:16:
06:e4:b9:21:4b:8a:44:85:db:dc:25:be:9d:cb:1f:
ca:21:6b:d9:9a:3e:71:87:55:13:da:f4:3c:62:e2:
d4:32:12:34:cc:29:ce:e1:27:12:e4:78:3b:5d:64:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:30:50:A9:F3:AA:5C:43:20:AE:57:76:6B:15:C6:16:C5:A4:C8:6C
X509v3 Authority Key Identifier:
keyid:A0:84:26:4A:90:E0:2A:5C:EF:69:2C:57:1A:46:F9:B5:F0:70:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/687a3e9f15d3c290c441b7a80b9b1761c83b0283.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3791117c-4cb4-4228-a81e-9052636292c3/0b060dd1fd9c961b0f96ce998bf2f577daaea2a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3791117c-4cb4-4228-a81e-9052636292c3/687a3e9f15d3c290c441b7a80b9b1761c83b0283.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.208.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:16:9e:cf:17:95:cc:30:75:b7:51:d3:da:6a:82:73:7e:7c:
d0:bc:ed:ab:27:bf:bc:f2:4b:98:b8:4e:b1:f5:84:ca:2f:44:
d2:9e:c1:53:c9:dd:c4:03:07:24:91:ec:84:ab:40:cf:41:61:
c3:22:91:9f:60:45:80:0f:3e:95:b8:e7:0e:91:68:30:2f:20:
d9:6d:24:b3:f8:45:c3:30:bd:ea:bb:21:0c:5d:6e:cc:f4:35:
e0:5e:47:04:54:d2:a0:df:b5:15:8a:b0:32:63:12:2c:e5:6e:
ba:35:9c:c0:02:a7:9b:cd:7a:52:4e:df:5c:24:05:c0:b1:38:
c5:23:18:f4:51:64:59:60:39:f0:03:6c:33:d8:71:f3:b6:b9:
ed:6f:f7:a4:4a:e7:14:b9:c5:d8:c6:58:ab:1c:90:8e:c6:c3:
21:a3:98:34:9a:37:bf:3a:1d:b3:43:86:3f:c6:22:2c:38:59:
5d:08:e0:87:0e:74:53:16:d4:7e:74:fe:17:cc:46:69:06:cb:
77:8f:ee:c3:0d:a8:05:b8:b9:66:d0:3c:f5:cf:d4:a2:4a:28:
1c:76:21:b1:4b:7c:6a:22:86:94:7a:b3:7a:b2:5d:32:25:c2:
68:7f:ec:7a:7f:99:05:52:d6:ac:7b:55:63:c2:2f:73:66:c4:
80:69:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-ams.rpki-client.org