Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134362e302f32342d3234203d3e20323731373935.roa
File: 34352e3136392e3134362e302f32342d3234203d3e20323731373935.roa (raw, json)
Hash identifier: H+URg4z0gPEuyvhuRPUv7I7xnAlDhGGDmvY5rzXM0xg=
Subject key identifier: C7:1D:EF:BD:AE:AC:86:FC:CA:0F:21:89:E8:E2:9F:FA:45:E7:23:4C
Certificate issuer: /CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
Certificate serial: 7003ADC35F0BDD6515BBBD0351E0478CF3F2A751
Authority key identifier: DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134362e302f32342d3234203d3e20323731373935.roa
Signing time: Tue 05 Mar 2024 18:20:35 +0000
ROA not before: Tue 05 Mar 2024 18:15:35 +0000
ROA not after: Tue 04 Mar 2025 18:20:35 +0000
asID: 271795
IP address blocks: 45.169.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 22:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:03:ad:c3:5f:0b:dd:65:15:bb:bd:03:51:e0:47:8c:f3:f2:a7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD2D25C642478D5D4DCAB0135DBBD87109D394CC
Validity
Not Before: Mar 5 18:15:35 2024 GMT
Not After : Mar 4 18:20:35 2025 GMT
Subject: CN=C71DEFBDAEAC86FCCA0F2189E8E29FFA45E7234C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ff:5b:94:d3:9f:91:1c:0a:32:a9:dc:c2:37:
fd:57:c4:e0:fb:8e:93:dd:0e:da:c4:12:a0:5e:11:
42:9e:da:4b:4c:ae:9c:b2:75:7e:63:6c:b9:ac:a4:
50:a8:81:60:c7:7c:fe:1a:ad:38:4c:aa:8f:48:b3:
e0:a0:28:60:a5:16:3a:04:89:2c:42:6d:2d:d6:c7:
54:02:96:a5:0b:d8:62:a5:2c:6c:44:5e:f6:6b:06:
14:de:f7:f3:d4:6b:83:74:9b:bb:a3:50:03:95:00:
e2:d3:f6:17:88:6e:c3:7a:69:b0:48:8d:9e:15:11:
b3:aa:f0:fd:d8:1e:d4:3e:32:da:14:c5:20:bb:5c:
aa:02:50:62:03:c3:91:96:69:e4:99:fc:f9:70:61:
fc:64:5a:20:2f:c5:c3:1e:e9:fe:ef:50:ee:f0:de:
85:8e:91:f1:d7:c1:e7:af:72:10:ed:6d:e3:fa:a9:
5a:43:4d:31:b8:51:e1:ce:c1:5a:15:60:cd:ad:7b:
48:7f:a6:7d:83:bc:02:d1:c8:8b:39:fe:bd:09:f8:
82:da:6d:c4:0b:81:3f:36:9d:bb:5d:b9:00:d5:39:
41:36:7e:11:96:01:87:8a:36:69:cf:8e:be:bb:62:
e4:6d:15:2d:ec:0f:78:59:2d:af:75:4e:50:91:40:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1D:EF:BD:AE:AC:86:FC:CA:0F:21:89:E8:E2:9F:FA:45:E7:23:4C
X509v3 Authority Key Identifier:
keyid:DD:2D:25:C6:42:47:8D:5D:4D:CA:B0:13:5D:BB:D8:71:09:D3:94:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD2D25C642478D5D4DCAB0135DBBD87109D394CC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54002EB3EC2BBE4384251AB2E4F211EF7DD07E7F3A927E356B79C45938598F64/0/34352e3136392e3134362e302f32342d3234203d3e20323731373935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.146.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c7:4b:0b:90:04:ca:34:70:7a:cf:7b:67:8d:d9:a8:8f:26:
2b:b8:8e:19:2a:3c:87:53:03:77:10:34:46:9c:4f:62:72:37:
30:a0:a1:7a:bd:c2:35:e8:c4:5b:b1:55:11:68:72:6a:b2:b6:
83:0e:50:23:f0:fd:5b:ff:39:89:78:64:6e:82:b9:5f:b4:7d:
14:c8:12:10:e1:fb:30:ea:f1:4f:85:77:bb:d2:3e:71:c0:c6:
f9:d5:5b:a4:c4:0f:7d:70:0f:7f:a0:cf:22:b5:c9:6d:ff:2b:
34:b5:fd:1b:b6:af:8f:97:73:54:19:e2:a3:30:b1:a3:8a:25:
ef:30:31:45:b5:67:03:98:ef:39:0e:7f:6c:18:91:d8:3c:cd:
be:f1:2d:19:61:2c:f0:39:5d:ed:06:4e:9b:08:0e:be:83:b4:
7e:cf:aa:24:a8:87:3b:d0:72:fc:bb:90:e4:48:b2:a3:c3:aa:
c4:31:41:06:cb:12:04:64:6a:fe:96:b6:08:a3:fb:99:07:6f:
e2:d7:73:65:84:a9:3b:10:22:f8:01:03:6b:38:1b:48:d4:ee:
38:24:f8:41:0a:6b:f9:7e:8d:ea:0a:77:f9:08:40:00:57:a6:
49:fb:8d:e5:18:34:0a:a7:ce:85:ac:60:5a:84:3a:b9:63:ff:
d8:ab:4f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:23:19 2024 by rpki-client on console-ams.rpki-client.org