Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/293e1892d9db39c0980aceabe9b11364f3e27271.roa
File: 293e1892d9db39c0980aceabe9b11364f3e27271.roa (raw, json)
Hash identifier: TaLTHH7qqpNP9BbzLw0eokonkCP3tnfJbX4FCLeb5V4=
Subject key identifier: C2:EB:E6:94:82:B0:63:A7:37:81:21:C0:66:8B:D3:D8:27:6F:8A:CC
Certificate issuer: /CN=65de11d1592f5fc8dd997228321049e1fb3afa86
Certificate serial: 1E2861
Authority key identifier: 7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/293e1892d9db39c0980aceabe9b11364f3e27271.roa
Signing time: Fri 24 Mar 2023 08:30:48 +0000
ROA not before: Thu 23 Mar 2023 08:30:48 +0000
ROA not after: Sat 22 Mar 2025 08:30:48 +0000
asID: 269782
IP address blocks: 45.184.248.0/23 maxlen: 23
45.184.248.0/24 maxlen: 24
45.184.249.0/24 maxlen: 24
45.184.250.0/23 maxlen: 23
45.184.250.0/24 maxlen: 24
45.184.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1976417 (0x1e2861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65de11d1592f5fc8dd997228321049e1fb3afa86
Validity
Not Before: Mar 23 08:30:48 2023 GMT
Not After : Mar 22 08:30:48 2025 GMT
Subject: CN=293e1892d9db39c0980aceabe9b11364f3e27271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:02:50:f4:0d:5a:66:2a:9f:9e:22:d5:2b:
26:af:b8:5d:ee:c4:a4:26:dd:6a:bb:33:9e:4b:3b:
04:db:45:1c:2f:df:fe:08:da:e6:a7:9a:d8:39:7f:
28:fa:77:e1:21:93:d7:e3:7a:f3:74:cd:24:66:19:
e5:0b:1f:99:59:d4:4c:47:79:40:47:61:1c:2e:5e:
b4:91:f0:10:ff:49:1d:70:f2:bf:70:05:d1:b0:5b:
03:0a:fe:f6:0b:c3:8b:68:0c:97:9f:76:82:7d:68:
7f:2a:7f:8f:32:37:57:2a:ed:23:e7:22:6e:15:a0:
34:80:40:d8:36:7f:58:6c:e2:3d:16:6c:dc:fa:01:
ab:6e:9a:cb:af:67:12:3c:dc:a7:a3:97:18:1d:19:
9a:35:04:c0:39:b4:f9:b3:11:65:30:b4:9e:91:13:
b2:c1:30:a6:94:5b:29:c2:d8:bb:ab:b5:47:0e:94:
64:b0:ba:35:29:ae:44:a1:19:23:20:1f:6e:6f:ad:
80:ec:26:58:85:ea:9f:b4:55:95:61:b9:d1:8e:63:
25:d4:1b:08:e5:79:8a:ff:e9:e5:b4:70:b8:11:cb:
14:62:2c:a0:2f:a1:10:61:5f:12:0c:0b:a8:6b:4d:
99:ef:ce:58:e4:8c:47:7c:b5:d2:21:94:4d:2e:52:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EB:E6:94:82:B0:63:A7:37:81:21:C0:66:8B:D3:D8:27:6F:8A:CC
X509v3 Authority Key Identifier:
keyid:7C:A8:1C:3E:0B:D4:DD:89:2F:F1:12:25:F9:33:C9:76:45:CE:97:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65de11d1592f5fc8dd997228321049e1fb3afa86.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/293e1892d9db39c0980aceabe9b11364f3e27271.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5d21f699-4133-46b4-92ff-6fedc65f35ed/65de11d1592f5fc8dd997228321049e1fb3afa86.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.184.248.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:8b:7a:d0:87:27:a1:62:4f:72:1a:be:95:b2:53:df:8e:c8:
