Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/4fdcef574e9fba1e64db2061605b1241f393d0a8.roa
File: 4fdcef574e9fba1e64db2061605b1241f393d0a8.roa (raw, json)
Hash identifier: snQYStrH6oNNkP9U0icRQ/5ShkmW2C46bMTojoxh938=
Subject key identifier: 87:D7:C4:D3:12:E5:85:AE:16:5F:FE:CF:AC:3C:E0:A0:D4:D1:3F:E2
Certificate issuer: /CN=9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89
Certificate serial: 0D30D5
Authority key identifier: F2:27:FD:D6:E2:78:4A:60:5B:01:41:17:78:23:6B:3C:49:13:72:44
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/4fdcef574e9fba1e64db2061605b1241f393d0a8.roa
Signing time: Wed 24 Mar 2021 14:39:36 +0000
ROA not before: Wed 24 Mar 2021 14:39:35 +0000
ROA not after: Tue 24 Mar 2026 14:39:35 +0000
asID: 263238
IP address blocks: 45.4.200.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 864469 (0xd30d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89
Validity
Not Before: Mar 24 14:39:35 2021 GMT
Not After : Mar 24 14:39:35 2026 GMT
Subject: CN=4fdcef574e9fba1e64db2061605b1241f393d0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:e3:44:f3:f9:81:30:8e:17:cf:3d:64:25:
27:ae:12:e3:91:f1:5d:87:dc:74:0e:ec:09:5d:50:
b6:fc:e0:d2:79:50:39:26:d7:ad:ef:29:09:8d:8d:
8c:5f:5a:99:b6:75:bf:7d:e9:1e:9e:fe:54:c8:92:
5f:22:b6:8d:3e:28:79:cd:06:e0:51:27:13:cf:c7:
2d:cd:04:77:0c:7d:e1:7a:28:4c:1b:b4:ff:d6:e8:
84:de:44:24:77:53:9f:05:97:91:ea:f9:1e:d3:93:
cc:89:85:e6:f8:7c:88:38:2d:03:22:96:34:60:e3:
d6:d5:3f:94:7b:87:f0:6a:b7:fa:59:bc:a4:96:61:
4b:9b:03:91:73:ec:f7:ff:58:cd:89:af:2c:b1:7a:
21:3b:0c:29:bc:ea:5f:44:bf:cf:32:a2:c1:47:27:
7b:6a:fd:35:4e:20:80:47:a3:a0:7a:ee:96:22:bf:
93:42:6e:66:27:2f:8f:6f:ab:a3:c5:96:7d:7d:9d:
e6:e7:34:5f:da:4d:bd:50:46:8a:01:16:bb:86:2c:
fd:fa:17:1f:21:60:5a:9d:a9:96:ce:d1:64:ac:af:
7e:4f:4c:65:90:69:87:13:85:ce:88:4d:d9:64:08:
eb:be:91:36:cd:dc:77:aa:6f:4b:5d:f4:69:96:de:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D7:C4:D3:12:E5:85:AE:16:5F:FE:CF:AC:3C:E0:A0:D4:D1:3F:E2
X509v3 Authority Key Identifier:
keyid:F2:27:FD:D6:E2:78:4A:60:5B:01:41:17:78:23:6B:3C:49:13:72:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/4fdcef574e9fba1e64db2061605b1241f393d0a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/52cd2d27-610a-4b46-b815-ff68bdc803a7/9fdadc05bc3b209c11aad7e367b44f7fcdbb6e89.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.200.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:1f:91:82:f2:78:e3:d7:15:aa:e7:d4:68:c0:23:f2:8e:71:
fe:01:cd:ee:43:57:c0:19:13:f3:a8:53:2e:c1:8b:1c:7b:76:
c1:cf:d2:9d:88:d8:a6:a8:55:17:c8:f3:78:74:5a:58:4f:b2:
37:a2:ca:68:5b:9a:67:9c:cd:cc:f9:ed:de:07:89:c8:47:06:
8c:5d:e6:d8:8c:dc:06:50:42:35:13:9b:f9:db:d3:17:dd:08:
f3:09:b0:8b:ea:d6:c9:09:3f:2a:12:b8:80:d7:69:79:d7:42:
2a:81:cf:c9:02:d5:80:73:65:12:2d:39:60:17:51:4b:62:89:
37:3a:9b:b1:02:b1:6d:73:0a:22:b1:8e:b6:c0:96:75:ff:c1:
9c:15:bb:5d:11:61:a2:90:eb:5a:b6:f1:39:f8:94:92:90:46:
67:97:7e:54:e2:54:ca:98:86:a7:3a:10:80:00:c4:81:09:83:
6f:55:17:f2:29:30:b2:b9:7d:37:8e:9a:a3:d6:4c:5d:0e:5b:
22:99:fe:1a:75:32:80:1c:19:a8:41:ec:6f:9d:6d:cd:d0:1a:
23:e6:f0:9f:2c:eb:b0:93:0a:5b:7f:b1:d4:c2:b3:37:8c:fb:
22:1a:21:9a:21:95:cf:67:0c:cd:5e:55:b1:0b:e4:42:c0:c9:
a3:1e:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 00:46:35 2023 by rpki-client on console-fra.rpki-client.org