Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/512c2cc7-2c7e-4579-9d78-69582babcd4a/c861b227f3679a354c6ead8020a134dbb816270e.roa
File: c861b227f3679a354c6ead8020a134dbb816270e.roa (raw, json)
Hash identifier: YFz1sS1jXpgnn/qhQWlPZVvymz5mOYYiQdb4/RJOXYg=
Subject key identifier: 29:29:D4:FF:18:C5:34:CF:C1:C0:07:61:33:89:9E:DA:5B:25:A1:46
Certificate issuer: /CN=58d4d9b526509407bcd0b39b8d13b0c940d11a2e
Certificate serial: 14C9D9
Authority key identifier: 4E:61:CF:E0:E4:F7:03:42:5B:39:DD:7C:1C:1A:D6:75:06:29:8C:04
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58d4d9b526509407bcd0b39b8d13b0c940d11a2e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/512c2cc7-2c7e-4579-9d78-69582babcd4a/c861b227f3679a354c6ead8020a134dbb816270e.roa
Signing time: Fri 29 Jul 2022 01:26:28 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 269853
IP address blocks: 45.189.56.0/22 maxlen: 24
45.171.120.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1362393 (0x14c9d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d4d9b526509407bcd0b39b8d13b0c940d11a2e
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=c861b227f3679a354c6ead8020a134dbb816270e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:94:eb:65:28:9a:fa:25:90:3b:4d:06:c4:9c:
fd:fb:80:ce:c1:98:ad:d2:64:38:a5:23:74:d7:2a:
0b:3c:2f:9f:36:08:54:ee:88:85:f9:2b:f7:67:98:
c1:14:48:dd:66:73:48:f9:e1:7e:0d:d8:0c:e1:e9:
1d:1d:a0:44:6c:35:68:6e:3e:81:84:7c:1c:7b:6d:
80:68:9d:c9:85:1c:f4:b0:d7:29:55:ae:8a:30:5b:
d1:f1:51:67:28:1a:e3:fc:b4:75:60:5b:4e:28:cd:
8d:9c:33:fc:cd:42:be:59:e6:a5:95:4d:34:a4:b3:
81:8a:6c:c8:d3:9e:fc:8b:14:bf:a5:6b:6e:de:c9:
af:a0:d8:91:6b:a9:73:28:c1:62:ba:0f:cd:7e:b1:
5a:1a:56:3f:9d:c1:3b:17:c7:43:5e:57:33:89:42:
a2:26:1e:0e:3e:92:7f:71:bc:f4:f7:ec:25:44:85:
70:f1:72:9f:2b:70:05:85:5d:d7:c5:d4:17:24:1d:
f8:8d:5c:c6:d9:68:88:86:ba:3e:7b:4d:9d:6f:2e:
5f:23:a5:19:40:3b:38:44:6e:2d:25:95:0f:13:9a:
2a:c9:b8:95:91:4e:b4:78:b2:8c:c3:da:cc:8e:7f:
f4:c8:14:de:76:04:17:6d:16:90:d5:f5:c3:9c:52:
5e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:D4:FF:18:C5:34:CF:C1:C0:07:61:33:89:9E:DA:5B:25:A1:46
X509v3 Authority Key Identifier:
keyid:4E:61:CF:E0:E4:F7:03:42:5B:39:DD:7C:1C:1A:D6:75:06:29:8C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58d4d9b526509407bcd0b39b8d13b0c940d11a2e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/512c2cc7-2c7e-4579-9d78-69582babcd4a/c861b227f3679a354c6ead8020a134dbb816270e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/512c2cc7-2c7e-4579-9d78-69582babcd4a/58d4d9b526509407bcd0b39b8d13b0c940d11a2e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.120.0/23
45.189.56.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:28:9c:9c:80:3d:da:72:20:77:61:df:c8:8a:58:bb:e4:81:
a4:98:cf:ee:3d:df:69:51:4d:b1:c2:67:3e:fa:04:0f:02:14:
00:42:c6:b6:9b:a6:78:1f:4a:05:47:89:c9:d1:92:fd:85:b0:
4a:e1:e4:7d:30:0c:ee:d4:28:7e:c8:b0:2e:bc:e6:0c:28:e9:
1b:91:97:5a:d0:82:c0:6a:d0:07:25:ad:da:a3:c3:14:10:92:
d2:d1:6c:32:2b:16:da:8a:10:74:dc:2c:ef:c5:5f:3c:a3:7b:
fa:9b:82:8a:71:c4:1a:88:0a:10:d3:e3:45:6b:0a:13:1b:c3:
4b:bd:c3:bf:82:41:44:b1:14:6c:71:ce:86:1b:58:49:ac:33:
b7:df:a5:16:9e:34:07:ea:dd:a4:ab:e9:87:2e:45:4c:79:39:
66:85:8d:d7:f7:3b:e1:b9:e8:57:85:53:9a:6d:a5:1f:ff:b3:
7e:39:3d:d7:8b:a7:b3:a2:8a:7d:2e:c1:72:21:1c:0f:80:d4:
61:e8:99:69:e3:a2:7e:3f:67:2b:24:62:99:ca:d2:d8:7d:06:
d0:75:3d:d5:65:3c:59:9c:a7:a6:0a:91:03:e9:33:b5:41:8e:
ea:d1:27:b1:a4:77:75:07:77:03:8d:80:db:07:f0:31:14:71:
2e:c5:68:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:18 2023 by rpki-client on console-fra.rpki-client.org