Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/ee803d371c56744e3546ec42648332e4491178e3.roa
File: ee803d371c56744e3546ec42648332e4491178e3.roa (raw, json)
Hash identifier: NlwX7A1In4ttAimUHxA/wg5wqKTj5oOIGqcGZ6wMYb4=
Subject key identifier: FE:88:90:21:39:00:F2:98:EC:5E:D6:78:F4:4F:CA:B5:B7:C9:4F:E9
Certificate issuer: /CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
Certificate serial: 25A283
Authority key identifier: F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/ee803d371c56744e3546ec42648332e4491178e3.roa
Signing time: Wed 08 Nov 2023 22:23:01 +0000
ROA not before: Wed 08 Nov 2023 22:23:01 +0000
ROA not after: Sat 08 Nov 2025 22:23:01 +0000
asID: 271933
IP address blocks: 45.70.12.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 20:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2466435 (0x25a283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bdf7eba9512ec4f3179e720563bd1d6965a593
Validity
Not Before: Nov 8 22:23:01 2023 GMT
Not After : Nov 8 22:23:01 2025 GMT
Subject: CN=ee803d371c56744e3546ec42648332e4491178e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:c5:72:c1:fb:b1:87:80:10:bd:92:9f:7b:
ec:a3:7e:7e:5f:e0:88:5a:68:0e:1b:98:b0:98:88:
5f:ff:b4:15:42:b8:fc:cb:60:e7:e3:c3:a8:b7:23:
09:93:92:63:9a:1d:c6:85:91:01:8a:41:6a:75:6d:
64:0c:68:c5:6b:3a:54:f1:75:9a:36:06:6a:6c:9d:
90:d1:cc:31:a8:a7:89:2f:f6:2e:c9:47:a9:29:49:
1f:cd:f1:92:a7:0f:ed:1f:2f:a3:d9:b9:31:75:a5:
a5:6e:03:7b:70:10:77:c2:96:2b:1c:33:2f:ed:7c:
60:b6:ca:70:89:48:6e:d2:23:2d:dc:50:26:2f:53:
23:0d:18:60:63:d6:a5:34:2b:c7:b9:df:05:44:fd:
d0:13:be:49:e5:6f:bb:f1:3f:50:04:a9:46:fc:0e:
e7:83:a1:99:5b:6b:47:b6:e4:2a:9c:a9:1a:04:44:
bd:98:fb:c1:2d:2b:b8:f5:30:fc:20:d3:6b:90:b5:
08:36:01:50:e1:86:42:03:9e:97:1e:e0:66:e9:d7:
e1:89:5b:e4:d0:51:31:8c:e0:79:0f:ad:f2:eb:e1:
e0:0f:92:15:e6:d5:a8:fe:4a:b4:72:11:36:5c:00:
d3:7f:70:d5:53:5f:bf:72:f1:41:e9:1b:1c:04:90:
34:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:88:90:21:39:00:F2:98:EC:5E:D6:78:F4:4F:CA:B5:B7:C9:4F:E9
X509v3 Authority Key Identifier:
keyid:F4:14:BC:56:FB:CD:92:A2:6B:AF:A8:87:E2:84:91:D0:6B:AB:6D:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19bdf7eba9512ec4f3179e720563bd1d6965a593.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/ee803d371c56744e3546ec42648332e4491178e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/583a744e-f7d2-4e1c-a516-e399c27ff669/19bdf7eba9512ec4f3179e720563bd1d6965a593.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.12.0/23
Signature Algorithm: sha256WithRSAEncryption
38:1d:e3:3b:fc:d4:b8:14:cb:c4:4c:19:16:7a:2b:94:7b:f4:
72:86:4a:0f:93:c6:34:cc:e3:5d:59:1f:fc:60:84:88:37:e6:
cb:55:5d:e7:53:38:67:8b:14:4c:5b:12:8f:cd:a2:19:df:5b:
f6:8b:ed:70:d8:9d:ad:bb:7b:18:2b:d6:92:55:dd:f1:39:ca:
cc:c0:c5:09:89:12:c1:19:51:77:4a:ef:30:c1:0a:52:04:ec:
11:c6:95:1a:29:5c:ce:8f:09:89:8c:fa:7a:9d:33:2a:70:73:
fd:50:7b:39:2b:db:30:c6:27:5f:a2:a7:11:04:48:16:5b:89:
92:62:52:74:e8:30:95:0d:2d:11:d1:78:b3:7c:60:07:e3:71:
bd:66:1f:14:bc:ad:e9:cd:55:d5:ce:38:52:4e:a6:f3:4b:82:
ed:dc:71:8f:98:d6:9a:db:c5:04:3a:cd:6d:62:68:f6:cd:93:
34:1c:20:13:03:00:a7:ff:1e:ff:33:72:97:d6:19:d1:40:7d:
98:d8:ab:40:95:93:b3:95:be:3a:d8:24:70:a9:e6:cf:94:47:
5c:f7:b6:fe:9a:c0:a3:f1:50:ea:cf:92:0f:09:08:d3:38:3f:
20:e3:ff:55:e0:7b:8d:7a:18:7f:dc:b8:0a:12:66:38:12:6c:
a1:10:f2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 00:13:23 2024 by rpki-client on console-fra.rpki-client.org