Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/9e859aad90a443c7cabbd7359f0692e2f7c29598.roa
File: 9e859aad90a443c7cabbd7359f0692e2f7c29598.roa (raw, json)
Hash identifier: gksghQ5Kc89OPSx0iF9nEZxQ6F46ns/O/qBwuLslbMo=
Subject key identifier: 0D:A7:92:66:86:53:46:60:18:52:79:71:AE:9B:A7:E6:60:29:C9:A5
Certificate issuer: /CN=62beb9fd789670f1c0912cb57347edb76d8534d3
Certificate serial: 156C0C
Authority key identifier: C5:F1:CE:D4:7E:F4:99:CC:17:CD:B0:C2:CE:13:E4:16:C2:0D:B5:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62beb9fd789670f1c0912cb57347edb76d8534d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/9e859aad90a443c7cabbd7359f0692e2f7c29598.roa
Signing time: Thu 23 Mar 2023 21:15:06 +0000
ROA not before: Wed 22 Mar 2023 21:07:24 +0000
ROA not after: Sun 23 Mar 2025 21:07:24 +0000
asID: 267815
IP address blocks: 45.173.72.0/24 maxlen: 24
45.173.73.0/24 maxlen: 24
45.173.74.0/24 maxlen: 24
45.173.75.0/24 maxlen: 24
2803:b060::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1403916 (0x156c0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62beb9fd789670f1c0912cb57347edb76d8534d3
Validity
Not Before: Mar 22 21:07:24 2023 GMT
Not After : Mar 23 21:07:24 2025 GMT
Subject: CN=9e859aad90a443c7cabbd7359f0692e2f7c29598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:44:e2:4d:06:1e:76:65:ea:4f:e7:9c:57:
e6:2f:66:a4:94:a8:7e:bd:39:fd:f1:91:ba:64:e5:
0c:6b:72:5b:2e:21:74:43:b1:21:c7:79:8c:66:6a:
99:7d:5e:0f:92:d4:de:2a:63:61:04:81:47:13:18:
78:9e:05:a3:40:35:49:3a:5f:d2:f5:b5:9f:7a:da:
66:4b:27:15:65:07:19:0e:1c:c3:1a:29:5a:57:a7:
aa:7d:7d:41:5a:c0:b5:56:85:15:16:b1:67:e6:ab:
f7:bc:8c:6a:9b:cf:fe:cc:71:2f:c3:f4:74:ca:ec:
ae:a2:85:73:75:4b:7f:e2:eb:0a:e9:6f:b0:dc:12:
3b:04:a5:53:d2:c0:35:6c:da:5e:9b:06:ba:51:12:
ab:29:a5:88:56:41:b9:00:b2:13:2d:59:d7:2c:2f:
f2:fc:90:69:a8:72:53:77:88:64:e3:b3:02:ad:d1:
b9:e9:25:d2:e8:29:ef:9c:bb:0c:67:e2:be:f4:d9:
ab:f0:9f:93:44:20:27:c8:2a:0b:3c:90:5b:84:e7:
56:27:eb:76:5a:e2:5a:e7:48:c3:b9:cd:53:36:cd:
17:f3:46:c6:75:31:27:fd:6c:9d:81:b9:33:bd:4e:
8d:b2:df:3c:cf:9b:a5:e0:31:d9:31:55:89:49:0b:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A7:92:66:86:53:46:60:18:52:79:71:AE:9B:A7:E6:60:29:C9:A5
X509v3 Authority Key Identifier:
keyid:C5:F1:CE:D4:7E:F4:99:CC:17:CD:B0:C2:CE:13:E4:16:C2:0D:B5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62beb9fd789670f1c0912cb57347edb76d8534d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/9e859aad90a443c7cabbd7359f0692e2f7c29598.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50432faa-7a52-4c4b-83c8-aa20e3ea18a2/62beb9fd789670f1c0912cb57347edb76d8534d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.72.0/22
IPv6:
2803:b060::/32
Signature Algorithm: sha256WithRSAEncryption
50:e9:e5:bf:05:3a:92:f4:2a:44:44:03:2a:ee:83:d5:70:6a:
f5:3e:d0:d9:29:63:03:52:9a:67:26:fc:b4:64:dc:f2:97:59:
9b:85:5b:96:5e:b4:49:ad:9e:f1:f7:c1:97:d9:ef:d4:49:a5:
0b:c4:b8:82:98:13:78:91:c0:67:9e:81:68:a1:8e:76:82:aa:
99:b9:45:07:40:9b:72:46:cd:6c:aa:d3:43:3a:85:40:d3:65:
9f:6d:c1:91:c6:da:79:b3:76:a3:d4:c9:4b:86:c2:e7:0d:07:
cc:1d:84:26:c4:ce:4a:01:0f:f5:d2:50:e6:ec:5b:20:7d:57:
dd:da:75:21:13:d8:fa:df:6e:8e:e7:bd:3f:76:5c:12:10:53:
cc:cb:32:4c:b7:15:de:16:d4:c2:01:29:a4:0c:0b:3c:82:92:
dd:8d:1c:9e:cc:4a:c0:0c:96:78:9a:54:ce:6d:70:79:86:a2:
59:20:ea:74:67:01:99:4b:ef:dd:82:ab:a0:50:28:1b:1e:45:
28:46:6c:07:b8:5f:79:7b:00:58:d1:9e:94:38:a6:9c:99:fb:
b7:60:f7:63:80:a2:aa:25:85:e5:74:9a:76:40:ec:cc:c1:3f:
5e:7b:19:e7:54:b7:9a:ea:5a:2b:4c:7f:65:a7:17:87:d5:7b:
3f:0d:2a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org