Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4feafff9-683f-4620-a9bf-12132b7ef3cb/1bcc469921a2cd6b7b734c2ed08dbd4802e025a5.roa
File: 1bcc469921a2cd6b7b734c2ed08dbd4802e025a5.roa (raw, json)
Hash identifier: 962z8mlkOzDeZ30t5wbpAnhIk3fPmU/LwLHnC1R0Kvw=
Subject key identifier: 67:35:9E:2C:AB:BC:1A:D7:EA:3F:B1:C5:97:C6:88:98:EA:85:DC:CB
Certificate issuer: /CN=da7e27e0f50f435ffa84dfe35fec4a82d9aabc74
Certificate serial: 030E
Authority key identifier: 84:F9:41:5E:C6:0C:E3:5D:42:25:DA:3F:3E:03:ED:55:5F:DC:FE:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da7e27e0f50f435ffa84dfe35fec4a82d9aabc74.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4feafff9-683f-4620-a9bf-12132b7ef3cb/1bcc469921a2cd6b7b734c2ed08dbd4802e025a5.roa
Signing time: Mon 04 Oct 2021 22:37:50 +0000
ROA not before: Mon 04 Oct 2021 03:00:00 +0000
ROA not after: Wed 04 Oct 2023 03:00:00 +0000
asID: 266827
IP address blocks: 45.237.168.0/22 maxlen: 22
2803:d4a0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782 (0x30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7e27e0f50f435ffa84dfe35fec4a82d9aabc74
Validity
Not Before: Oct 4 03:00:00 2021 GMT
Not After : Oct 4 03:00:00 2023 GMT
Subject: CN=1bcc469921a2cd6b7b734c2ed08dbd4802e025a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:ed:cc:83:63:a7:d1:5d:f4:a1:2b:5e:f1:
04:65:31:0c:00:08:be:b6:f4:06:ce:95:7d:4c:3e:
97:1d:45:54:94:ef:02:1c:04:e2:d8:90:6a:48:75:
b9:45:2c:ff:ce:e5:14:33:7b:68:27:65:a9:8b:ce:
18:ae:aa:62:2a:5d:9b:2a:a1:65:7b:24:3c:84:d4:
2f:c2:a5:a3:8d:c8:7b:fe:0e:2d:f9:90:85:6b:af:
8a:69:cf:d0:fa:73:8f:a3:ea:5f:26:34:6a:a9:a1:
7c:d9:be:77:3a:7f:0b:2e:6a:97:83:7a:d2:e4:da:
e2:c3:8c:8c:10:67:5b:1c:e0:cf:a4:9f:80:26:01:
c1:ad:ed:4e:73:f2:7e:ce:20:88:88:74:dc:43:c7:
8d:64:e4:ac:1e:43:43:c7:64:77:d1:5d:af:69:ef:
2d:00:5d:c6:41:17:27:b6:c3:74:40:f3:f4:4b:95:
d9:49:d1:41:09:db:81:24:53:86:cc:14:0c:d2:14:
e7:5d:b1:0e:fc:a2:d1:0b:37:d8:05:22:73:83:fd:
04:ee:98:af:d2:30:b0:91:2f:26:26:65:ed:c2:fe:
39:eb:03:3e:2b:72:3e:2b:36:e2:92:7a:6e:f6:99:
3b:e6:80:b2:da:37:c3:47:ae:3a:1d:90:a6:f8:7e:
85:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:35:9E:2C:AB:BC:1A:D7:EA:3F:B1:C5:97:C6:88:98:EA:85:DC:CB
X509v3 Authority Key Identifier:
keyid:84:F9:41:5E:C6:0C:E3:5D:42:25:DA:3F:3E:03:ED:55:5F:DC:FE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da7e27e0f50f435ffa84dfe35fec4a82d9aabc74.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4feafff9-683f-4620-a9bf-12132b7ef3cb/1bcc469921a2cd6b7b734c2ed08dbd4802e025a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4feafff9-683f-4620-a9bf-12132b7ef3cb/da7e27e0f50f435ffa84dfe35fec4a82d9aabc74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.168.0/22
IPv6:
2803:d4a0::/32
Signature Algorithm: sha256WithRSAEncryption
82:c7:ea:fe:7f:53:04:fa:72:c2:80:49:a1:45:c0:64:c3:72:
e9:a9:a5:c1:ee:f5:24:de:5f:b2:41:fa:e2:e4:68:be:5c:e6:
dc:44:29:0e:fb:a9:2a:15:e3:ac:dd:1f:3b:da:33:cb:9a:07:
b4:1a:69:53:65:71:f6:bf:47:09:21:99:74:63:9e:a4:e0:7a:
98:6f:8d:ac:ca:6e:21:15:1a:a8:16:f0:35:6d:e8:c1:7a:a6:
6a:ad:b7:84:b8:21:bd:40:50:d2:03:f2:22:05:af:2d:36:e7:
23:29:f2:78:3e:52:7e:6e:59:22:c9:e1:51:a3:1c:8e:c4:4d:
32:cd:4c:80:26:8d:c2:3a:41:cb:ab:21:38:dd:8d:97:de:97:
ff:58:20:47:55:9c:95:07:ff:d5:86:c1:4e:ed:7d:37:80:8b:
44:cc:33:03:f2:a7:f6:ff:cd:16:55:7e:ea:38:5e:19:e2:24:
87:04:b9:2c:e7:62:f4:01:87:de:5e:92:f6:64:93:51:53:61:
ca:13:ba:9a:25:65:25:35:cb:bf:09:68:1a:36:48:a3:35:5c:
ac:65:3c:05:86:07:f6:0b:3e:cf:fb:58:90:09:3c:ec:c8:94:
bb:e2:16:a4:53:0e:7d:27:ac:0d:31:20:6d:98:13:15:58:70:
98:60:4c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 08:55:25 2023 by rpki-client on console-ams.rpki-client.org