Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/34352e372e38342e302f32322d3234203d3e203531323032.roa
File: 34352e372e38342e302f32322d3234203d3e203531323032.roa (raw, json)
Hash identifier: pNrNWeE8mNntPD+oh1Fn9upHjgcpkQH7rtxjm44fuAI=
Subject key identifier: BE:67:A6:ED:EF:8F:C1:93:75:80:60:6B:4B:0B:9C:A1:F8:AB:26:19
Certificate issuer: /CN=FB037DD6ACAA6389722AF82D5B43CBAFA3A33153
Certificate serial: 4673F69BE850D1A80E65D18572D1272CD1EB4B83
Authority key identifier: FB:03:7D:D6:AC:AA:63:89:72:2A:F8:2D:5B:43:CB:AF:A3:A3:31:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/34352e372e38342e302f32322d3234203d3e203531323032.roa
Signing time: Sun 07 Jul 2024 15:50:00 +0000
ROA not before: Sun 07 Jul 2024 15:45:00 +0000
ROA not after: Sun 06 Jul 2025 15:50:00 +0000
asID: 51202
IP address blocks: 45.7.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jul 2024 20:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:73:f6:9b:e8:50:d1:a8:0e:65:d1:85:72:d1:27:2c:d1:eb:4b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB037DD6ACAA6389722AF82D5B43CBAFA3A33153
Validity
Not Before: Jul 7 15:45:00 2024 GMT
Not After : Jul 6 15:50:00 2025 GMT
Subject: CN=BE67A6EDEF8FC1937580606B4B0B9CA1F8AB2619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:61:0a:3e:55:3d:fb:60:bd:ac:8c:14:bf:
32:b0:58:40:d1:8b:6e:46:a7:4e:ca:22:fe:43:b0:
7d:87:c6:a9:81:d7:7a:5a:f1:4c:5a:5c:ab:80:b9:
c0:39:89:99:23:0b:3f:8e:f2:57:a9:1b:59:96:d3:
bb:e6:e8:42:bf:91:59:ec:8f:dd:97:a4:9b:9f:bd:
4e:bf:d2:1b:41:67:7b:12:b6:2e:8b:1f:62:25:97:
63:d5:be:4f:54:65:38:6d:46:12:d8:c4:7d:4a:58:
a9:af:7b:c5:64:f2:e5:4b:15:7c:db:02:4e:bc:cb:
df:bc:9b:07:81:1c:a4:65:ed:1e:88:ae:5b:f4:44:
15:a6:f6:2b:bb:05:79:0f:5b:5b:12:f6:a1:23:04:
80:7a:ca:4d:62:10:d0:5e:e1:cb:a9:42:2f:88:27:
fa:9c:fc:3e:01:1b:f6:40:cc:1e:14:a5:5d:61:4b:
2f:9d:7c:89:0d:44:3a:46:83:78:41:61:d8:64:9f:
c5:55:7b:f2:06:b6:9f:e7:f8:1c:8c:08:07:46:18:
b9:e0:cf:ea:3c:14:4b:bb:f4:30:e3:f1:90:3d:1c:
a2:9c:51:c0:5d:44:45:a9:58:70:64:83:60:3a:96:
0e:36:9b:fb:20:7a:d5:12:cf:f6:5d:0e:90:70:2c:
99:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:67:A6:ED:EF:8F:C1:93:75:80:60:6B:4B:0B:9C:A1:F8:AB:26:19
X509v3 Authority Key Identifier:
keyid:FB:03:7D:D6:AC:AA:63:89:72:2A:F8:2D:5B:43:CB:AF:A3:A3:31:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/34352e372e38342e302f32322d3234203d3e203531323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.84.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:49:24:9f:21:9c:f7:ab:b3:89:d3:37:d8:15:99:16:a3:63:
ec:9b:f0:42:3b:d6:95:51:e2:c2:15:77:cd:46:97:bd:d7:88:
97:dc:24:a8:a3:76:a7:30:26:bf:38:0b:d8:50:9b:d8:9f:64:
df:1a:7a:73:50:b5:ef:84:4c:28:0f:ef:d1:e3:bb:db:ef:26:
dd:05:40:0b:47:15:2d:77:58:5e:1c:d9:24:31:32:01:a2:4a:
3f:9b:ac:87:d9:0c:5b:eb:69:31:b0:0a:55:8d:be:cb:f2:9c:
50:2b:78:d9:6e:c3:8b:5e:cb:24:14:3f:5e:7e:75:72:a0:df:
94:81:1a:0b:0b:9f:c7:63:79:19:6d:3c:c0:4c:c6:7e:29:ee:
45:15:2e:85:50:fc:b5:0d:27:61:fd:32:f4:ee:93:ff:5c:c3:
22:2b:87:25:f3:5c:82:2c:52:40:18:e8:cf:10:9a:bc:df:ba:
7e:fb:d9:8e:c1:2d:a6:22:7c:0c:f0:e8:53:10:6a:23:b7:ac:
a4:60:88:0a:f5:5f:3d:98:fa:02:6d:90:b8:cf:ef:e1:ca:51:
12:b5:7d:11:30:10:ae:13:0d:3d:9a:bc:4d:e9:33:fd:16:af:
d9:01:eb:9c:61:73:76:61:31:f5:42:8c:01:16:76:5f:ac:3e:
5d:57:04:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:11:38 2024 by rpki-client on console-ams.rpki-client.org