Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/7bc3c1e0360453d7e9e491c59e233817c7fb916f.roa
File: 7bc3c1e0360453d7e9e491c59e233817c7fb916f.roa (raw, json)
Hash identifier: 2ThTXauhEd4Pt3IdAQffXXf5rHbYx88nbRBLzUh/hBM=
Subject key identifier: B0:3E:05:1F:09:8D:AA:5B:7E:36:37:1C:A6:0F:EE:A7:54:68:30:2B
Certificate issuer: /CN=9bec122f444854416c46c5b459d8853cc0cb2e76
Certificate serial: 2419B8
Authority key identifier: 00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/7bc3c1e0360453d7e9e491c59e233817c7fb916f.roa
Signing time: Tue 24 Oct 2023 07:30:03 +0000
ROA not before: Tue 24 Oct 2023 07:30:03 +0000
ROA not after: Thu 23 Oct 2025 07:30:03 +0000
asID: 266809
IP address blocks: 45.236.28.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2365880 (0x2419b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bec122f444854416c46c5b459d8853cc0cb2e76
Validity
Not Before: Oct 24 07:30:03 2023 GMT
Not After : Oct 23 07:30:03 2025 GMT
Subject: CN=7bc3c1e0360453d7e9e491c59e233817c7fb916f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:99:ea:91:90:a9:b5:56:dd:58:83:2b:75:e6:
d5:a9:e1:63:58:68:42:cb:9f:cf:63:f0:8c:bf:c9:
7b:90:33:6f:85:c5:9d:0e:8b:11:09:0c:dc:5b:45:
0b:9f:7d:1f:78:2a:fc:4a:e9:c6:76:06:20:c0:9e:
34:94:be:96:0f:6a:05:85:1e:90:70:e9:85:5a:a3:
cb:1e:d7:1b:11:e6:6e:02:98:a6:ba:1e:e4:ed:e1:
55:ea:c2:99:ef:11:77:94:d2:48:c8:62:60:28:fe:
7b:ae:78:52:33:7d:a6:4c:29:05:5b:2e:75:78:ce:
38:df:62:c7:76:5d:6c:04:b4:28:8d:8b:cf:01:9c:
70:f0:4c:94:1c:5c:63:43:41:9f:f3:9b:de:50:88:
3e:c4:fc:15:62:50:9b:82:51:fd:4f:50:9f:ce:46:
e6:d3:68:6a:59:5d:40:c5:52:50:1f:42:48:f0:62:
16:d6:8d:4c:be:89:ca:45:ae:be:74:33:62:61:1d:
ac:4f:99:15:74:93:02:16:df:c4:a7:ad:3a:f4:35:
1f:4d:7a:80:05:4a:85:ec:ab:ea:d8:e9:5d:4a:3b:
6c:6f:a3:0a:f9:13:64:f7:d8:0b:56:1d:80:8c:36:
2e:5a:fd:a7:bd:73:a0:29:12:8d:b8:bf:65:cf:5f:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3E:05:1F:09:8D:AA:5B:7E:36:37:1C:A6:0F:EE:A7:54:68:30:2B
X509v3 Authority Key Identifier:
keyid:00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/7bc3c1e0360453d7e9e491c59e233817c7fb916f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/9bec122f444854416c46c5b459d8853cc0cb2e76.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.28.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:1b:d7:f0:83:2b:09:72:5a:27:f4:4d:a3:e2:b3:80:7f:81:
57:19:76:4b:90:61:9d:fd:21:c4:01:8e:45:49:b8:69:a2:71:
f8:62:6b:07:42:fa:57:62:ac:6f:49:26:e5:2e:3c:88:9b:a5:
41:77:b3:bc:58:f4:bd:41:d6:82:8f:a5:57:77:d8:ad:c2:d7:
89:76:9d:83:41:69:09:80:b2:87:d1:e4:71:ba:10:71:37:77:
ae:16:58:af:ce:c7:67:fd:f0:10:f4:7b:c5:4a:a2:4a:fc:f0:
66:93:82:1f:e3:f4:50:62:b4:39:68:75:51:e2:ff:f4:0c:e0:
3e:03:04:c0:77:f0:08:0f:0b:33:e4:e5:74:af:e0:c5:05:55:
e1:04:ae:bf:2c:ab:05:6b:7e:39:c2:30:43:59:ed:c0:85:b8:
ed:df:b1:a4:f9:51:54:98:69:32:da:cb:55:6c:23:bd:d1:dd:
07:8a:cd:aa:e8:5a:dd:07:60:7a:ff:32:31:b8:59:37:49:28:
50:c5:0e:41:07:16:33:90:d5:f1:5a:95:1b:70:36:0b:72:36:
bb:21:49:f9:8f:62:9a:a0:0a:24:d3:ae:d9:d6:da:6b:85:a0:
a2:ed:64:0c:0e:e7:0a:7c:a7:8a:d5:8c:86:fd:ce:a5:7b:ca:
5e:06:2c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 21:14:22 2023 by rpki-client on console-fra.rpki-client.org