Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/9e5a73b654d79818e05ece6ba8d91daf47acb5ad.roa
File: 9e5a73b654d79818e05ece6ba8d91daf47acb5ad.roa (raw, json)
Hash identifier: JbreY/FL+1zDPTgka0kJt+2vJTc/NFTlhv6Ok3z6D3M=
Subject key identifier: E9:7A:46:07:1F:B9:53:76:8C:0C:FD:1B:5D:34:82:F7:BE:30:34:CE
Certificate issuer: /CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
Certificate serial: 195781
Authority key identifier: 2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/9e5a73b654d79818e05ece6ba8d91daf47acb5ad.roa
Signing time: Wed 28 Sep 2022 18:00:15 +0000
ROA not before: Mon 26 Sep 2022 00:36:25 +0000
ROA not after: Thu 26 Sep 2024 00:36:25 +0000
asID: 263703
IP address blocks: 45.186.210.0/24 maxlen: 24
45.186.211.0/24 maxlen: 24
190.97.224.0/19 maxlen: 24
143.255.84.0/22 maxlen: 24
2803:7800::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1660801 (0x195781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
Validity
Not Before: Sep 26 00:36:25 2022 GMT
Not After : Sep 26 00:36:25 2024 GMT
Subject: CN=9e5a73b654d79818e05ece6ba8d91daf47acb5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:dc:69:96:3a:13:c4:d8:7c:28:eb:62:bd:
a9:a8:9d:9c:c2:36:4b:8d:8e:f4:aa:bc:75:e9:6b:
d9:cf:b8:61:ce:f5:b5:a8:e1:34:7d:4f:5f:8f:36:
6f:23:de:60:d8:d3:e5:48:14:c2:c8:e0:9c:10:d1:
e7:47:de:d7:1f:a1:63:d2:c7:3f:7d:7f:2d:e4:73:
d8:14:ca:d9:a4:98:4a:ff:ee:95:bd:20:b8:a8:b3:
fe:8e:2f:fc:c7:4d:3a:56:f3:24:cf:7f:c0:f0:cd:
88:5b:47:fa:9e:5c:6b:39:d5:40:cf:66:ed:fc:4a:
91:cd:a2:e3:a9:ca:4c:6d:9a:06:76:09:07:1f:5e:
e7:84:eb:1f:1a:13:72:16:c2:1e:21:d7:e2:55:68:
98:7b:21:c3:20:96:22:27:e0:b8:14:2a:75:43:d6:
2a:83:a2:33:52:64:26:ee:60:ce:e2:8c:4a:3a:df:
63:50:02:6f:0e:49:1c:ce:33:c4:31:5a:91:c9:09:
d9:19:ea:39:6b:29:89:c1:fa:53:04:05:9e:51:f8:
7f:0b:6b:6d:53:b2:4d:5f:1d:9a:3b:dc:00:23:18:
a0:9c:b8:79:43:3b:04:71:1b:c9:55:d7:34:4a:b6:
a6:45:83:b8:98:b3:bc:c4:26:0a:5c:c5:98:aa:dc:
32:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7A:46:07:1F:B9:53:76:8C:0C:FD:1B:5D:34:82:F7:BE:30:34:CE
X509v3 Authority Key Identifier:
keyid:2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/9e5a73b654d79818e05ece6ba8d91daf47acb5ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.210.0/23
143.255.84.0/22
190.97.224.0/19
IPv6:
2803:7800::/32
Signature Algorithm: sha256WithRSAEncryption
6f:f5:15:99:68:32:74:82:0c:fa:e0:9b:80:22:00:8d:b4:c4:
a3:4f:4e:f5:3a:b6:4a:5d:f4:62:9f:5c:b7:56:30:c2:24:31:
40:56:72:f1:49:14:2e:48:79:cd:b5:5e:39:6a:75:d5:58:c5:
21:99:ce:01:38:c5:95:63:65:4e:a1:3d:dc:96:db:5e:e5:58:
cc:09:55:bc:4f:39:45:2c:0a:ad:83:f8:dc:c9:2b:fb:04:df:
b5:39:c5:6b:05:b9:6e:a0:e6:19:75:8f:cc:ab:c7:15:6e:93:
3d:88:a9:2b:21:36:4e:bc:68:be:99:9c:69:9c:f2:bf:ab:36:
ec:b2:19:6e:54:3f:45:db:e3:92:90:e9:f9:35:df:aa:2a:16:
ec:ce:5a:23:21:d9:a2:37:55:ca:7b:75:78:2d:a4:78:48:36:
0b:5b:a0:9e:a2:0f:40:58:cf:e5:af:08:24:50:95:89:66:71:
89:71:60:87:05:8d:89:c9:79:9d:d5:0b:4b:2b:4d:4c:de:d3:
7e:93:56:6e:af:06:6f:54:21:e4:3f:5a:8c:61:77:93:d6:71:
9f:cf:02:de:1d:0e:26:ad:59:91:a2:c4:46:bf:ac:14:0f:92:
68:73:8c:9f:96:13:bb:e9:51:ee:c4:02:af:77:97:d7:8c:a6:
64:52:44:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-ams.rpki-client.org