Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/a952e7f6e1e358e5c7a089c700cd07e8062c8e21.roa
File: a952e7f6e1e358e5c7a089c700cd07e8062c8e21.roa (raw, json)
Hash identifier: FOJW6vFOU1Za4rBPDpXiGCPq1M+q4il7qm/l7kTc6Dw=
Subject key identifier: 05:03:67:68:40:61:97:31:37:67:B2:91:81:1A:A6:84:33:9F:45:B3
Certificate issuer: /CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
Certificate serial: 1DB28A
Authority key identifier: F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/a952e7f6e1e358e5c7a089c700cd07e8062c8e21.roa
Signing time: Mon 24 Apr 2023 15:03:14 +0000
ROA not before: Sun 23 Apr 2023 15:03:14 +0000
ROA not after: Thu 24 Apr 2025 15:03:14 +0000
asID: 269893
IP address blocks: 45.190.86.0/24 maxlen: 24
45.191.74.0/23 maxlen: 24
2803:94e0::/32 maxlen: 38
Validation: Failed, certificate revoked on Wed 31 Jan 2024 00:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946250 (0x1db28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf
Validity
Not Before: Apr 23 15:03:14 2023 GMT
Not After : Apr 24 15:03:14 2025 GMT
Subject: CN=a952e7f6e1e358e5c7a089c700cd07e8062c8e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:25:47:91:a5:99:ae:90:46:cb:be:ec:a0:
f5:a9:e2:30:3d:56:de:93:5b:8b:40:b8:71:17:4c:
bd:7b:bb:79:b9:25:34:2d:55:e9:b1:1c:99:7d:29:
87:1e:8f:da:5a:78:4e:5c:e7:8a:ca:43:e2:66:4a:
82:b6:23:b5:d7:53:05:cc:ec:eb:15:ee:55:98:a1:
0a:3d:c9:85:b5:fa:a2:f7:f9:fc:66:10:8d:0c:ff:
5c:9a:82:3a:68:80:f0:d5:19:3b:1a:4b:23:2b:bd:
db:0b:70:f1:e4:3e:92:b4:ef:a7:3e:91:c8:1a:de:
bf:4c:67:49:c9:f7:47:a0:1d:61:38:37:f7:c0:9e:
b4:3e:58:b5:17:53:2c:a5:89:0d:15:8d:63:b2:7e:
f4:a4:b7:dc:10:8c:ea:59:4a:b7:4e:34:fb:08:1f:
12:75:d0:43:62:98:d4:47:19:f0:bc:d5:e8:98:5f:
dc:62:28:42:27:ce:e4:ee:2a:38:10:6f:b6:1f:85:
df:78:00:54:c2:b4:66:81:e7:0b:f5:22:d4:59:17:
85:0a:bc:56:95:23:3a:8d:b2:de:4a:8a:21:7d:2e:
f0:3f:b2:13:90:96:b8:d0:3f:66:c0:6d:9f:3a:24:
3c:bc:c1:cb:c0:48:06:5c:04:e7:51:14:f3:e8:02:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:03:67:68:40:61:97:31:37:67:B2:91:81:1A:A6:84:33:9F:45:B3
X509v3 Authority Key Identifier:
keyid:F8:25:AD:C3:61:F6:94:55:25:D9:6B:5B:5E:EB:6F:AC:D3:67:3D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/a952e7f6e1e358e5c7a089c700cd07e8062c8e21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3f3cc9bf-328e-4f78-9c25-77769148a34f/80bdb870c4f7d2f9154401bbdc75b6a210ee3ecf.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.190.86.0/24
45.191.74.0/23
IPv6:
2803:94e0::/32
Signature Algorithm: sha256WithRSAEncryption
20:93:94:34:7c:85:7f:f8:a6:0c:08:18:a9:66:5f:b4:9f:15:
3f:46:0b:06:ad:65:56:21:ec:54:26:46:fd:b9:89:47:8c:0d:
60:93:85:e3:70:3f:96:f9:3d:78:c2:65:c8:76:f2:47:02:03:
2f:f4:b2:36:78:78:b8:4b:99:b0:97:4d:16:0c:1b:73:5e:98:
b5:27:d3:26:0e:6f:24:6e:57:d7:ef:9c:89:1a:ba:f2:a6:92:
d7:44:75:b7:41:f2:3d:56:24:8b:44:a1:cc:bf:38:b1:76:62:
36:5d:b4:95:93:89:f9:2a:48:11:fe:04:40:4c:3c:9e:b3:9b:
a0:14:58:12:20:8a:db:3e:cf:32:79:e7:94:c5:0d:4a:aa:9a:
35:5d:5e:35:25:ca:2e:67:cf:4d:f5:14:1a:16:95:4f:26:d5:
f7:7d:7d:58:c3:72:e1:c9:3f:2e:18:d2:7a:8e:f3:bf:d9:3b:
ed:4b:5d:18:39:13:ff:5d:92:3c:36:82:66:3a:51:ed:43:bf:
41:63:08:1a:92:db:3d:f8:89:7d:32:b9:79:fc:01:a8:bd:53:
41:ab:04:9e:54:9c:66:c6:69:e3:e9:66:2c:35:22:11:2f:ab:
61:bb:da:7b:71:b4:26:79:3f:44:71:88:92:37:f3:2b:0b:9c:
a8:b2:92:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 04:14:12 2024 by rpki-client on console-fra.rpki-client.org