Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134352e302f32342d3234203d3e20323634383235.roa
File: 34352e3136392e3134352e302f32342d3234203d3e20323634383235.roa (raw, json)
Hash identifier: zwUM0qkLJNusz3aQ7qc0g75Ee3XDlDTIfjIH5hrQQX4=
Subject key identifier: 74:8A:D1:28:69:BD:64:C9:E7:2C:68:37:AE:E7:2C:1E:56:43:CE:EB
Certificate issuer: /CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
Certificate serial: 68D5BD5344032F2D90387B50E277EA19FDCE6BD0
Authority key identifier: DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134352e302f32342d3234203d3e20323634383235.roa
Signing time: Tue 05 Mar 2024 18:20:35 +0000
ROA not before: Tue 05 Mar 2024 18:15:35 +0000
ROA not after: Tue 04 Mar 2025 18:20:35 +0000
asID: 264825
IP address blocks: 45.169.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 22:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d5:bd:53:44:03:2f:2d:90:38:7b:50:e2:77:ea:19:fd:ce:6b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
Validity
Not Before: Mar 5 18:15:35 2024 GMT
Not After : Mar 4 18:20:35 2025 GMT
Subject: CN=748AD12869BD64C9E72C6837AEE72C1E5643CEEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:5a:a3:5b:be:99:1b:ae:b3:5b:c7:b9:00:
79:95:04:10:86:b3:14:34:1e:37:78:03:df:b5:a7:
98:5d:8c:82:82:b1:ca:88:1e:3f:80:5a:90:ad:22:
9f:87:49:76:90:2a:77:c1:99:90:25:be:99:c2:13:
6e:f7:3c:ef:0f:8a:73:72:62:67:4f:31:8b:f1:d0:
6e:62:fd:78:ab:47:79:70:cb:c1:ca:fa:32:c1:f5:
dd:1d:8b:e0:90:13:b8:9b:cc:06:f5:a9:29:9b:86:
a7:ea:64:df:c7:1c:94:65:a8:f4:bd:d2:6a:62:56:
14:25:59:6b:65:1e:d6:72:40:e6:77:58:9e:24:02:
27:cd:77:a0:ee:ed:3b:24:af:02:50:70:1c:5f:6c:
ce:ab:39:b4:c3:6f:23:fa:8e:f8:aa:03:e3:ca:3b:
e9:a7:d4:48:31:44:ee:21:c7:1c:14:94:e8:a6:2c:
d1:37:1f:09:31:0d:68:c0:f1:6d:62:81:c0:4b:14:
13:e1:93:59:4c:f9:1d:a5:af:16:d6:45:ec:0f:ac:
9f:3c:3b:a9:56:d4:78:c3:64:ac:d8:99:fc:f8:9c:
d4:04:eb:2d:2b:a1:84:7e:b3:6f:24:4c:1c:8a:87:
c6:10:b8:c2:d5:ba:4f:9c:cf:39:19:7a:61:86:77:
b7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8A:D1:28:69:BD:64:C9:E7:2C:68:37:AE:E7:2C:1E:56:43:CE:EB
X509v3 Authority Key Identifier:
keyid:DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134352e302f32342d3234203d3e20323634383235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.145.0/24
Signature Algorithm: sha256WithRSAEncryption
33:69:bf:c4:f4:91:59:cb:22:17:d8:af:8b:13:39:23:eb:fe:
80:85:70:55:db:60:91:2b:2f:85:ae:1c:c4:6c:40:9b:cd:f0:
3e:c1:e2:15:02:ed:5a:ed:48:e2:91:43:d8:21:c6:93:78:65:
ff:0b:cb:cf:60:b7:89:0f:9a:0e:f8:5e:b8:34:95:e9:f6:fa:
00:f4:d9:7e:94:8e:63:5a:a8:30:68:de:04:41:2c:4a:e4:ba:
4a:c0:6b:5f:96:91:f3:63:0e:37:9b:63:c5:05:d6:61:a1:6e:
5d:97:98:0a:a7:48:97:e4:3c:e7:86:9c:90:4a:72:7b:2c:97:
f3:aa:78:83:1d:61:bf:e1:4f:ce:59:e3:73:65:d9:f1:6e:7f:
8e:2f:58:10:42:9e:5e:7a:27:7d:9f:0f:d3:3c:96:09:49:17:
cc:94:cc:ad:26:7b:e4:9a:40:16:28:cb:dc:c7:3c:37:21:97:
8e:18:3d:d9:06:5e:85:c0:aa:ff:1f:3f:c7:0a:87:7a:fc:af:
b9:36:a3:f7:f4:bc:12:44:2f:20:db:ef:f0:ea:b0:70:3f:13:
4e:e9:ca:22:fb:b8:e4:b8:8f:36:e7:d5:18:9b:57:4d:ef:21:
f1:f5:18:0e:64:cc:29:96:1d:af:9e:e9:31:b7:77:cf:6b:fb:
5c:1a:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:23:18 2024 by rpki-client on console-ams.rpki-client.org