46:6b:db:80:ef:c4:62:cb:85:fa:ab:a8:38:c5:c6:50:c1:b6:
fd:a3:ee:35:3b:17:fb:1f:24:1f:de:18:c1:72:0b:f8:fb:b6:
7d:40:8d:26:09:ae:e7:06:be:bb:d5:e6:f6:b9:95:b2:44:ce:
58:eb:aa:42:ba:3b:af:25:aa:dc:bb:3d:d9:0e:4b:1f:8d:98:
1d:0a:ac:92:1b:d4:0f:76:ad:db:99:f7:35:a8:a3:e3:1e:d1:
e6:94:3b:cc:8a:b9:c3:ca:56:0d:01:16:e6:30:27:48:19:18:
10:e3:3e:6b:62:34:71:8e:c5:b0:f3:22:1e:43:18:e0:80:53:
d2:c7:7d:15:73:43:be:9d:62:01:5a:ac:b7:94:55:c6:03:1c:
b7:65:5c:b8:bf:db:c7:80:f4:64:66:ec:e3:84:9a:a1:3c:cd:
5b:60:28:3d:7f:18:8c:63:fa:53:84:8d:6a:2f:6b:1b:85:e1:
16:2a:46:9f:76:50:99:c4:34:0d:29:cd:26:07:2b:54:c2:87:
57:f4:20:63:99:d3:e8:08:a7:59:06:31:1e:13:fb:83:30:52:
30:3f:13:8c:a9:0c:cc:98:41:98:b8:e2:27:82:1f:54:ca:1c:
0f:dd:26:99
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHihhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY1
ZGUxMWQxNTkyZjVmYzhkZDk5NzIyODMyMTA0OWUxZmIzYWZhODYwHhcNMjMwMzIz
MDgzMDQ4WhcNMjUwMzIyMDgzMDQ4WjAzMTEwLwYDVQQDEygyOTNlMTg5MmQ5ZGIz
OWMwOTgwYWNlYWJlOWIxMTM2NGYzZTI3MjcxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAujoCUPQNWmYqn54i1Ssmr7hd7sSkJt1quzOeSzsE20UcL9/+
CNrmp5rYOX8o+nfhIZPX43rzdM0kZhnlCx+ZWdRMR3lAR2EcLl60kfAQ/0kdcPK/
cAXRsFsDCv72C8OLaAyXn3aCfWh/Kn+PMjdXKu0j5yJuFaA0gEDYNn9YbOI9Fmzc
+gGrbprLr2cSPNyno5cYHRmaNQTAObT5sxFlMLSekROywTCmlFspwti7q7VHDpRk
sLo1Ka5EoRkjIB9ub62A7CZYheqftFWVYbnRjmMl1BsI5XmK/+nltHC4EcsUYiyg
L6EQYV8SDAuoa02Z785Y5IxHfLXSIZRNLlKvnwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMLr5pSCsGOnN4EhwGaL09gnb4rMMB8GA1UdIwQYMBaAFHyoHD4L1N2JL/ES
JfkzyXZFzpfTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjVkZTEx
ZDE1OTJmNWZjOGRkOTk3MjI4MzIxMDQ5ZTFmYjNhZmE4Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWQyMWY2OTktNDEzMy00NmI0LTkyZmYtNmZlZGM2
NWYzNWVkLzI5M2UxODkyZDlkYjM5YzA5ODBhY2VhYmU5YjExMzY0ZjNlMjcyNzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZDIxZjY5OS00MTMzLTQ2YjQtOTJmZi02ZmVk
YzY1ZjM1ZWQvNjVkZTExZDE1OTJmNWZjOGRkOTk3MjI4MzIxMDQ5ZTFmYjNhZmE4
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi24+DANBgkqhkiG9w0BAQsFAAOCAQEAXot60IcnoWJPchq+
lbJT347IRmvbgO/EYsuF+quoOMXGUMG2/aPuNTsX+x8kH94YwXIL+Pu2fUCNJgmu
5wa+u9Xm9rmVskTOWOuqQro7ryWq3Ls92Q5LH42YHQqskhvUD3at25n3Naij4x7R
5pQ7zIq5w8pWDQEW5jAnSBkYEOM+a2I0cY7FsPMiHkMY4IBT0sd9FXNDvp1iAVqs
t5RVxgMct2VcuL/bx4D0ZGbs44SaoTzNW2AoPX8YjGP6U4SNai9rG4XhFipGn3ZQ
mcQ0DSnNJgcrVMKHV/QgY5nT6AinWQYxHhP7gzBSMD8TjKkMzJhBmLjiJ4IfVMoc
D90mmQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:20 2023 by rpki-client on console-fra.rpki-client.org