Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134342e302f32342d3234203d3e20323731373935.roa
File: 34352e3136392e3134342e302f32342d3234203d3e20323731373935.roa (raw, json)
Hash identifier: QqcGYs7ysmfkVHumUhN7Wj+6G6Hg1ZFRRSVFrh1uGq0=
Subject key identifier: D9:D1:1C:39:AC:E6:07:D4:AC:C1:7C:F7:21:FD:5F:F1:97:1E:FE:19
Certificate issuer: /CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
Certificate serial: 3923DDB8F762FD71809BCCD01D79EE3A130B8F66
Authority key identifier: DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134342e302f32342d3234203d3e20323731373935.roa
Signing time: Tue 05 Mar 2024 18:20:35 +0000
ROA not before: Tue 05 Mar 2024 18:15:35 +0000
ROA not after: Tue 04 Mar 2025 18:20:35 +0000
asID: 271795
IP address blocks: 45.169.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 22:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:23:dd:b8:f7:62:fd:71:80:9b:cc:d0:1d:79:ee:3a:13:0b:8f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
Validity
Not Before: Mar 5 18:15:35 2024 GMT
Not After : Mar 4 18:20:35 2025 GMT
Subject: CN=D9D11C39ACE607D4ACC17CF721FD5FF1971EFE19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:86:17:f9:0c:8d:97:ec:45:f3:9b:10:cf:
3e:88:f1:9d:4f:d3:15:47:08:eb:65:6b:61:29:96:
2d:1e:79:3a:9c:d6:4f:a1:e7:c4:f8:12:23:72:e0:
57:fa:17:9d:57:42:ef:b6:7d:33:5a:4d:d1:0f:20:
9b:2c:b4:3d:3a:a7:f5:df:9d:0f:78:7b:0e:e1:55:
8e:ac:fe:00:a1:78:e5:e9:85:86:fe:a0:8d:3b:77:
a2:35:e0:1a:bb:f2:31:1e:84:38:8e:b7:55:60:5e:
6a:ab:e2:0d:8f:c3:95:cb:ab:ae:a2:9c:b6:38:db:
11:45:80:d9:d7:1b:a7:22:1b:2c:6d:0c:c5:28:c1:
7d:39:34:6c:86:ad:1a:a4:92:5b:df:91:bc:42:35:
12:cd:3c:f5:23:8b:6f:96:c3:23:d3:71:14:49:eb:
a0:a1:26:e0:e8:61:63:ca:dc:5f:f6:05:bb:b2:22:
14:bf:03:bd:8f:9d:36:fb:2f:aa:99:0f:c2:58:78:
60:29:9e:55:ee:f2:94:72:ca:65:cd:af:d9:88:75:
b4:a2:09:84:23:11:93:b7:74:c9:e3:b8:a8:d0:8e:
92:85:58:00:c6:25:ca:28:ba:dc:57:8a:b8:6b:2e:
ad:ba:f6:79:02:7b:88:68:86:91:ce:d8:72:f4:9e:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D1:1C:39:AC:E6:07:D4:AC:C1:7C:F7:21:FD:5F:F1:97:1E:FE:19
X509v3 Authority Key Identifier:
keyid:DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134342e302f32342d3234203d3e20323731373935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.144.0/24
Signature Algorithm: sha256WithRSAEncryption
78:10:1b:58:7b:67:f5:02:88:b2:e1:57:4b:a6:32:b9:9d:62:
a0:00:9d:63:a1:4d:83:a7:1a:0b:10:36:bb:d7:0d:d9:7e:66:
15:c2:d5:67:30:a7:a3:22:e7:4f:e2:da:99:7f:e9:84:93:fa:
a6:1a:60:85:03:3a:5f:22:43:72:ba:44:db:e4:0b:58:f8:13:
bc:c2:c8:05:1c:9b:af:42:3c:82:7c:1f:f2:e6:15:3c:e6:b3:
fe:14:0f:9e:31:d9:40:bb:8a:80:f5:94:16:af:ca:d0:fd:94:
57:8c:41:ac:66:d7:8b:e8:41:e3:1d:d0:fe:eb:74:2c:16:c0:
64:ad:11:26:80:9a:c4:8b:5f:63:42:82:90:c1:0f:80:c3:04:
80:8a:c9:b6:55:cd:e3:d4:23:c2:3a:d6:7c:46:11:66:1b:45:
a8:8f:f9:b3:72:ce:25:11:6b:07:79:20:da:10:0d:78:1e:33:
6c:2c:8a:28:f2:e6:08:6e:b7:25:73:d6:69:35:41:16:a3:ce:
51:d8:46:3e:e3:2f:e9:99:3c:e2:92:2a:e1:15:16:70:16:97:
78:94:bb:ea:07:04:3e:1a:55:e9:49:c7:17:ed:84:9f:d6:7d:
6f:76:12:d9:22:8f:89:9a:b9:f2:a8:f2:fe:dc:8a:04:ed:3d:
39:d2:a2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:23:18 2024 by rpki-client on console-ams.rpki-client.org