Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/5b0008b001263a12492ea108c1d48192e92324a2.roa
File: 5b0008b001263a12492ea108c1d48192e92324a2.roa (raw, json)
Hash identifier: 8ryZUyZEzJyI2qTmU6rXoi5YeddJk1zSLqgUlo3KLHU=
Subject key identifier: D1:87:FF:95:F4:00:2B:65:34:45:96:13:4A:18:F9:93:D1:DE:CD:48
Certificate issuer: /CN=b237ad19586522bd4228c8593de2f297c35868d7
Certificate serial: 1F3677
Authority key identifier: EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/5b0008b001263a12492ea108c1d48192e92324a2.roa
Signing time: Wed 13 Dec 2023 04:07:30 +0000
ROA not before: Wed 13 Dec 2023 04:07:30 +0000
ROA not after: Sat 13 Dec 2025 04:07:30 +0000
asID: 266845
IP address blocks: 45.239.32.0/23 maxlen: 24
45.239.32.0/24 maxlen: 24
45.239.33.0/24 maxlen: 24
2803:3ca0::/32 maxlen: 32
2803:3ca0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2045559 (0x1f3677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b237ad19586522bd4228c8593de2f297c35868d7
Validity
Not Before: Dec 13 04:07:30 2023 GMT
Not After : Dec 13 04:07:30 2025 GMT
Subject: CN=5b0008b001263a12492ea108c1d48192e92324a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:57:66:f6:2e:fd:fb:e6:c3:3a:34:25:20:
d4:cd:0d:47:0a:df:50:c7:bd:b0:48:63:57:cb:4a:
9f:8a:53:36:8e:e8:db:93:1a:87:60:c2:b1:71:a2:
5f:14:09:ab:66:ea:e3:b1:01:13:79:a1:6a:c5:72:
4a:56:bf:b4:58:05:62:52:04:44:07:49:9e:c2:4e:
8a:02:a3:74:22:c2:c5:c8:b8:94:99:46:f0:5b:13:
6d:31:21:7b:d6:a5:8e:28:f0:e1:36:23:1e:6b:15:
01:4a:e5:a4:81:69:83:98:8c:86:2f:8c:fd:f7:64:
e7:ac:af:4c:79:5e:45:18:c1:f4:23:36:ec:fb:d3:
c9:25:70:ad:0e:a4:06:e1:01:e9:b2:bf:fd:25:5e:
fe:84:c7:db:f0:2e:df:db:b6:f5:a1:d9:98:f7:9e:
af:ad:22:9e:26:73:17:97:7f:db:55:a6:34:64:ca:
1d:33:d6:47:13:9a:16:99:e5:32:00:ea:5c:67:56:
fd:0a:1c:37:94:19:d4:db:3a:5d:4e:aa:48:4d:3d:
41:a5:02:ea:4b:67:3c:f0:16:a0:33:2a:ea:25:14:
20:69:e6:3b:6f:46:7b:b1:b4:60:d8:e5:2d:1c:a5:
b5:a9:f3:24:37:c0:96:94:73:09:28:0f:b9:d6:bb:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:87:FF:95:F4:00:2B:65:34:45:96:13:4A:18:F9:93:D1:DE:CD:48
X509v3 Authority Key Identifier:
keyid:EC:AE:37:59:E1:EF:9E:77:59:63:74:A0:E6:B1:4F:FC:9D:13:33:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b237ad19586522bd4228c8593de2f297c35868d7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/5b0008b001263a12492ea108c1d48192e92324a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4219d5e8-53b7-4f1c-96c1-e971723a6fab/b237ad19586522bd4228c8593de2f297c35868d7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.32.0/23
IPv6:
2803:3ca0::/32
Signature Algorithm: sha256WithRSAEncryption
1c:99:63:93:c6:15:1e:3e:31:76:a0:a2:f9:8b:d5:14:00:9c:
46:9e:66:22:9b:99:cf:f8:fb:65:c6:e6:b9:a0:99:3d:1b:2b:
ed:e8:97:44:86:a2:61:2c:2d:42:80:99:95:e2:31:67:8f:28:
4f:85:22:65:d6:ae:a6:f9:56:bd:01:91:38:66:27:b0:c0:a9:
02:1d:1e:b5:4a:82:aa:58:2c:a3:5b:bc:e2:7f:0a:98:51:aa:
53:15:fa:ef:0e:c8:61:f2:b8:28:a2:46:d3:46:10:87:5d:6f:
9b:8a:12:d6:fe:2e:cf:30:8d:1f:a2:7d:11:2e:58:eb:95:8f:
fe:50:bc:14:d7:f6:62:92:02:5f:6b:0e:0f:79:6a:87:6a:12:
b7:75:f0:ef:74:1c:12:2b:30:c1:91:e9:03:60:93:a4:38:2c:
74:62:6d:46:92:2e:20:02:fc:cf:63:b2:b2:a9:83:0c:51:f3:
f7:53:60:e4:4e:fb:ec:a4:ec:1b:b8:91:e8:74:c0:98:ed:d8:
a2:b1:dd:c1:19:ff:44:b9:37:09:29:71:3b:7c:7e:94:b1:48:
cb:83:4c:e1:8b:56:1d:95:2c:d3:50:63:6f:b9:ab:39:89:ad:
93:21:f0:97:cf:ed:5d:05:fa:3a:b4:0e:f1:3f:18:5b:a7:e9:
7a:55:a4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 05:25:52 2023 by rpki-client on console-ams.rpki-client.org