Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5bad669a-e638-483d-98bb-dbc9174ad9f3/d8b0a97744cdadd7e581a9ea89c4f86695f990b3.roa
File: d8b0a97744cdadd7e581a9ea89c4f86695f990b3.roa (raw, json)
Hash identifier: f1ihFkspD1Px66YlrSmDny4z4K/jWFkcS85PFZ6LhMI=
Subject key identifier: 8E:F1:8D:EC:19:2A:B1:D2:2C:98:AE:BC:51:52:F3:99:5D:F9:CF:E4
Certificate issuer: /CN=972388b64b903e27a472d5d232b9cd9c3a2594d4
Certificate serial: 172750
Authority key identifier: 4C:B6:7B:0A:04:91:31:73:32:0E:78:F6:DE:04:64:44:F3:AF:A0:36
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/972388b64b903e27a472d5d232b9cd9c3a2594d4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5bad669a-e638-483d-98bb-dbc9174ad9f3/d8b0a97744cdadd7e581a9ea89c4f86695f990b3.roa
Signing time: Sat 16 Jul 2022 22:08:32 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 267897
IP address blocks: 45.177.80.0/22 maxlen: 22
45.177.80.0/23 maxlen: 23
45.177.82.0/23 maxlen: 23
45.177.80.0/24 maxlen: 24
45.177.81.0/24 maxlen: 24
45.177.82.0/24 maxlen: 24
45.177.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1517392 (0x172750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=972388b64b903e27a472d5d232b9cd9c3a2594d4
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=d8b0a97744cdadd7e581a9ea89c4f86695f990b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fc:de:be:f4:33:b2:03:20:e4:83:14:bc:53:
ca:75:2c:0a:2b:91:01:bc:db:67:fc:5f:70:86:cd:
d4:29:d9:8f:14:08:3f:1a:3c:8d:81:e5:7d:6b:31:
cf:ae:ad:92:7f:91:52:2a:bb:cc:4d:e8:cc:b4:49:
11:04:69:bd:9b:0a:aa:ac:2c:f8:d3:c2:c4:66:12:
fd:fe:de:fa:92:0f:dc:bf:75:e9:4b:73:a6:8e:71:
b8:f3:ff:12:84:68:9c:1b:4a:31:c4:e9:60:de:88:
ad:cf:2a:41:47:be:c9:40:0c:69:07:04:36:a9:56:
47:8e:0e:10:3e:76:20:ac:b4:e8:4c:1f:fa:05:6e:
7c:61:bb:5e:ed:20:00:cf:c4:5d:f2:13:fc:4e:81:
85:55:62:18:ec:33:2d:bd:13:68:75:a7:a8:b1:70:
ef:3b:2b:8b:3b:75:49:1c:4b:31:94:6a:31:bf:32:
21:dc:f3:a0:78:2f:23:04:cb:43:02:65:fb:de:b0:
88:d1:26:a7:3b:a8:35:c7:05:a0:f3:79:d3:a5:6b:
aa:20:ca:63:7a:2b:a7:6e:4b:49:7c:96:08:7b:d8:
0c:35:fc:1b:21:5b:61:3c:64:e7:0b:de:38:e1:e0:
5d:c9:32:5d:84:fe:a2:52:34:69:1a:b3:41:43:23:
37:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F1:8D:EC:19:2A:B1:D2:2C:98:AE:BC:51:52:F3:99:5D:F9:CF:E4
X509v3 Authority Key Identifier:
keyid:4C:B6:7B:0A:04:91:31:73:32:0E:78:F6:DE:04:64:44:F3:AF:A0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/972388b64b903e27a472d5d232b9cd9c3a2594d4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5bad669a-e638-483d-98bb-dbc9174ad9f3/d8b0a97744cdadd7e581a9ea89c4f86695f990b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5bad669a-e638-483d-98bb-dbc9174ad9f3/972388b64b903e27a472d5d232b9cd9c3a2594d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.80.0/22
Signature Algorithm: sha256WithRSAEncryption
39:84:16:66:ce:0f:c4:fa:eb:46:3e:b8:32:fa:de:ac:a7:e2:
f0:60:87:e2:c2:30:59:0d:49:0c:2d:0a:5e:8e:20:6f:bc:6b:
f9:1b:c8:e4:11:21:ae:96:79:4c:cd:ff:aa:ad:9c:ee:9e:8c:
4c:fa:52:78:9b:24:79:03:a2:7f:82:4f:88:a4:4e:f1:16:be:
1b:3f:21:d6:7d:25:b6:00:e2:f2:70:69:ba:89:14:ca:d0:32:
e5:bb:ee:e6:20:44:a0:f1:87:a5:6a:f5:15:d9:56:2b:e4:d7:
81:86:12:ac:c2:ba:2c:86:4b:a3:a1:51:4f:dd:ac:3e:fc:ca:
3f:e5:d0:a7:d8:da:d9:02:ef:c2:a0:7a:84:a2:f4:ad:a7:de:
bb:66:76:02:34:ac:3e:d5:90:d8:fc:e4:1e:21:74:68:bd:df:
d0:c8:71:15:89:38:6f:35:05:4e:60:d5:c5:17:3f:e9:04:07:
69:d3:24:1b:86:94:2a:98:05:72:c9:2e:64:c1:bb:9c:2e:eb:
fa:fb:58:8b:e2:8c:0a:84:48:1b:b8:33:ca:d6:cb:9a:af:b4:
31:b6:5a:46:cb:94:dc:1c:bc:46:c6:37:a4:6f:e6:6e:40:fe:
ff:c3:69:d4:ce:2d:8b:68:0c:2f:0b:41:49:c1:44:42:67:41:
bd:36:64:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:20 2023 by rpki-client on console-fra.rpki-client.org